dorkbot

dorkbot Scan Google or other search results for vulnerabilities. dorkbot is a modular command-line tool for performing vulnerability scans against sets of webpages returned by Google search queries or other supported sources. It is broken up into two sets of modules: Indexers - modules that retur...

firehol

FireHOL http://firehol.org/ FireHOL, an iptables stateful packet filtering firewall for humans! FireQOS, a TC based bandwidth shaper for humans! Git These instructions are for people who are working with the git repository. There are more general instructions starting with Upgrade Notes. Cloning...

CVE-2022-1388_refresh

CVE-2022-1388 - refresh PoC per lo sfruttamento di CVE-2022-1388 su BigIP F5 Utilizzo dell'exploit python3 refresh.py -h usage: refresh.py -h -u URL -f F -c CMD -s SH optional arguments: -h, --help show this help message and exit -u URL, --url URL target url -f F, --file F url file -c CMD,...

linkedin2username

linkedin2username OSINT Tool: Generate username lists from companies on LinkedIn. This is a pure web-scraper, no API key required. You use your valid LinkedIn username and password to login, it will create several lists of possible username formats for all employees of a company you point it at...

linkedin2username

linkedin2username OSINT-Tool: Erstelle Benutzernamenslisten von Unternehmen auf LinkedIn. Dies ist ein reiner Web-Scraper, kein API-Schlüssel erforderlich. Du verwendest deinen gültigen LinkedIn-Benutzernamen und dein Passwort, um dich anzumelden, und es erstellt mehrere Listen mit möglichen...

jwt-hack

JSON Web Token Hack Toolkit A high-performance toolkit for testing, analyzing and attacking JSON Web Tokens. Installation Cargo cargo install jwt-hack Homebrew brew install jwt-hack Snapcraft Ubuntu sudo snap install jwt-hack Chocolatey Windows choco install jwt-hack From source git clone...

hacktricks-cloud

HackTricks Cloud Hacktricks logos & motion designed by @ppieranacho .1 Run HackTricks Cloud Locally The workflow below follows Git's documented clone, checkout, and pull operations and the repository's published language branches and container setup.238910 Download latest version of hacktricks...

OA-tongda-RCE

OA-tongda-RCE | Office Anywhere Sistema di office automation intelligente di rete Getshell dal backend Senza autenticazione 1. Vulnerabilità di upload di file arbitrari /ispirit/im/upload.php 2. Vulnerabilità di inclusione di file locali /ispirit/interface/gateway.php Bypass dell'esecuzione di...

kubesploit

Kubesploit Kubesploit è un server e agente di Command & Control HTTP/2 cross-platform per post-exploitation progettato specificamente per ambienti containerizzati, scritto in Golang e basato sul progetto Merlin di Russel Van Tuyl @Ne0nd0g. La Nostra Motivazione Durante la ricerca su Docker e...

kubesploit

Kubesploit Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent dedicated for containerized environments written in Golang and built on top of Merlin project by Russel Van Tuyl @Ne0nd0g. Our Motivation While researching Docker and Kubernetes, we noticed that...

hardcodes

hardcodes extract strings from source code hardcodes is a utility for searching strings hardcoded by developers in programs. It uses a modular tokenizer that can handle comments, any number of backslashes & nearly any syntax you throw at it. Yes, it is designed to process any syntax and following...

turbinia

Turbinia Zusammenfassung Hinweis: Turbinia wird keine neuen Funktionen mehr entwickeln und befindet sich im Wartungsmodus. Nutzer sollten sichOpenRelik ansehen. Turbinia ist ein Open-Source-Framework zum Bereitstellen, Verwalten und Ausführen verteilter forensischer Arbeitslasten. Es soll die...

CVE-2019-13272

CVE-2019-13272 Exploit locale di root Linux Linux 4.10 5.1.17 PTRACETRACEME root locale CVE-2019-13272 In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to...

DonPAPI

DonPAPI DonPAPI automatizza il dump remoto di segreti su più computer Windows, con attenzione all'evasione della difesa. Credenziali raccolte: Credenziali, Cookie e Token di Aggiornamento di Chrome del browser Chromium Certificati Windows Gestione credenziali Credenziali e Cookie del browser...

flashlight

Automated Information Gathering Tool for Penetration Testers Videos : https://www.youtube.com/watch?v=EUMKffaAxzs&list=PL1BVM6VWlmWZOv9Hv8TV2v-kAlUmvA5g7&index=4 https://www.youtube.com/watch?v=qCgW-SfYl1c&list=PL1BVM6VWlmWZOv9Hv8TV2v-kAlUmvA5g7&index=5...

linux-soft-exploit-suggester

linux-soft-exploit-suggester Script per trovare exploit per tutto il software vulnerabile sul sistema, concentrandosi sui pacchetti software piuttosto che solo sulle vulnerabilità del kernel. Utilizza il database degli exploit per valutare la sicurezza dei pacchetti e cercare exploit per aiutare...

CVE-2019-3396

CVE-2019-3396 Vulnerabilità RCE non autenticata in Confluence CVE-2019-3396 Insidia: in alcune versioni è necessario aggiungere l'header Referer per avere successo Lettura file POST /rest/tinymce/1/macro/preview HTTP/1.1 Host: 10.10.20.181 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64;...

WMIHACKER

WMIHACKER（Non necessita della porta 445） Versione cinese Dichiarazione di non responsabilità: la tecnologia coinvolta in questo progetto è solo a scopo di apprendimento e difesa della sicurezza; è vietato l'uso illegale! Strumento di test per l'esecuzione di comandi di movimento laterale che...

wireshark-forensics-plugin

wireshark-forensics-plugin Wireshark is the most widely used network traffic analyzer. It is an important tool for both live traffic analysis & forensic analysis for forensic/malware analysts. Even though Wireshark provides incredibly powerful functionalities for protocol parsing & filtering, it...

Pentest-Tools-Collection

Pentest-Tools-Collection Active Directory AMSI https://amsi.fail/ Raccolte di Strumenti WinPwn https://github.com/S3cur3Th1sSh1t/WinPwn Import-Module .\WinPwn.ps1 iexnew-object net.webclient.downloadstring'https://raw.githubusercontent.com/S3cur3Th1sSh1t/WinPwn/master/WinPwn.ps1' Ghostpack...