waybackpack

waybackpack Waybackpack은 주어진 URL에 대한 Wayback Machine의 전체 아카이브를 다운로드할 수 있는 커맨드라인 도구입니다. 예를 들어, 미국 노동부 홈페이지의 1996년해당 사이트가 처음 아카이브된 해까지의 모든 사본을 다운로드하려면 다음을 실행하면 됩니다: waybackpack http://www.dol.gov/ -d /Downloads/dol-wayback --to-date 1996 결과: /Downloads/dol-wayback/ ├── 19961102145216 │ └──...

urlhunter

o Utku Sen's /\o Oo |/ =- .===O- URL -O- / /U' hunter /|\ || |/ \ | utkusen.com |K || twitter.com/utkusenen urlhunter is a recon tool that allows searching on URLs that are exposed via shortener services such as bit.ly and goo.gl. The project is written in Go. How? A group named URLTeam kudos...

recox

Recox v2.0 RecoX is an incredibly versatile and powerful tool that is specifically designed to aid in the identification and classification of vulnerabilities within web applications. The script is able to detect vulnerabilities that are not typically included in the OWASP top ten vulnerabilities...

aws-security-assessment-solution

Self-Service Security Assessment Solutions v2.0 Cybersecurity remains a very important topic and point of concern for many CIOs, CISOs, and their customers. To meet these important concerns, AWS has developed a primary set of services customers should use to aid in protecting their accounts. Amaz...

certsync

certsync certsync is a new technique in order to dump NTDS remotely, but this time without DRSUAPI : it uses golden certificate and UnPAC the hash. It works in several steps: 1. Dump user list, CA informations and CRL from LDAP 2. Dump CA certificate and private key 3. Forge offline a certificate...

certsync

certsync certsync는 NTDS를 원격으로 덤프하는 새로운 기법입니다. 이번에는 DRSUAPI 없이 골든 인증서golden certificate와 UnPAC the hash를 사용합니다. 다음 단계로 작동합니다: 1. LDAP에서 사용자 목록, CA 정보 및 CRL 덤프 2. CA 인증서와 개인 키 덤프 3. 각 사용자에 대해 오프라인으로 인증서 위조 4. 각 사용자에 대해 UnPAC the hash를 수행하여 NT 및 LM 해시 획득 $ certsync -u khal.drogo -p 'horse' -d...

mwebfp

LNHG - Massive Web Fingerprinter mwebfp Introduction The "LowNoiseHG LNHG Massive Web Fingerprinter " "mwebfp " from now on was conceived in July 2013 after realizing the usefulness of webserver screenshots to pentesters, during an engagement with large external or internal IP address ranges, as ...

PyPsPipeJack

PyPsPipeJack このツールは、私の別のツールである OpenPsPipeJack の続編です。こちらはPythonベースで、主にImpacketを使用してLinux上で動作します。 要するに、リモートホスト上でローカル管理者権限を持っていれば、そのホスト上のリモートPowerShellセッションに接続し、そのPowerShellセッション内でコマンドを実行できます。これにより、水平移動（ラテラルムーブメント）の機会だけでなく、特権昇格の機会も得られます。例えば、RBCDやShadow...

manul

Manul Manul is a coverage-guided parallel fuzzer for open-source and black-box binaries on Windows, Linux and macOS beta written in pure Python. Quick Start pip3 install psutil git clone https://github.com/mxmssh/manul cd manul mkdir in mkdir out echo "AAAAAA" in/test python3 manul.py -i in -o ou...

ExtractBitlockerKeys

도메인에서 Bitlocker 복구 키를 자동으로 추출하는 시스템 관리 또는 사후 침투 스크립트입니다. 기능 도메인 컨트롤러의 LDAP에서 모든 컴퓨터 목록을 자동으로 가져옵니다. 다중 스레드 연결을 사용하여 LDAP에서 Bitlocker 키를 추출합니다. LDAP 결과 페이지를 반복하여 크기에 관계없이 도메인의 모든 컴퓨터를 가져옵니다. !WARNING 이 백업을 도메인의 온라인 SMB 공유에 저장하지 마십시오. 인쇄하여 잠긴 금고에 물리적으로 보관하는 것이 좋습니다. 결과를 JSON으로 내보내기 컴퓨터 FQDN, 도메인, 복...

acltoolkit

acltoolkit acltoolkit is an ACL abuse swiss-army knife. It implements multiple ACL abuses. Table of Contents acltoolkit Table of Contents Installation Usage Commands get-objectacl set-objectowner give-genericall give-dcsync add-groupmember set-logonscript Installation pip install acltoolkit-ad or...

acltoolkit

acltoolkit acltoolkit은 ACL 남용을 위한 스위스 군용 칼입니다. 여러 가지 ACL 남용을 구현합니다. 목차 acltoolkit 목차 설치 사용법 명령어 get-objectacl set-objectowner give-genericall give-dcsync add-groupmember set-logonscript 설치 pip install acltoolkit-ad 또는 git clone https://github.com/zblurx/acltoolkit.git cd acltoolkit make 사용법 usage...

CVE-2026-107657

The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '' parameter in all versions up to, and including, 1.7.31 due to insufficient input sanitization and output escaping. This makes it possible for...

GetBlocked

GetBlocked! Cleaner pages. Fewer trackers. Local-only. GetBlocked! is a lightweight, local-only Chrome extension that helps reduce common third-party website tracking by blocking known tracker requests, cleaning tracking links, and explaining tracking attempts. An optional experimental Decoy Mode...

Sharp-SMBExec

Sharp-SMBExec Kevin Robertsons Invoke-SMBExec PowerShell 스크립트의 네이티브 C 변환입니다. https://github.com/Kevin-Robertson/Invoke-TheHash/blob/master/Invoke-SMBExec.ps1 .NET 3.5용으로 빌드되었습니다. 사용법 Sharp-SMBExec.exe hash:"hash" username:"username" domain:"domain.tld" target:"target.domain.tld" command:"command"...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

EUVD-2026-96301

The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '' parameter in all versions up to, and including, 1.7.31 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-107657 HivePress <= 1.7.31 - Unauthenticated Stored Cross-Site Scripting via Custom User Attribute Value via Registration Form

The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '' parameter in all versions up to, and including, 1.7.31 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-107657

The HivePress WordPress plugin (versions ≤ 1.7.31 ) is vulnerable to Stored Cross-Site Scripting (XSS) via the &lt; parameter. The root cause is insufficient input sanitization and output escaping , allowing unauthenticated attackers to inject arbitrary web scripts. For the vulnerability to be ex...

CVE-2026-107657 HivePress <= 1.7.31 - Unauthenticated Stored Cross-Site Scripting via Custom User Attribute Value via Registration Form

The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '' parameter in all versions up to, and including, 1.7.31 due to insufficient input sanitization and output escaping. This makes it possible for...