Priv2Admin

The idea is to "translate" Windows OS privileges to a path leading to: 1. administrator, 2. integrity and/or confidentiality threat, 3. availability threat, 4. just a mess. Privileges are listed and explained at: https://learn.microsoft.com/en-us/windows/win32/secauthz/privilege-constants If the...

metabigor

Metabigor - OSINT power without API key hassle What is Metabigor? Metabigor maps a target's infrastructure without asking you to register for a single API key. Network ranges, certificates, related domains, exposed ports, CDN vendors, and code leaks - all from free sources, all pipeable into each...

Bastillion

Bastillion A modern, web-based SSH console and SSH key management tool. Bastillion gives you a clean, browser-based way to manage SSH access across all your systems — like a bastion host with a friendly dashboard. It does two things: 1. Web-based SSH terminal — once a host is registered, authoriz...

CVE-2023-27372

CVE-2023-27372 SPIP قبل الإصدار 4.2.1 يسمح بتنفيذ الأوامر عن بُعد عبر قيم النماذج في المنطقة العامة بسبب سوء التعامل مع التسلسل. الإصدارات المُصححة هي 3.2.18 و4.0.10 و4.1.8 و4.2.1. يستغل هذا الـ PoC حقن كود PHP في SPIP. الثغرة موجودة في المعامل oubli وتسمح لمستخدم غير مُوثق بتنفيذ أوامر عشوائية...

ghostrings

Ghostrings نصوص برمجية لاستعادة تعريفات السلاسل في ثنائيات Go باستخدام تحليل P-Code. تم اختبارها مع x86 وx86-64 وARM وARM64. النصوص البرمجية Golang يمكن العثور عليها في فئة Golang في Script Manager. GoDynamicStrings.java يحلل P-Code للعثور على بنى السلاسل النصية المنشأة على المكدس. يستخدم تحليل ن...

mimicry

Mimicry Mimicry Mimicry is a security tool developed by Chaitin Technology for active deception in exploitation and post-exploitation. Active deception can live migrate the attacker to the honeypot without awareness. We can achieve a higher security level at a lower cost with Active deception...

web

Network-wide ad blocking via your own Linux hardware Pi-hole website | Documentation | Discourse Forum | Donate Pi-hole Web Interface Pi-hole®'s Web interface based off of AdminLTE provides a central location to manage your Pi-hole and review the statistics generated by FTLDNS™. Easy-to-interpret...

bradamsa

Bradamsa Bradamsa is a Burp Suite extension for Radamsa, a well-known fuzzer made by the Oulu University Secure Programming Group. Inspired by burp-radamsa, this plugin allows to generate Intruder payloads using Radamsa. Download the latest release from HERE. Mix Burp Suite + Radamsa and you get...

Watcher

AI-Powered Automated Cybersecurity Threat Detection Platform Watcher is a Django & React JS platform designed to discover and monitor emerging cybersecurity threats with AI-powered threat intelligence analysis. It can be deployed on webservers or quickly run via Docker. Watcher Capabilities Watch...

skitter-creek-bath-salts

skitter-creek-bath-salts Débloquertout sur le CPU avec le brouillage DRAM — PSP, C6, microcode, SMM, et tout ce que les spécifications ont omis. &x == &x. Habituellement. Manipulez le contrôleur DRAM et une adresse peut être amenée à atterrir où vous voulez en mémoire. skitter-creek-bath-salts...

multiplier

Multiplier trouve plus de bogues plus rapidement Multiplier offre des capacités de compréhension de code précises et complètes. Pour ce faire, il enregistre les artefacts de compilation dans une base de données, puis les rend accessibles de manière persistante via une API C++ ou Python. Multiplie...

log-horizon

Microsoft Sentinel SIEM Log Source Analyzer I've had to answer "what are we actually getting out of these logs?" or "what is the recommended logs for Microsoft Sentinel" more times than I can count. The answer always depend on so many things, but we can be generic. So I built this thingy right...

mboxshell

mboxShell Fast terminal viewer for MBOX files of any size. Open, search and export emails from Gmail Takeout backups 50 GB+ without loading them into memory. Leer en Espanol / Spanish Why this project exists When you export your email from Gmail using Google Takeout, you get one or more .mbox fil...

mboxshell

mboxShell Fast terminal viewer for MBOX files of any size. Open, search and export emails from Gmail Takeout backups 50 GB+ without loading them into memory. Leer en Espanol / Spanish Why this project exists When you export your email from Gmail using Google Takeout, you get one or more .mbox fil...

telegram-history-dump

telegram-history-dump This utility is the successor of telegram-json-backup, written from the ground up in Ruby. It can create backups of your Telegram user and supergroup dialogs using telegram-cli's remote control feature. Compared to the old project, telegram-history-dump: Has better support f...

esp32_esp8266_attacks

هجمات Wi-Fi على ESP32/ESP8266 هذا المستودع جزء من مخرجات بحثية منASSET Research Group. يعرض هذا المستودع 3 هجمات Wi-Fi ضد أجهزة ESP32/8266 الشهيرة المستخدمة في إنترنت الأشياء: Zero PMK Installation CVE-2019-12587 - اختطاف عملاء ESP32/ESP8266 المتصلين بشبكات المؤسسات؛ ESP32/ESP8266 EAP client cras...

GitHacker

GitHacker A multi-threaded .git folder exploitation tool. Reconstructs the target repository in full — source code, commit history, branches, stashes, remotes, tags — even when DirectoryListings is disabled, by brute-forcing well-known refs. The accompanying research site at...

malboxes

= Malboxes :toc: preamble :toclevels: 2 :twob: https://twitter.com/obilodeau :twhg: https://twitter.com/hugospns // github stuff ifdef::env-github:github: ifndef::github // local logo image::docs/logos/main.svgMalboxes Logo endif:: ifdef::github // logo on github...

cryptr

cryptr A simple shell utility for encrypting and decrypting files using OpenSSL. Installation git clone https://github.com/nodesocket/cryptr.git ln -s "$PWD"/cryptr/cryptr.bash /usr/local/bin/cryptr Requirements shred if optionally deleting original file. Bash tab completion Add...

cryptr

cryptr أداة بسيطة لسطر الأوامر لتشفير وفك تشفير الملفات باستخدام OpenSSL. التثبيت git clone https://github.com/nodesocket/cryptr.git ln -s "$PWD"/cryptr/cryptr.bash /usr/local/bin/cryptr المتطلبات shred إذا كنت ترغب في حذف الملف الأصلي اختياريًا. إكمال علامة التبويب في Bash أضف...