bopscrk

bopscrk Generate smart and powerful wordlists for targeted attacks Explore the docs » View Demo · Report Bug · Request Feature Table of contents 1. About the Project What's new Built with 2. Getting started Installation Run interactive mode 3. Usage How it works Tips Advanced usage Lyricpass 4...

bopscrk

bopscrk 표적 공격을 위한 스마트하고 강력한 워드리스트 생성 문서 살펴보기 » 데모 보기 · 버그 신고 · 기능 요청 목차 1. 프로젝트 소개 새로운 기능 사용된 기술 2. 시작하기 설치 대화형 모드 실행 3. 사용법 작동 방식 팁 고급 사용법 Lyricpass 4. 로드맵 5. 기여하기 기여자 6. 변경 내역 7. 라이선스 8. 연락처 9. 감사의 말 10. 법적 고지 프로젝트 소개 표적 공격 워드리스트 생성기 : 대상에 관한 개인 정보를 입력하면 모든 단어를 결합하고 결과를 가능한 비밀번호로 변환합니다. lyricpa...

dhcpoptinj

DHCP option injector Have you ever wanted to intercept DHCP requests and squeeze in a few extra DHCP options, unbeknownst to the sender? Probably not. However, should the need ever come, dhcpoptinj will hopefully help you. Why There can be many a reason to mangle DHCP requests, although chances a...

osint-scraper

Social Recon This application locates and compiles information about online personalities, given a username and/or email address. Use this to investigate your own online presence, summarize the digital footprint of someone you know, or uncover the person behind a specific username. Getting Starte...

ClientInspectorV2

ClientInspectorv2 소개 당신이 통제하고 있습니까? - 아니면 패치, 안티바이러스, BitLocker 활성화 같은 핵심 인프라 프로세스가 표류하고 있습니까? 또는 고급 인벤토리 를 수행하여 Lenovo 또는 Dell 보증 상태를 조회하고 싶다면 계속 읽어보세요. ClientInspector 를 확인해 보세요. 이 도구는 완전한 클라이언트 환경 에 대한 탁월한 통찰력 을 얻는 데 도움을 줍니다. ClientInspector는 커뮤니티에 무료 로 제공됩니다. Azure 로그 수집 파이프라인 , Azure 데이터 수집...

toutatis

Toutatis 👋 Hi there! For any professional inquiries or collaborations, please reach out to me at: [email protected] 📧 Preferably, use your professional email for correspondence. Let's keep it short and sweet, and all in English! Toutatis is a tool that allows you to extract information from...

toutatis

Toutatis 👋 안녕하세요! 전문적인 문의나 협업이 필요하시면 다음 주소로 연락해 주세요: [email protected] 📧 가급적이면 전문 이메일을 사용해 주세요. 간결하고 달콤하게, 모두 영어로 부탁드립니다! Toutatis는 인스타그램 계정에서 이메일, 전화번호 등 정보를 추출할 수 있는 도구입니다 BTC 기부 : 1FHDM49QfZX6pJmhjLE5tB2K6CaTLMZpXZ 💡 사전 요구 사항 Python 3 🛠️ 설치 PyPI로 설치 pip install toutatis Github으로 설치 git...

brawl-public-game-001

BRAWL One of the challenging problems for cyber security researchers developing detection and response capabilities is finding a realistic environment in which to test their hypothesis and capabilities. The cheapest method is to test capabilities on a small lab network. But this environment is...

ranger

ranger A tool to support security professionals access and interact with remote Microsoft Windows based systems. This project was conceptualized with the thought process, we did not invent the bow or the arrow, just a more efficient way of using it. Ranger is a command-line driven attack and...

gftrace

gftrace A command line Windows API tracing tool for Golang binaries. Note: This tool is a PoC and a work-in-progress prototype so please treat it as such. Feedbacks are always welcome! How it works? Although Golang programs contains a lot of nuances regarding the way they are built and their...

CrossC2Kit

CrossC2 Kit README | 中文文档 CrossC2Kit는 CrossC2에서 파생된 유닉스 플랫폼 기반의 침투 확장 도구입니다. 오픈 소스 스크립트 엔진인 Aggressor Script 를 사용합니다. 레드 팀의 운영 과정을 시뮬레이션하고 CobaltStrike 클라이언트를 확장하는 자동화를 만드는 데 사용할 수 있습니다. CrossC2Kit 은 CobaltStrike 의 원래 기능을 계승하므로 개발 및 작성 문법은 여전히 공식 문서를 참조합니다:...

krbrelayx

Krbrelayx - Kerberos relaying and unconstrained delegation abuse toolkit Toolkit for abusing Kerberos. Requires impacket, ldap3 and dnspython to function. It is recommended to install impacket from git directly to have the latest version available. More info about this toolkit available in my blo...

GHSA-HJX8-QV73-F7CM Vikunja: Webhooks and link shares survive every revocation path, so a removed collaborator keeps a live feed

Summary A collaborator removed from a project keeps a live, automatic feed of that project's contents, because nothing on any revocation path deletes the webhook they created while they had access. Vikunja already has a revocation-cleanup routine that deletes other derived rows for exactly this...

Vikunja: Webhooks and link shares survive every revocation path, so a removed collaborator keeps a live feed

Summary A collaborator removed from a project keeps a live, automatic feed of that project's contents, because nothing on any revocation path deletes the webhook they created while they had access. Vikunja already has a revocation-cleanup routine that deletes other derived rows for exactly this...

RpcInvestigator

RPC 조사기 저희의 블로그 포스트 공지사항을 읽어보세요. RPC 조사기RPCI는 .NET/C Windows Forms UI 애플리케이션으로, Windows RPC 엔드포인트에 대한 고급 검색 및 분석 인터페이스를 제공합니다. 이 도구는 NtApiDotNet 플랫폼의 기존 핵심 RPC 기능을 둘러싼 시각적 인터페이스를 제공하며, 다음을 포함합니다: 모든 활성 ALPC RPC 서버 열거 모든 PE 파일에서 RPC 서버 파싱 프로세스 및 해당 프로세스가 로드한 모듈서비스 포함에서 RPC 서버 파싱 심볼 서버에서 심볼 정보 가져오기...

opa

Open Policy Agent Open Policy Agent OPA is an open source, general-purpose policy engine that enables unified, context-aware policy enforcement across the entire stack. OPA is proud to be a graduated project in the Cloud Native Computing Foundation CNCF landscape. For details read the CNCF...

GHSA-5974-GFQC-WRCM Contao: Improper access control in the table access voter

Due to a caching defect in the security voter that governs table-level access to Contao's Data Container DCA backend, a low-privileged, non-admin backend user can obtain unauthorized read, create, update, and delete access to database tables outside their assigned module permissions. This include...

Contao: Improper access control in the table access voter

Due to a caching defect in the security voter that governs table-level access to Contao's Data Container DCA backend, a low-privileged, non-admin backend user can obtain unauthorized read, create, update, and delete access to database tables outside their assigned module permissions. This include...

Sublist3r

About Sublist3r Sublist3r is a python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Sublist3r enumerates subdomains using many search engines such as Google, Yahoo, Bing,...

CVE-2020-8193

Citrix ADC 脆弱性 CVE リスト https://support.citrix.com/article/CTX276688 if/while コードの追加 https://dmaasland.github.io/posts/citrix.html responsestr = json.dumpsr.headers.dict'store' if r.statuscode == 406 and "Content-Disposition" in responsestr and r.headers"Accept-Ranges" == "bytes" and...