7188 matches found
nginx-1.4.0
nginx-1.4.0 用于 CVE-2013-2028 的分析 漏洞利用：exp-nginx.rb 二进制文件（用于 ROP 构建）：nginx...
nginx-baseline
DevSec Nginx 基线 此合规性配置文件确保所有加固项目保持相同的质量。 https://github.com/dev-sec/ansible-nginx-hardening https://github.com/dev-sec/chef-nginx-hardening https://github.com/dev-sec/puppet-nginx-hardening 独立使用 此合规性配置文件需要 InSpec 来执行： root@kitploit: $ git clone https://github.com/dev-sec/nginx-baseline $ inspec...
nginxpwn
Entrenamiento de explotación -- CVE-2013-2028: Desbordamiento de búfer basado en pila de Nginx Este repositorio contiene el código fuente de nginx 1.4.0, así como binarios precompilados con y sin cookies de pila. También hay un Vagrantfile para una configuración sencilla. Anuncio y parche:...
pwndrop
pwndrop is a self-deployable file hosting service for sending out red teaming payloads or securely sharing your private files over HTTP and WebDAV. If you've ever needed to quickly set up an nginx/apache web server to host your files and you were never happy with the limitations of python -m...
navgix
navgix navgix è uno strumento golang multi-thread che verifica le vulnerabilità di alias traversal di nginx Tecniche Attualmente, navgix supporta 2 tecniche per trovare directory vulnerabili o alias di location. Queste sono le seguenti: Euristica navgix effettua una richiesta GET iniziale alla...
navgix
navgix navgix is a multi-threaded golang tool that will check for nginx alias traversal vulnerabilities Techniques Currently, navgix supports 2 techniques for finding vulnerable directories or location aliases. Those being the following: Heuristics navgix will make an initial GET request to the...
authelia
!OpenSSF Best...
ycsm
You Can't See Me YCSM Questo è uno script di installazione rapida per un redirector resiliente che utilizza il proxy inverso nginx e letsencrypt, compatibile con alcuni popolari RATS Cobalt Strike, Empire, Metasploit. Se viene selezionato HTTPS, configurerà automaticamente letsencrypt certbot e...
gixy
GIXY अवलोकन Gixy एक उपकरण है जो Nginx कॉन्फ़िगरेशन का विश्लेषण करता है। Gixy का मुख्य उद्देश्य सुरक्षा गलत कॉन्फ़िगरेशन को रोकना और दोष का पता लगाने को स्वचालित करना है। वर्तमान में समर्थित Python संस्करण 2.7, 3.5, 3.6 और 3.7 हैं। अस्वीकरण: Gixy का केवल GNU/Linux पर अच्छी तरह से परीक्षण किया गया...
gixy
GIXY Overview Gixy is a tool to analyze Nginx configuration. The main goal of Gixy is to prevent security misconfiguration and automate flaw detection. Currently supported Python versions are 2.7, 3.5, 3.6 and 3.7. Disclaimer: Gixy is well tested only on GNU/Linux, other OSs may have some issues...
steamer
Steamer Import, manage, search public dumps. Do you have massive amounts of CSV, .sql, .txt, that have credentials, passwords, and hashes inside? Use Steamer to manage them! Load them into a MongoDB database, and either use the console directly, or just use the handy web interface complete with...
CVE-2019-11043
CVE-2019-11043 php-fpm+Nginx RCE 0x01 Installazione di phuip-fpizdam-Mac go get github.com/neex/phuip-fpizdam go install github.com/neex/phuip-fpizdam root@kitploit: ale@Pentest /go go get github.com/neex/phuip-fpizdam ale@Pentest /go go install github.com/neex/phuip-fpizdam ale@Pentest /go ls bi...
zuthaka
A collaborative free open-source Command & Control integration framework that allows developers to concentrate on the core function and goal of their C2. Explore the docs » · Report Bug · Request Feature · Table of Contents 1. About The Project Problem statement Solution Built With 2. Already...
IngressNightmare-PoC
Exploit for Ingress NGINX - IngressNightmare Questo progetto fornisce un exploit che mira a vulnerabilità critiche di Remote Code Execution RCE non autenticata nel controller Ingress NGINX per Kubernetes, note collettivamente come IngressNightmare. Ricerca di Wiz Nella ricerca originale, il team ...
pwnspoof
pwnSpoof from Punk Security generates realistic spoofed log files for common web servers with customisable attack scenarios. Every log bundle is unique and completely customisable, making it perfect for generating CTF scenarios and for training serials. Can you find the attacker session and build...
c2-cloud
About The Project The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cloud. It can manage several simultaneous backdoor sessions with a user-friendly...
docker-tor-hiddenservice-nginx
Crea e gestisci facilmente servizi nascosti Hidden Service Esegui facilmente un servizio nascosto all'interno della rete Tor con questo contenitore. Genera la configurazione scheletro per il tuo servizio nascosto, sostituisci con il nome del pattern del tuo servizio nascosto. Ad esempio, se vuoi...
evilginx
Evilginx v.1.1.0 QUESTA VERSIONE È OBSOLETA. USA L'ULTIMA VERSIONE! EVILGINX 2:https://github.com/kgretzky/evilginx2 Evilginx è un framework per attacchi man-in-the-middle utilizzato per il phishing di credenziali e cookie di sessione di qualsiasi servizio web. Il suo core gira sul server HTTP...
evilginx
Evilginx v.1.1.0 THIS VERSION IS OBSOLETE. PLEASE USE THE LATEST VERSION! EVILGINX 2:https://github.com/kgretzky/evilginx2 Evilginx is a man-in-the-middle attack framework used for phishing credentials and session cookies of any web service. It's core runs on Nginx HTTP server, which utilizes...