waybackpack

waybackpack Waybackpack est un outil en ligne de commande qui vous permet de télécharger l'intégralité de l'archive Wayback Machine pour une URL donnée. Par exemple, pour télécharger chaque copie de la page d'accueil du Département du Travail à travers 1996 qui se trouve être la première année où...

ActiveMQ_CVE-2023-46604

ActiveMQCVE-2023-46604 Python implementation for rapidly constructing concurrent data traffic packets; both gadget classes are implemented, org.springframework.context.support.FileSystemXmlApplicationContext and org.springframework.context.support.ClassPathXmlApplicationContext, FileSystemXml can...

wshlient

Wshlient Web Shell Client Description & Demo Wshlient is a web shell client designed to be pretty simple yet versatile. One just need to create a text file containing an HTTP request and inform where Wshlient inject the commands, then you can enjoy a shell...

mkdocs

MkDocs Project documentation with Markdown MkDocs is a fast , simple and downright gorgeous static site generator that's geared towards building project documentation. Documentation source files are written in Markdown, and configured with a single YAML configuration file. It is designed to be ea...

CVE-2022-46169

CVE-2022-46169 Setup git clone https://github.com/miko550/CVE-2022-46169.git cd CVE-2022-46169 Usage usage: CVE-2022-46169.py -h -t TARGET -l LIST options: -h, --help show this help message and exit -t TARGET, --target TARGET The URL of the target, eg: http://127.0.0.1 -l LIST, --list LIST List o...

CVE-2022-27925

CVE-2022-27925 Setup git clone https://github.com/miko550/CVE-2022-27925.git cd CVE-2022-27925 Usage usage: CVE-2022-2925.py -h -t TARGET -l LIST options: -h, --help show this help message and exit -t TARGET, --target TARGET The URL of the target, eg: http://127.0.0.1 -l LIST, --list LIST List of...

Sublist3r

À propos de Sublist3r Sublist3r est un outil Python conçu pour énumérer les sous-domaines de sites web en utilisant l'OSINT. Il aide les testeurs d'intrusion et les chasseurs de bugs à collecter et rassembler les sous-domaines du domaine qu'ils ciblent. Sublist3r énumère les sous-domaines en...

whatportis

whatportis .. image:: https://github.com/opencve/opencve/workflows/Tests/badge.svg :target: https://github.com/ncrocfer/whatportis/actions/workflows/tests.yml .. image:: https://badge.fury.io/py/whatportis.svg :target: https://pypi.python.org/pypi/whatportis/ .. image::...

sublert

/ / / / / / / / \ / / / / / / / / / / / // / // / / / / / / //,/.//// / Author: Yassine Aboukir Version: 1.4.7 What's this about? Sublert is a security and reconnaissance tool that was written in Python to leverage certificate transparency for the sole purpose of monitoring new subdomains...

SSHintel

SSHintel — Легковесный SSH-хоніпот SSHintel — это легковесный SSH-хоніпот, созданный с использованием Python и Paramiko. Он имитирует фейковую Linux-оболочку для регистрации несанкционированных попыток доступа, перехвата учетных данных и анализа поведения атакующих в контролируемой среде. 🔧...

NetSpy

NetSpyC2 NetSpyC2 is a Python-based Command & Control C2 server created for educational purposes, security research, and controlled laboratory environments. The project demonstrates how encrypted client-server communication, session management, and secure file transfer can be implemented at the...

censys-subdomain-finder

Chercheur de sous-domaines Censys Note importante : Depuis fin 2024, Censys ne fournit plus d'accès API aux comptes gratuits. Cet outil permet d'énumérer les sous-domaines en utilisant les logs de Certificate Transparency stockés dans Censys Search. Il devrait retourner tout sous-domaine ayant...

ACEshark

ACEshark What is it? ACEshark is a utility designed for rapid extraction and analysis of Windows service configurations and Access Control Entries, eliminating the need for tools like accesschk.exe or other non-native binaries. Why? Efficiently identify and analyze service permissions to uncover...

CVE-2023-43364-Exploit-CVE

CVE-2023-43364-Exploit-CVE This is a python script to exploit Searchor 2.4.0 - the eval function was implemented insecurely and can be exploited for RCE. This machine relies on busybox being installed, as I wrote this for the Busqueda machine on HackTheBox. Just replace the payload with another...

CVE-2017-7269-Echo-PoC

CVE-2017-7269 Remote Code Execution Echo Verification Our team's analysis report on the CVE-2017-7269 vulnerability: https://ht-sec.org/cve-2017-7269-vulnerabilities/ The default PoC only launches calc.exe. Now it has been modified to respond to requests. The command format is:...

tscopy

TScopy Обновлено 2022-03-31 Введение в TScopy Во время расследования инцидентов IR часто требуется возможность анализировать файлы в файловой системе. Иногда эти файлы заблокированы операционной системой ОС, поскольку используются, что особенно раздражает в случае журналов событий и кустов реестр...

subdomain3

Subdomain3 README.md enchinois 中文 Description Subdomain3 est un outil de nouvelle génération. Il aide les testeurs d'intrusion à découvrir plus d'informations en moins de temps que les autres outils. Les informations incluent les sous-domaines, les IP, les CDN, etc. Profitez-en. Capture d'écran...

CVE-2024-20767

Proof of Concept script for CVE-2024-20767 Overview get-the-files.py is a Python script that exploits a vulnerability in Adobe ColdFusion Servers CVE-2024-20767 to read files from the server. The script is based on a method outlined at https://jeva.cc/2973.html. Disclaimer This script is provided...

PyFuscation

PyFuscation Nécessite python3 utilisation: PyFuscation.py -h -f -v -p --ps SCRIPT Arguments optionnels : • -h, --help affiche ce message d'aide et quitte • -f Obfusquer les fonctions ○ Faites ceci en premier... C'est probablement ce qui fonctionnera le mieux • -v Obfusquer les variables ○ Si vous...

erl_mouse

erlmouse версия 1.1 Ладно, я улучшил несколько вещей, чтобы повысить шансы найти уязвимое устройство или сеть. Большинство из них не доступны публично, уже исправлены или настолько obscure, что найти цель бывает сложно. Тем не менее, мы не сдаёмся. Теперь вы можете сканировать каждый IP-адрес в...