CVE-2019-9193

CVE-2019–9193 - PostgreSQL 9.3-12.3 Autenticado Ejecución Remota de Código Prueba de Concepto Las bases de datos PostgreSQL desde la versión 9.3 hasta la 12.3 la última probada son vulnerables a Ejecución Remota de Código Autenticado. Incluso si el equipo de desarrollo no lo considera una...

pbtk

pbtk - Reverse engineering Protobuf apps Protobuf is a serialization format developed by Google and used in an increasing number of Android, web, desktop and more applications. It consists of a language for declaring data structures , which is then compiled to code or another kind of structure...

Misconfiguration-Manager

Misconfiguration Manager Remediation Quick Start 1. Review the list of known and documented Attack Techniques and corresponding Defense Techniques to identify issues that may be present in your environment and how to remediate them Refer to this introduction to the project 2. Run ConfigManBearPig...

ssl-kill-switch2

SSL Kill Switch 2 Blackbox tool to disable SSL/TLS certificate validation - including certificate pinning - within iOS and macOS applications. Second iteration of https://github.com/iSECPartners/ios-ssl-kill-switch . Description Once loaded into an iOS or macOS application, SSL Kill Switch 2 will...

TripleCross

TripleCross TripleCross is a Linux eBPF rootkit that demonstrates the offensive capabilities of the eBPF technology. TripleCross is inspired by previous implant designs in this area, notably the works of Jeff Dileo at DEFCON 271, Pat Hogan at DEFCON 292, Guillaume Fournier and Sylvain Afchain als...

Nmap-Cheat-Sheet

Nmap-Cheat-Sheet Nmap Target Selection Scan a single IP nmap 192.168.1.1 Scan a host nmap www.testhostname.com Scan a range of IPs nmap 192.168.1.1-20 Scan a subnet nmap 192.168.1.0/24 Scan targets from a text file nmap -iL list-of-ips.txt Nmap Port Selection Scan a single Port nmap -p 22...

CloakQuest3r

If you find this GitHub repo useful, please consider giving it a star! ⭐️ CloakQuest3r is a Python-based security research tool designed to analyze and identify potential origin IP exposure of websites protected by Cloudflare and other reverse proxy or CDN services. Websites often rely on...

reverse-skill

reverse-skill Cybersecurity Skills Router · 逆向技能路由包 Navigate the dark waters, sail against the stream. About · Getting Started · Usage · Routing · AI Bootstrap · Contributing 🌐 中文 About If you are an AI Agent, jump toREADMEAI.md and follow the instructions strictly. When an AI agent Claude Code,...

ThreatHunting

ThreatHunting | A Splunk app mapped to MITRE ATT&CK to guide your threat hunts This is a Splunk application containing several dashboards and over 130 reports that will facilitate initial hunting indicators to investigate. You obviously need to be ingesting Sysmon data into Splunk, a good...

www-community

OWASP Community Pages OWASP Community Pages is a repository for community contributions for security-related content. The documents here create the website at https://owasp.org/www-community/. Contributing We welcome contributions for new content and updates to current pages. This repository uses...

mimikatz

mimikatz mimikatz is a tool I've made to learn C and make somes experiments with Windows security. It's now well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. .. mimikatz 2....

Orbit

ＯＲＢＩＴ Blockchain Transactions Investigation Tool 3.2-blue.svg" Introduction Orbit is designed to explore network of a blockchain wallet by recursively crawling through transaction history. The data is rendered as a graph to reveal major sources, sinks and suspicious connections. Note: Orbit only...

nebula

Nebula Cybersecurity harness built around the operator Acknowledgement First, I would like to thank Almighty God, who is the source of all knowledge. Without Him, this would not be possible. Use Nebula only on systems and networks you own or are explicitly authorized to test. Nebula assistant Fin...

system_prompts_leaks

Thanks to Open Source Agent Analytics Understand your agents in production System Prompts Leaks The full verbatim system prompts behind the most popular chatbots in the world. Carefully curated and complete. Feel free to open up a PR or get in contact if you got a different result. The Washington...

external_tcpdump_CVE-2018-14469

tcpdump Para reportar un problema de seguridad, envíe un correo electrónico a [email protected]. Para reportar errores y otros problemas, contribuir con parches, solicitar una característica, proporcionar comentarios generales, etc., consulte el archivo CONTRIBUTING en la raíz del árbol fuen...

CVE-2024-8698-POC

https://huydoppa.hashnode.dev/analyst-cve-2024-8698-keycloak-with-zero-knowledge-about-keycloak...

kitty

Introduction | Sulley: Boo? | Boo: Kitty! What is Kitty? Kitty is an open-source modular and extensible fuzzing framework written in python, inspired by OpenRCE's Sulley and Michael Eddington's and now Deja Vu Security's Peach Fuzzer . Goal When we started writing Kitty, our goal was to help us...

bore

bore A modern, simple TCP tunnel in Rust that exposes local ports to a remote server, bypassing standard NAT connection firewalls. That's all it does: no more, and no less. Installation requires Rust, see alternatives below cargo install bore-cli On your local machine bore local 8000 --to bore.pu...

metasploitable3

Metasploitable3 Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities. It is intended to be used as a target for testing exploits with metasploit. Metasploitable3 is released under a BSD-style license. See COPYING for more details. Quick-start To...

lockc

lockc is open source sofware for providing MAC Mandatory Access Control type of security audit for container workloads. The main reason why lockc exists is that containers do not contain. Containers are not as secure and isolated as VMs. By default, they expose a lot of information about host OS...