shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

osx-password-dumper

🍎 🔓 OSX Password Dumper Script Overview A bash script to retrieve user's .plist files on a macOS system and to convert the data inside it to a crackable hash format. to use with John The Ripper or Hashcat Useful for CTFs/Pentesting/Red Teaming on macOS systems. Prerequisites The script must be ru...

ASWCrypter

Welcome to the ASWCrypter script v1.0 100% FUD An Bash&Python Script For Generating Payloads that Bypasses All Antivirus so far FUD ; . PLEASE DON'T UPLOAD BACKDOOT TO WWW.VIRUSTOTAL.COM 23/08/2018 Important This Version Just for test , In future I will update ASWCrypter to generate a payloads fo...

CVE-2024-3094-XZ-Utils-Check

JB-Network - check-xz.sh Utility to check if you have a vulnerable version according to CVE-2024-3094. Installation To use it, open your terminal and run: cd;mkdir git;git clone https://github.com/jbnetwork-git/linux-tools.git chmod +x /git/check-xz.sh How to run? cd /git ./check-xz.sh License. M...

log4j_checker

Log4jchecker.py CVE-2021-44228 Description This Python3 script tries to look for servers vulnerable to CVE-2021-44228, also known as Log4Shell, a very critical vulnerability found in Log4j2 Java logging library. It doesn't rely on external DNS log servers to verify and validate the vulnerable...

proxy2

proxy2 単一のPythonスクリプトで動作するHTTP/HTTPSプロキシ Features カスタマイズが簡単 外部モジュール不要 IPv4とIPv6の両方をサポート HTTP/1.1永続接続をサポート HTTPS傍受のための動的証明書生成をサポート このスクリプトはPython 2.7で動作します。 HTTPS接続を傍受するにはOpenSSLのインストールが必要です。 Usage スクリプトとして実行するだけです: $ python proxy2.py 上記のコマンドはlocalhost:8080でプロキシを実行します。...

CVE-2020-7799

cve-2020-7799 Batch detection of cve-2020-7799 Add a text.txt file in the same directory The URL format in the file is as follows: www.baidu.com 132.231.132.132 133.12.122.13:8080 Run with python3 cve-2020-7799.py Note: It is prohibited to use all resources of this project for illegal testing!...

yasuo

YASUO @0xsauby Description Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise th...

yasuo

YASUO @0xsauby 説明 Yasuo は脆弱なサードパーティ製 Web アプリケーションをスキャンする Ruby スクリプトです。 ネットワークセキュリティ評価（内部、外部、レッドチームの仕事など）を行っていると、よく知られた脆弱性を悪用してリモートサーバを侵害できる、脆弱なサードパーティ製 Web アプリケーションや Web フロントエンドに遭遇することがあります。よくあるお気に入りのアプリケーションとしては、Apache Tomcat 管理インターフェース、JBoss jmx-console、Hudson Jenkins などがあります。 Exploit-db...

BARK

BARK BARK stands for BloodHound Attack Research Kit. It is a PowerShell script built to assist the BloodHound Enterprise team with researching and continuously validating abuse primitives. BARK currently focuses on Microsoft's Azure suite of products and services. BARK requires no third party...

ProtOSINT

ProtOSINT ProtOSINT is a Python script that helps you investigate Proton Mail accounts. Version This is ProtOSINT v2. The first version has been around for a few years, but Proton's API changed and the old checks stopped working, so this is a rewrite that brings the tool back to life. Big thanks ...

CVE-2024-6387

CVE-2024-6387 Installation and Execution of the Script 💻 Prerequisites Before starting, make sure you have the following tools installed on your machine: Python 3.x Git pip to manage Python dependencies Installation Steps 1. Clone the repository Use git to clone the repository: git clone...

CVE-2014-4688-NodeJs-Exploit

CVE-2014-4688 sudo node --no-warnings exploit.js...

CVE-2024-23692-EXP

CVE-2024-23692-EXP bash CVE-2024-23692.sh Nuclei nuclei -list target.txt -t CVE-2024-23692.yaml -o CVE-2024-23692-result.txt...

CVE-2023-38831-winrar-exploit

CVE-2023-38831 winrar exploit generator Quick poc test Generate the default poc for test python cve-2023-38831-exp-gen.py poc or python cve-2023-38831-exp-gen.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar Custom 1. Place the bait file and evil script file in the current directory, the bait file i...

CVE-2024-24919

CVE-2024-24919 Usage Usage: ./CVE-2024-24919.sh -i -p -f Specifying an IP with -i ./CVE-2024-24919.sh -i 190.XXX.XXX.XXX Check multiples IP with -f ./CVE-2024-24919.sh -f uniq.txt File example 192.168.0.1 192.168.0.2 192.168.0.3 ... 192.168.0.20...

http-stalling-detector

HTTP Stalling Detector HTTPスタリング型DoS攻撃は、Webサーバーが、リモートクライアントが単に 低速リンク経由で接続しているだけなのか、それともWebサーバーがローカル システムリソースを保護するためにタイムアウトして接続を切断するのを 防ぐべく、意図的にデータを非常にゆっくり送信しているのかを判別できない という特性を悪用します。攻撃者に典型的に見られる挙動は、多数の接続を 開き、Webサーバーが接続をタイムアウトさせないようにデータを少しずつ ゆっくり送り出すことです。Webサーバーが比較的小規模なワーカープールを...

xz-cve-2024-3094

root@ubuntu:/xz/ apt update root@ubuntu: /xz/ apt install -y gcc g++ vim net-tools make cmake build-essential libncurses-dev flex bison libssl-dev libelf-dev bc liblz4-tool liblz4-dev liblzma-dev ... ... root@ubuntu:/xz/ bash ./decode.sh root@ubuntu: /xz/ tar xf xz-5.6.1.tar.xz && cd xz-5.6.1...

p-gen

ABOUT TOOL : P-gen tool is an python based script which create/generate randrom passwords in fraction of seconds. This tool works on both rooted Android device and Non-rooted Android device. AVAILABLE ON : Termux TESTED ON : Termux REQUIREMENTS : internet storage 200 MB FEATURES : + Stable tool !...

CVE-2021-36934

CVE-2021-36934 Usage Detection .\Get-HiveNightmareStatus.ps1 Detection for management tools that need True/False output .\Get-HiveNightmareStatus.ps1 -PostureCheck Remediation For initial SAM fixes and vss removal .\Get-HiveNightmareStatus.ps1 -Remediate Remediate even if the checks say healthy o...