pi-hole

Network-wide ad blocking via your own Linux hardware The Pi-hole® is a DNS sinkhole that protects your devices from unwanted content without installing any client-side software. Easy-to-install : our dialogs walk you through the simple installation process in less than ten minutes Resolute :...

AutoPiff

AutoPiff Automated Patch Intelligence and Finding Framework A semantic analysis engine for detecting vulnerability fixes in Windows kernel driver patches. AutoPiff uses conservative YAML rules to identify security-relevant code changes with high precision and explainability. Overview AutoPiff...

libpeconv

libPeConv A library to load and manipulate PE files. Objectives The goal of libPEConv was to create a "swiss army knife" for custom loading of PE files. It gathers various helper functions that you can quickly integrate in your own loader. For example: remapping sections, applying relocations,...

open-klara

Open KLara Open KLara is a community-driven fork of KLara by Kaspersky Lab — a distributed system for scanning large malware collections with Yara rules. This project is maintained by the community and is not affiliated with Kaspersky Lab. Features Web Interface — Fire-and-forget Yara scans with...

PoisonApple

PoisonApple This is a command-line tool to perform various persistence mechanism techniques on macOS. This tool was designed to be used by threat hunters for cyber threat emulation purposes. Install Do it up: $ pip3 install poisonapple --user Note: PoisonApple was written & tested using Python 3....

authz0

Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials. URLs and Roles are managed as YAML-based templates, which can be automatically created and added through authz0. You can also test based on multiple authentication headers...

CVE-2023-7028

CVE-2023-7028 An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be...

PrivExchange

PrivExchange POC tools accompanying the blog Abusing Exchange: One API call away from Domain Admin. Requirements These tools require impacket. You can install it from pip with pip install impacket, but it is recommended to use the latest version from GitHub. privexchange.py This tool simply logs ...

dnsx

A fast and multi-purpose DNS toolkit designed for running DNS queries Features • Installation • Usage • Running dnsx • Wildcard • Notes • Join Discord dnsx is a fast and multi-purpose DNS toolkit designed for running various probes through the retryabledns library. It supports multiple DNS querie...

whapa

Whatsapp Parser Toolset Updated: May 2022 WhatsApp Messenger Version 2.21.9.14 Whapa is a set of graphical forensic tools to analyze whatsapp from Android and soon iOS devices. All the tools have been written in Python 3.8 and have been tested on linux, windows and macOS systems. Note: Whapa...

firezone

Blazing-fast remote access with identity-based policies, attested device trust, and detailed audit logs Documentation | Quickstart | Download Clients | Support Overview Firezone is a secure remote access platform built on WireGuard®. Connect users to private applications, databases, servers, and...

tgspyder

🕷️ TGSpyder TGSpyder is an Open-Source Telegram OSINT CLI Tool by Darksight Analytics. Features Scrape members list from both public and private groups to CSV Scrape chat messages from both public and private groups to CSV Extract t.me invite links from chat history public and private groups Look...

reverse-shell-generator

reverse-shell-generator Hosted Reverse Shell generator with a ton of functionality -- great for CTFs Hosted Instance https://revshells.com Features Generate common listeners and reverse shells Save button to download Payloads from browser. Raw mode to cURL shells to your machine. Button to...

CVE-2016-6210-Exploit

This is the first version of the "weaponized" exploit for CVE-2016-6210 Background: Posted by Eddie Harari on Full Disclosure http://seclists.org/fulldisclosure/2016/Jul/51 The brief: By sending large passwords, a remote user can enumerate users on system that runs SSHD. This problem exists in mo...

phoneinfoga

Information gathering framework for phone numbers Documentation • API documentation • Related blog post About PhoneInfoga is one of the most advanced tools to scan international phone numbers. It allows you to first gather basic information such as country, area, carrier and line type, then use...

CVE-2019-16172

CVE-2019-16172 The CVE-2019-16172 Scanner is designed to check LimeSurvey instances for the stored XSS vulnerability. CVE Descriptions CVE-2019-16172 Description: CVE-2019-16172 is a stored XSS vulnerability found in LimeSurvey versions prior to 3.17. The vulnerability arises due to improper...

openocd

Welcome to OpenOCD OpenOCD provides on-chip programming and debugging support with a layered architecture of JTAG interface and TAP support including: XSVF playback to facilitate automated boundary scan and FPGA/CPLD programming; debug target support e.g. ARM, MIPS: single-stepping,...

john

John the Ripper This is the community-enhanced, "jumbo" version of John the Ripper. It has a lot of code, documentation, and data contributed by jumbo developers and the user community. It is easy for new code to be added to jumbo, and the quality requirements are low, although lately we've start...

cve-2023-40429-ez-device-name

HostName Overview HostName is a sample application demonstrating how a third-party app can access a user's device name without the com.apple.developer.device-information.user-assigned-device-name entitlement. Details In iOS 16, Apple added the...

letsploit

letsploit letsploit is a tool that detects the patch level of the local or another windows 10 system, checks it against the latest available patches and finds potential cve vulnerabilities as well as publicly available exploit code. Inspired by following projects 1. bitsadmin's WESNG...