1359839 matches found
log4j-remediation-tools
log4j-remediation-tools Tools for finding and reproducing the CVE-2021-44228 log4j2 vulnerability Tools find-vulnerabilities: determine heuristically whether a running JVM is vulnerable confirm-vulnerabilities: determine with 100% accuracy whether a running JVM is vulnerable Usage Both of these...
redteam-plan
π₯ π Planning a Red Team exercise This document helps inform red team planning by contrasting against the very specific red team style described in Red Teams. This method expresses several biases to optimize for blue team value and enthusiasm. It specifically avoids attempts to motivate by red tea...
BlackNET
BlackNET π Free advanced and modern Windows botnet with a nice and secure PHP panel developed using VB.NET. About BlackNET π€ Free advanced and modern Windows botnet with a nice and secure PHP panel built using VB.NET. this botnet controller comes with a lot of features and the most secure panel f...
scan-for-webcams
scan-for-webcams π· δΈζζζ‘£ Note I switched to a new method of installing this program for a better developer experience and better modifiability. As a result, the PYPI package scan-for-webcams is not maintained anymore, and should be considered deprecated. btw: we have a discord channel ! join Table...
AtlasReaper
AtlasReaper AtlasReaper is a command-line tool developed for offensive security purposes, primarily focused on reconnaissance of Confluence and Jira. It also provides various features that can be helpful for tasks such as credential farming and social engineering. The tool is written in C. Blog...
dorkscout
dorkscout dokrscout is a tool to automate the finding of vulnerable applications or secret files around the internet throught google searches, dorkscout first starts by fetching the dorks lists from https://www.exploit-db.com/google-hacking-database and then it scans a given target or everything ...
XMGoat
XMGoat Overview XM Goat is composed of XM Cyber terraform templates that help you learn about common Azure security issues. Each template is a vulnerable environment, with some significant misconfigurations. Your job is to attack and compromise the environments. Hereβs what to do for each...
CLZero
CLZero A project for fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors. About Thank you to @albinowax, @defparam and @d3d else this tool would not exist. Inspired by the tool Smuggler all attack gadgets adapted from Smuggler and...
OnionHarvester
OnionHarvester V2 A small TOR Onion Address harvester for checking if the address is available or not. The program uses the TOR local socks5 proxy for finding all the Onion Addresses which are alive and ports 80 and 443 are available. Details about the project and TOR onion harvesting is publishe...
lifer
lifer A forensic tool for Windows link file examinations i.e. Windows shortcuts SYNOPSIS 'lifer' is a Windows or nix command-line tool inspired by the whitepaper 'The Meaning of Link Files in Forensic Examinations' by Harry Parsonage and available here. It started life as a lightweight tool that ...
LAMMA-beta
LAMMA BETA Vulnerability Assessment Framework for all the Crypto Implimentations. An Open Source Initiative by - SECURITY MONX Lamma Framework Documentation beta File Name : README Author : @ajithatti Org : Security Monx Version : 0.0.1 Purpose : Gives introduction of Lamma Framework beta Table O...
MemTracer
MemTracer MemTracer is a tool that offers live memory analysis capabilities, allowing digital forensic practitioners to discover and investigate stealthy attack traces hidden in memory. The MemTracer is implemented in Python language, aiming to detect reflectively loaded native .NET framework...
RTA
Red Team Automation RTA RTA provides a framework of scripts designed to allow blue teams to test their detection capabilities against malicious tradecraft, modeled after MITRE ATT&CK. RTA is composed of python scripts that generate evidence of over 50 different ATT&CK tactics, as well as a compil...
wordpress-shell
wordpress-shell Cheap & Nasty Wordpress Command Execution Shell. Execute Commands as the webserver you are serving wordpress with! Uploaded shell will probably be at /wp-content/plugins/shell/shell.php Install To install the shell, we are assuming you have administrative access to the Wordpress...
c2-cloud
About The Project The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cloud. It can manage several simultaneous backdoor sessions with a user-friendly...
CVE-2024-6387
CVE-2024-6387 This script, created by R4Tw1z, is designed to scan IP addresses to check if they are running a potentially vulnerable version of OpenSSH.This script is a faster and simpler version of an OpenSSH vulnerability scanner. The tool leverages multi-threading to optimize scanning...
oauthseeker
OAuthSeeker OAuthSeeker is an red team tool for performing phishing attacks using malicious OAuth applications to compromise user identities within Microsoft Azure and Office365. π Key Features OAuthSeeker provides the following key features: Azure App OAuth Phishing: Perform OAuth phishing attac...
NMapGUI
Codacy Badge NMapGUI is an advanced graphical user interface for NMap network analysis tool. It allows to extend and ease the typical usage of NMap by providing a visual and fast interface with the application THIS PROJECT IS CURRENTLY UNMAINTAINED - For the moment Java8 is required. Later...
scriptkiddi3
Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using shell script and open source tools. How it works β’ Installation β’ Install with Docker β’ Usage β’ MODES β’ Important Notes | Webhook configurations β’ For Develope...
nuubi
Nuubi Tools Scanner, Recon. Details Options: -h/--help | Show help message and exit Arguments: -b/--banner | Banner grabing of target ip address -s/--subnet | Subnetlookup of target -c/--cms | Cms detect with headers -d/--dns | Dnslookup of target domain -e/--extract | Extract links from target...