sysflow

SysFlow: Cloud-native system telemetry pipeline This repository hosts the documentation and issue tracker for all SysFlow projects. Quick reference Documentation : the SysFlow Documentation Where to get help : the SysFlow Community Slack Where to file issues : the github issue tracker Source of...

wphardening

WPHardening Fortify the security of any WordPress installation. ❮ NOTE ❯ This tool releases new versions on a regular basis. Make sure to update your dependencies frequently to get the latest version. Check out the changelog or CHANGELOG.md to learn about the new features. Installation Installing...

mediator

Mediator is an end-to-end encrypted reverse shell in which the operator and the shell connect to a "mediator" server that bridges the connections. This removes the need for the operator/handler to set up port forwarding in order to listen for the connection. Mediator also allows you to create...

pmanager

Pmanager Demo Description Store and retrieve your passwords from a secure offline database. Check if your passwords has leaked previously to prevent targeted password reuse attacks. Why develop another password manager ? This project was initially born from my desire to learn Rust. I was tired of...

m365_groups_enum

Enumerate Microsoft 365 Groups in a tenant with their metadata Description The allgroups.py script allows to enumerate all Microsoft 365 Groups in a Azure AD tenant with their metadata: name visibility: public or private description email address owners members Teams enabled? SharePoint URL e.g...

BadBlood

BadBlood BadBlood by Secframe fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an...

cookie_crimes

Chrome Cookie Extraction Without Root This will print out a user's Chrome cookies. You don't need to have their password or be root to use it. nice nice nice nice nice. If you are not the kind of person who regularly gets the ability to execute code on other people's computers, you probably don't...

CVE-2024-21626

概要 再現手順 カーネルが 5.4,4.19,.. 以上であり、/proc/kallsyms に openat2 が存在することを確認してください。v1.0.0-rc93= runc =1.1.11 $ grep openat2 /proc/kallsyms ffffffffa64290d0 T pfxauditopenat2how ffffffffa64290e0 T auditopenat2how ffffffffa666de90 t pfxdosysopenat2 ffffffffa666dea0 t dosysopenat2 ffffffffa666e020 t...

lazyrecon

/ \ / / \ /// / // Y / \ /| | | | / | / / \ / | /|| \ | / | / || |\ || | |/| |-||/ / / / | /| / | | /|| | || // |/// /\\|// | Usage ./lazyrecon.sh -d domain.com To exclude particular subdomains: ./lazyrecon.sh -d domain.com -e excluded.domain.com,other.domain.com About...

popeye

Popeye: Kubernetes Live Cluster Linter Popeye is a utility that scans live Kubernetes clusters and reports potential issues with deployed resources and configurations. As Kubernetes landscapes grows, it is becoming a challenge for a human to track the slew of manifests and policies that orchestra...

CVE-2012-2982

CVE-2012-2982 のこの PoC エクスプロイトは、TryHackMe の「Intro to PoC scripting」ルームの演習として書かれました。 ルームはこちら: https://tryhackme.com/room/intropocscripting 当初は Python で進めるつもりでしたが、代わりに Rust のスキルを練習することにしました。 また、Github 上の非 Metasploit 実装のほとんどすべてが Python であることを知り、何か新しいものを提供するのが面白いかもしれないと考えました。 使い方 注: プログラムはデフォルトで Netca...

scare

scare - 简单可配置的汇编 REPL 与模拟器 scare 是一个面向命令行的多架构汇编 REPL 和模拟器。 现有的现代汇编 REPL 并不多。已有的要么是不透明的 Web 应用，要么局限于特定的架构/平台。scare 是为那些想要测试、实验或以其他方式摆弄汇编代码的人而构建的。所有汇编后的代码都在模拟器中运行，该模拟器只执行你提供的代码。底层 scarelib 库的多架构设计旨在实现模块化，以便能够快速添加新的架构。 版本 0.3.0 是 scare 的首个公开发布版本。 核心功能 在 REPL 环境中编写汇编 加载或保存你编写的程序 在程序中向后单步执行...

msfpc

MSFvenom Payload Creator MSFPC A quick way to generate various "basic" Meterpreter payloads via msfvenom part of the Metasploit framework. About MSFvenom Payload Creator MSFPC is a wrapper to generate multiple types of payloads, based on users choice. The idea is to be as simple as possible only...

awesome-cyber-skills

🛡️ awesome-cyber-skills A curated list of hacking environments where you can train your cyber skills free, legally and safely. 👋 Welcome Welcome to awesome-cyber-skills — your one-stop library for free, legal, and safe places to train your cybersecurity skills. 📑 Table of Contents 📖 About the List...

garble

garble go install mvdan.cc/garble@latest or @master Obfuscate Go code by wrapping the Go toolchain. Requires Go 1.27 or later. garble build build flags packages The tool also supports garble test to run tests with obfuscated code, garble run to obfuscate and execute simple programs, garble revers...

bopscrk

bopscrk Generate smart and powerful wordlists for targeted attacks Explore the docs » View Demo · Report Bug · Request Feature Table of contents 1. About the Project What's new Built with 2. Getting started Installation Run interactive mode 3. Usage How it works Tips Advanced usage Lyricpass 4...

dhcpoptinj

DHCP option injector Have you ever wanted to intercept DHCP requests and squeeze in a few extra DHCP options, unbeknownst to the sender? Probably not. However, should the need ever come, dhcpoptinj will hopefully help you. Why There can be many a reason to mangle DHCP requests, although chances a...

osint-scraper

Social Recon This application locates and compiles information about online personalities, given a username and/or email address. Use this to investigate your own online presence, summarize the digital footprint of someone you know, or uncover the person behind a specific username. Getting Starte...

ClientInspectorV2

Introduction to ClientInspector v2 あなたはコントロールできていますか？ - それとも、パッチ適用、アンチウイルス、BitLocker有効化 などのコアインフラストラクチャプロセスが逸脱していませんか？または、LenovoやDellの保証に対して保証状態 を確認できる高度なインベントリ を実行したいですか？それなら、読み続けてください。 ClientInspector をチェックしてください。これにより、完全なクライアント環境 に関する素晴らしい洞察 を得ることができます。 ClientInspector はコミュニティに無料...

toutatis

Toutatis 👋 Hi there! For any professional inquiries or collaborations, please reach out to me at: [email protected] 📧 Preferably, use your professional email for correspondence. Let's keep it short and sweet, and all in English! Toutatis is a tool that allows you to extract information from...