PentesterLab-Intercept-CVE-2014-1266

This repository does not have a README...

DongTai

DongTai...

PurpleCloud

Documentación Generador de código Terraform para crear diferentes laboratorios de seguridad en Azure. Para documentación completa visita: https://www.purplecloud.network Registro de cambios 10/18/24: Actualizado el Generador de Azure Sentinel Actualizadas las categorías de registro de AADDiagnost...

CVE-2024-32002-hook

This repository does not have a README...

fuckshell

Fuckshell Simple Webshell Scanner. Using, defined files with dictionary!...

dirsearch

DirSearch This software is a Go implementation of the original dirsearch tool written by Mauro Soria. DirSearch is the very first tool I write in Go, mostly to play and experiment with Go's concurrency model, channels, and so forth : Purpose DirSearch takes an input URL -url parameter and a...

nuclei-templates

Nuclei Templates Lista de plantillas curada por la comunidad para el motor nuclei, con el fin de encontrar vulnerabilidades de seguridad en las aplicaciones. Documentación • Contribuciones • Discusión • Comunidad • Preguntas frecuentes •...

CVE-2023-38609

Este repositorio no tiene un README...

threat-modeling-playbook

Introducción Nuestro objetivo es mejorar la seguridad de productos y software con nuestro nuevo manual de modelado de amenazas. Consideramos el modelado de amenazas como una actividad fundamental para mejorar la garantía de su software. Estamos convencidos de que una buena práctica de modelado de...

oracle-weblogic-CVE-2021-2109

oracle-weblogic-CVE-2021-2109 Oracle Weblogic RCE - CVE-2022-2109...

sticky_keys_hunter

Sticky Keys Hunter This POC bash script tests for sticky keys and utilman backdoors. The script will connect to an RDP server, send both the sticky keys and utilman triggers and screenshot the result. This script was written to prove a theory I had about detecting these backdoors in a blackbox...

semgrep-rules

Trail of Bits public Semgrep rules This repository contains Semgrep rules developed by Trail of Bits and made available to the public. They are part of our ongoing development efforts and are used in our security audits, vulnerability reseach, and internal projects. They will evolve over time as ...

CVE-2019-15107

CVE-2019-15107...

CVE-2019-9849

CVE-2019-9849: Remote bullet graphics retrieved in “stealth mode” in LibreOffice LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable...

CVE-2024-38077

This repository does not have a README...

wanderer

Wanderer Wanderer is an open-source program that collects information about running processes. This information includes the integrity level, the presence of the AMSI as a loaded module, whether it is running as 64-bit or 32-bit as well as the privilege level of the current process. This...

atomic-red-team

Atomic Red Team Atomic Red Team™ 是一个测试库，映射到 MITRE ATT&CK® 框架。安全团队可以使用 Atomic Red Team 快速、可移植、可重复地测试其环境。 开始使用 您可以直接从命令行执行原子测试，无需安装。请参阅我们维基的入门页面。 为了获得更强大的测试体验，请考虑使用执行框架，如 Invoke-Atomic。 了解更多 Atomic Red Team 文档可在维基中获取。 有关 Atomic Red Team 理念和开发的信息，请访问我们的网站：https://atomicredteam.io。 要随时了解 Atomic Red...

Creosote

Creosote Creosote is our solution to searching for the tarfile vulnerability described by CVE-2007-4559. The tool recursively traverses the given directory searching for python files. When the tool finds python files it scans them for the tarfile module and then parses the code into an AST to loo...

hsecscan

hsecscan Un escáner de seguridad para cabeceras de respuesta HTTP. Requisitos Python 2.x Módulos de Python os.path argparse sqlite3 urlparse urllib2 urllib json ssl Instalación root@kitploit: $ pip install hsecscan Uso root@kitploit: $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -...

rbndr

rbndr Simple DNS Rebinding Service rbndr is a very simple, non-conforming, name server for testing software against DNS rebinding vulnerabilities. The server responds to queries by randomly selecting one of the addresses specified in the hostname and returning it as the answer with a very low ttl...