miteru

This repository does not have a README...

pagesource

pagesource A Python CLI tool that captures all resources loaded by a webpage like browser DevTools Sources tab and saves them with the original directory structure. Installation pip install pagesource IMPORTANT: Install Playwright browser after package installation playwright install chromium Usa...

autobloody

autobloody autobloody is a tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound. Description This tool automates the AD privesc between two AD objects, the source the one we own and the target the one we want if a privesc path exists in BloodHound database...

Pwdlyser

Pwdlyser 公共发布的新仓库 Pwdlyser P assw ord -Analyser 是一款多功能分析工具，旨在为安全专业人员以及致力于提升安全态势的组织提供便捷的密码审查与分析能力，可针对 Active Directory 域账户、数据库等中的密码进行轻松审核。其次，它应能被安全顾问和渗透测试人员用于识别和定位关键账户密码（如域管理员）、最常见的 Hashcat 字符密码掩码，并输出列表中常见密码的估计熵值。...

pywhisker

pyWhisker pyWhisker is a Python equivalent of the original Whisker made by Elad Shamir and written in C. This tool allows users to manipulate the msDS-KeyCredentialLink attribute of a target user/computer to obtain full control over that object. It's based on Impacket and on a Python equivalent o...

ADFT

ADFT v1.0 ADFT is an offline Active Directory / Windows investigation toolkit with an integrated local web UI. This official v1.0 release ships one coherent product surface: the canonical ADFT engine the CLI the integrated GUI served by the backend ADFT ingests exported evidence, converts every...

Invoke-CleverSpray

Invoke-CleverSpray Password Spraying Script detecting current and previous passwords of Active Directory User by @flelievre Options: -Password: Password to spray. -PasswordFile: Path to file containing a list of passwords to spray. -Username: samAccountName of the user to target. -UsernamesFile:...

Find-AdminAccess

FindAdminAccess A C utility that enumerates domain computers and tests administrative access to them, including connectivity checks, admin privileges verification, and C$ share writability testing. Features Enumerate all computers in an Active Directory domain Test network connectivity Verify...

Better-CVE-2022-29464

更好的CVE-2022-29464 某些WSO2产品允许无限制的文件上传，导致远程代码执行。攻击者必须使用一个/fileupload端点，并带有Content-Disposition目录遍历序列，以到达web根目录下的一个目录，例如../../../../repository/deployment/server/webapps目录。 使用方法 python3 main.py https://example.com shell.jsp 将 https://example.com 替换为易受攻击的服务器，并将 shell.jsp 替换为您要用于上传的文件名。 根据需要编辑 shell.jsp...

Project-Eyes-On

Project Eyes On v3.0 Global Surveillance Coded by: Y0oshi IG: @rde0 "The unified intelligence tool for mass IP camera scanning." Overview Project Eyes On is a hyper-fast, multi-threaded surveillance tool designed to locate open IP cameras across the globe. It combines two powerful engines: 1...

StealthCrypter

💀StealthCrypter💀 📜 Description StealthCrypter is a powerful and easy-to-use encryption tool that helps you protect your sensitive files and directories using AES-256 encryption. Whether you need to safeguard personal documents or secure confidential data, CryptShield ensures that your files remai...

blutter

Blutter Flutter Mobile Application Reverse Engineering Tool by Compiling Dart AOT Runtime Currently the application supports only Android libapp.so arm64 only. Also the application is currently work only against recent Dart versions. For high priority missing features, see TODO Environment Setup...

Exploits_and_Advisories

Exploits y Avisos Repositorio que rastrea exploits, vulnerabilidades y avisos públicos que co-descubrí o co-redacté. CVEs CVE| ID| Objetivo| Descripción| Divulgación ---|---|---|---|--- CVE-2020-10881| ZDI-20-333| TP-Link Archer A7/C7| desbordamiento de pila DNS| Pwn2Own Tokyo 2019 CVE-2020-10882...

dirmap

Dirmap 中文 An advanced web directory scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian Demand analysis After a lot of research, summarizing an excellent web directory scanning tool has at least the following features: Concurrency engine Can use the dictionary...

macos_app_structure

Introducción a macOS - Estructura de las Apps de macOS Transicionar a macOS desde Linux o Windows puede sentirse como caminar por una tierra nueva y desconocida. Dado que Linux es de código abierto y Windows está bien documentado y es muy popular y macOS no es ninguna de las dos cosas, exactament...

doona

Doona - Network fuzzing tool .:: About ::. Doona is a fork of the Bruteforce Exploit Detector Tool BED. BED is a program which is designed to check daemons for potential buffer overflows, format string bugs etc. Doona is Australian for duvet. It adds a significant enough number of features/change...

Whisker

Whisker Whisker is a C tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account. This tool is based on code from DSInternals by Michael Grafnetter @MGrafnetter. For this...

papers-we-love

Papers We Love PWL es una comunidad construida en torno a la lectura, el debate y el aprendizaje de artículos académicos de ciencias de la computación. Este repositorio sirve como un directorio de algunos de los mejores artículos que la comunidad puede encontrar, reuniendo documentos dispersos po...

PowerHuntShares

PowerHuntShares v2 PowerHuntShares is PowerShell tool designed to help cybersecurity teams and penetration testers better identify, understand, attack, and remediate SMB shares in the Active Directory environments they protect. Every hacker has a story about abusing SMB shares, but it’s an attack...

Pentest-Cheat-Sheet

Hoja de referencia de Pentest Hay muchas hojas de referencia por ahí, pero esta es la mía. Es un trabajo en progreso ahora mismo, y vive como un borrador que se actualiza mucho , a veces. Lo empecé mientras estudiaba para mi OSCP, pero ahora está evolucionando para incluir cosas más prácticas que...