1359835 matches found
misp-wireshark
misp-wireshark misp-wireshark is a Lua plugin intended to help analysts extract data from Wireshark and convert it into the MISP Core format Usage Wireshark 1. Go to Tools located in Wireshark's top bar and click on MISP: Export to MISP format 2. Enter the export options to configure the behavior...
CVE-2016-0728
CVE-2016-0728 Seccamp 2017 Assignment The following program exploits a vulnerability present in the Linux kernel versions 3.8 to 4.4. Explain the malfunction that occurs when this program is executed. Also, write an exploit that achieves root privilege escalation by further exploiting this...
goGetBucket
goGetBucket - AWS S3 Bucket discovery through alterations and permutations Warning: code is horrible as I have only used this for personal use. When I get the time I will make it less-horrible and faster. When performing a recon on a domain - understanding assets they own is very important. AWS S...
cloudbunny
CloudBunny CloudBunny is a tool to capture the origin server that uses a WAF as a proxy or protection. You can read more about the tool here: https://tinyurl.com/y8p48wb3 How works In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye. To use the tools...
Bluefrag_CVE-2020-0022
BluefragCVE-2020-0022 This is a RCE bluetooth vulnerability on Android 8.0 and 9.0 The test python scripts in the folder cve-2020-0022 are from https://insinuator.net/2020/04/cve-2020-0022-an-android-8-0-9-0-bluetooth-zero-click-rce-bluefrag/. The original download hyperlink is...
pytmipe
PYTMIPE & TMIPE PYTMIPE PYthon library for Token Manipulation and Impersonation for Privilege Escalation is a Python 3 library for manipulating Windows tokens and managing impersonations in order to gain more privileges on Windows. TMIPE is the python 3 client which uses the pytmipe library...
Aladdin
Aladdin .-. .-''-., | //\ ";\ "/ \ , |'./ \ '='-, /\ \ || ///\ '. T |\ | /,-' '. '..-' /'/ | | '. .'-../ ,\ / '-' |/ /-----j .--..--'\ / --' '---. / '---. -'. .' .-- '. \ '--. ;.-o / '. /.8----' c-'----' Lefty @lefterispan - Nettitude Red Team - 2022 / 2023 About Aladdin is a payload generation...
ZEROScan
ZEROScan Introduction ZEROScan is a multi-threaded vulnerability detection framework. Through it, you can easily obtain or develop vulnerability detection plugins to perform penetration testing on targets. The interface and usage are inspired by the metasploit-framework, making it easy to get...
Mimir
Mimir OSINT Threat Intel Interface - Named after the old Norse God of knowledge. Mimir functions as a CLI to HoneyDB which in short is an OSINT aggregative threat intel pool. Starting the program brings you to a menu the options for which are as follows. 1. Fetch Threat Feed 5. Visualize Top...
CVE-2018-15473
CVE-2018-15473 SSH-Username-Enumeration-Exploit OpenSSH 2.3 7.7 Edited version of the original exploit: https://www.exploit-db.com/exploits/45233 Converted to Python3 Added username wordlist option How To Run Install the requirements: foo@bar:$ pip3 install -r requirements.txt For single username...
CVE-2022-30190
CVE-2022-30190 CVE-2022-30190 CVE-2022-30190 Follina POC Host exploit.html on localhost, port 80. Open the docx to pop calc. To change the remote address the doc points to, open in 7Z and edit word\rels\document.xml.rels to point to a new location. YOU MUST keep the exclamation mark. It will...
thief_raccoon
Thief Raccoon - Login Phishing Tool Thief Raccoon is a tool designed for educational purposes to demonstrate how phishing attacks can be conducted on various operating systems. This tool is intended to raise awareness about cybersecurity threats and help users understand the importance of securit...
Remote-Access-Trojan-Database
Remote-Access-Trojan-Database All samples in this database can only used for research purpose. the status of all RAT families including programming language used to write RAT stubs, the debut year of RAT families and source to determine the debut year. The forth column represents the source based...
fatcat
fatcat This tool is designed to manipulate FAT filesystems, in order to explore, extract, repair, recover and forensic them. It currently supports FAT12, FAT16 and FAT32. Tutorials & examples Building and installing You can build fatcat this way: mkdir build cd build cmake .. make And then instal...
CredNinja
This tool is intended for penetration testers who want to perform an engagement quickly and efficiently. While this tool can be used for more covert operations including some additions below, it really shines when used at the scale of a large network. At the core of it, you provide it a list of...
COMahawk
COMahawk Privilege Escalation: Weaponizing CVE-2019-1405 and CVE-2019-1322 Video Demo https://vimeo.com/373051209 Usage Compile or Download from Release https://github.com/apt69/COMahawk/releases 1. Run COMahawk.exe 2. ??? 3. Hopefully profit or 1. COMahawk.exe "custom command to run" ie...
log4j-remediation-tools
log4j-remediation-tools Tools for finding and reproducing the CVE-2021-44228 log4j2 vulnerability Tools find-vulnerabilities: determine heuristically whether a running JVM is vulnerable confirm-vulnerabilities: determine with 100% accuracy whether a running JVM is vulnerable Usage Both of these...
redteam-plan
π₯ π Planning a Red Team exercise This document helps inform red team planning by contrasting against the very specific red team style described in Red Teams. This method expresses several biases to optimize for blue team value and enthusiasm. It specifically avoids attempts to motivate by red tea...
BlackNET
BlackNET π Free advanced and modern Windows botnet with a nice and secure PHP panel developed using VB.NET. About BlackNET π€ Free advanced and modern Windows botnet with a nice and secure PHP panel built using VB.NET. this botnet controller comes with a lot of features and the most secure panel f...
scan-for-webcams
scan-for-webcams π· δΈζζζ‘£ Note I switched to a new method of installing this program for a better developer experience and better modifiability. As a result, the PYPI package scan-for-webcams is not maintained anymore, and should be considered deprecated. btw: we have a discord channel ! join Table...