reportly

Reportly is an EntraID user activity report tool. About the tool This is a tool that will help blue teams during a cloud incident. When running the tool, the researcher will enter as input a suspicious user and a time frame and will receive a report detailing the following: 1. Information about t...

otseca

Open source security auditing tool to search and dump system configuration. Introduction | Description | Requirements | Output | Parameters | Reports | How it works | Other Introduction The main goal The main assumption of creating this tool was easier and faster delivery of commands sets to be...

juniper-cve-2015-7755

Juniper CVE-2015-7755 및 CVE-2015-7756 이 저장소에는 Juniper ScreenOS 내 CVE-2015-7755 및 CVE-2015-7756 문제 분석에서 얻은 메모, 바이너리 및 관련 정보가 포함되어 있습니다. 이러한 문제에 대한 자세한 내용은 아래 URL을 참조하십시오: https://forums.juniper.net/t5/Security-Incident-Response/Important-Announcement-about-ScreenOS/ba-p/285554...

training-application-security

Free Secure Coding & Application Security Training — Open Source SCORM Exercises 40 free, open-source secure coding exercises that teach web application security the way developers learn — by exploiting real vulnerabilities like SQL injection, cross-site scripting XSS, and broken access control,...

raw-packet

Raw-packet 프로젝트 중요 정보 이 프로젝트는 교육 목적으로만 제작되었으며 법률 위반이나 개인적 이익을 위해 사용될 수 없습니다. 이 프로젝트의 저자는 이 프로젝트의 자료로 인해 발생할 수 있는 어떠한 피해에 대해서도 책임을 지지 않습니다. 설명 이 프로젝트는 raw socket에서 Ethernet, ARP, IPv4, UDP, TCP, DHCPv4, ICMPv4, IPv6, DHCPv6, ICMPv6, DNS, MDNS와 같은 네트워크 프로토콜을 구현합니다. 정보 저자: Vladimir Ivanov 공동 저자: Ilj...

log4shell-docker-lab

CVE-2021-44228용 Log4Shell 도커 랩 구성 요소 이 도커 랩은 다음 세 가지 구성 요소를 사용합니다: 취약한 spring-boot 애플리케이션 원격 코드 실행에 사용되는 .class 파일을 호스팅하는 HTTP 서버 특정 LDAP 쿼리를 HTTP 서버로 리디렉션하는 LDAP 리퍼럴 서버 도커 랩 설정 1. 도커 네트워크 docker network create log4shell 2. 도커 이미지 빌드 $ docker build -t log4shell-vulnapp vulnapp $ docker build -t...

qu1ckdr0p2

About Rapidly host payloads and post-exploitation bins over HTTP or HTTPS. Designed to be used on exams like OSCP / PNPT or CTFs HTB / etc. Pull requests and issues welcome. As are any contributions. Qu1ckdr0p2 comes with an alias and search feature. The tools are located in the qu1ckdr0p2-tools...

linux-insides

linux-insides A book-in-progress about the Linux kernel and its insides. Introduction • Chapter status • Requirements • Translations • Contributing • Author Introduction linux-insides is a book-in-progress about the Linux kernel and its insides. The goal of this project is simple - to share...

iotmap

IoTMap IoTMap — это инструмент для моделирования IoT-сетей с использованием одного или нескольких протоколов одновременно. Проект находится в разработке и является частью диссертационной работы по безопасности Интернета вещей. Данный репозиторий регулярно обновляется по мере получения новых...

snuck

snuck Automatic XSS filter bypass Overview snuck is an automatic tool whose goal is to significantly test a given XSS filter by specializing the injections on the basis of the reflection context. This approach adopts Selenium to drive a web browser in reproducing both the attacker and the victim...

terra

Terra : Terra needs an Active Maintainer I'm searching for an active maintainer for Terra. I have some exciting ideas for new features and other things possible with Terra / OSINT. Would love to hear from interested folks. Mail me at [email protected] Terra : Recon tool on Social Media...

maskprocessor

maskprocessor High-Performance word generator with a per-position configurable charset Mask attack Try all combinations from a given keyspace just like in Brute-Force attack, but more specific. Advantage over Brute-Force The reason for doing this and not to stick to the traditional Brute-Force is...

cdf

CDF – crypto differential fuzzing CDF is a tool to automatically test the correctness and security of cryptographic software. CDF can detect implementation errors, compliance failures, side-channel leaks, and so on. CDF implements a combination of unit tests with "differential fuzzing", an approa...

CVE-2023-22515-NSE

CVE-2023-22515-NSE Vulnerability checking tool via Nmap Scripting Engine 1. Принципы механизмы работы уязвимости CVE-2023-22515 для Atlassian Confluence Server. 1. Злоумышленник изменяет конфигурацию сервера, отправляя запрос на уязвимый endpoint:...

cve-collector

CVE-Collector Simple Latest CVE Collector Written in Python There are various methods for collecting the latest CVE Common Vulnerabilities and Exposures information. This code was created to provide guidance on how to collect, what information to include, and how to code when creating a CVE...

ipv6tools

IPv6Tools The IPv6Tools framework is a robust set of modules and plugins that allow a user to audit an IPv6 enabled network. The built-in modules support enumeration of IPv6 features such as ICMPv6 and Multicast Listener Discovery MLD. In addition, the framework also supports enumeration of Upper...

hades

About Hades is a proof of concept loader that combines several evasion technques with the aim of bypassing the defensive mechanisms commonly used by modern AV/EDRs. Usage The easiest way, is probably building the project on Linux using make. git clone https://github.com/f1zm0/hades && cd hades ma...

arp-scan

arp-scan About arp-scan is a network scanning tool that uses the ARP protocol to discover and fingerprint IPv4 hosts on the local network. It is available for Linux, BSD, macOS and Solaris under the GPLv3 licence. This is README.md for arp-scan version 1.10.1-git. Installation Building and...

recox

Recox v2.0 RecoX is an incredibly versatile and powerful tool that is specifically designed to aid in the identification and classification of vulnerabilities within web applications. The script is able to detect vulnerabilities that are not typically included in the OWASP top ten vulnerabilities...

zuthaka

A collaborative free open-source Command & Control integration framework that allows developers to concentrate on the core function and goal of their C2. Explore the docs » · Report Bug · Request Feature · Table of Contents 1. About The Project Problem statement Solution Built With 2. Already...