2479 matches found
MSC-EvilTwin-Local-Privilege-Escalation
CVE-2025-26633 - Microsoft Management Console .msc EvilTwin Local Privilege Escalation PoC Zero-day at time of disclosure March 2025 β Actively exploited in the wild by Water Gamayun APT ONLY FOR AUTHORIZED SECURITY TESTING AND RESEARCH Vulnerability Details Exploit Title : Microsoft Management...
Awesome-FOFA
Awesome-FOFA Library π δΈζ README Get Started with FOFA A Beginnerβs Guide How to Get Free F-point from FOFA? FOFA and AI Next-Generation Attack Surface Inventory: Free Trial Available! Basic scenario How to use FOFA to discover free LLM resources? Elevating FOFA Search Efficiency through Novel...
APT_REPORT
APTREPORT collected by @blackorbird https://x.com/blackorbird Interesting apt report & sample & malware & technology & intellegence collection APT Group for country Threat Actor Groups Tracked by Palo Alto Networks Unit 42...
APTSimulator
APT Simulator Important: Don't just ZIP download or clone the repo if you don't plan to develop some test. Use the package in the release which contains a packaged version with encrypted archives that don't contain cleartext samples and tools. APT Simulator is a Windows Batch script that uses a s...
metagoofil
Metagoofil 2.2 Coded by Christian Martorella www.edge-security.com [email protected] What is this? Metagoofil is a tool for extracting metadata of public documents pdf,doc,xls,ppt,etc availables in the target websites.This information could be useful because you can get valid usernames, peop...
sparrow-wifi
Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...
evtx
EVTX A cross-platform parser for the Windows XML EventLog format Features π Implemented using 100% safe rust - and works on all platforms supported by rust that have stdlib. β‘ Fast - see benchmarks below. It's faster than any other implementation by orders of magnitude! π Multi-threaded. β¨ Suppor...
check_CVE-2019-3462
Check @Debian and @Ubuntu GNU / Linux for CVE-2019-3462 in APT...
CyberThreatIntel
CyberThreatIntel Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups Summary 2020-01-20 - Transparent Tribe APT 2020-01-03 - MAAS Terraloader 2019-12-28 - SideWinder same targets, same TTPs, time to counter-attack ! 2019-11-18 - APT33 continue to target US companies...
APT-Hunter
APT-Hunter Threat hunting for Windows event logs, built with a purple-team mindset. APT-Hunter is a threat hunting tool for Windows event logs. It uses pre-defined detection rules and log statistics to surface APT activity hidden in large volumes of events, cutting the time needed to uncover...
BEAR-C2
BEAR-C2 Framework BEAR-C2 is an adversary simulation and emulation framework built around real world TTPs inspired by Russian, Chinese, North Korean, and Iranian APT groups. It provides a flexible environment for diverse engagement scenarios and delivers a realistic foundation for red team...
APT-Backpack
APT-Backpack Most common used CVE's by APT, legitimate RAT and other tools used by adversary CVE's CVE-2019-11510 Pulse Connect Secure 8.2 8.3 9.0 Unauth file read CVE-2019-19781 Citrix ADC & Gateway Directory Traversal CVE-2020-5902 F5 Big IP RCE CVE-2021-1497 Cisco HyperFlex HX Unauth Command...
Breach-Report-Collection
Breach Report Collection A collection of companies that disclose adversary TTPs after they have been breached Useful for analysis of intrusions launched by adversaries with measurable effects and impact Organization| Breach Date| Adversary| Source ---|---|---|--- DigiCert| April 2026| GoldenEyeDo...
KaliPackergeManager
KaliPackergeManager kalipm.sh is a powerful package management tool for Kali Linux that provides a user-friendly menu-based interface to simplify the installation of various packages and tools. It streamlines the process of managing software and enables users to effortlessly install packages from...
awesome-threat-intelligence
awesome-threat-intelligence A curated list of awesome Threat Intelligence resources A concise definition of Threat Intelligence: evidence-based knowledge, including context, mechanisms, indicators, implications and actionable advice, about an existing or emerging menace or hazard to assets that c...
APT-Individual-Combat-Guide
APT-Individual-Combat-Guide Many people think it is difficult to launch an APT attack because they do not know how the APT attack occurs. In fact, with the development of automation tools, the APT attack can be easily launched. εζ’ εζ’ε°δΈζη Background This warehouse is the code and command warehouse...
Arcane
Arcane is a simple script designed to backdoor iOS packages iphone-arm and create the necessary resources for APT repositories. It was created for this publication to help illustrate why Cydia repositories can be dangerous and what post-exploitation attacks are possible from a compromised iOS...
Royal_APT
RoyalAPT Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research Sharepoint tool Among the tools developed by the group for the victim, APT15 created a .net tool to enumerate the victim's sharepoint database. Below is an screen-shot from the decompiled binary...
BLACKHAT_Asia2023
BLACKHATAsia2023 Just About BLACKHAT USA2022 PDF Public File List, Search what your intersting. BLACKHATAsia2023 βββ AS-23-Babkin-firmWar-An-Imminent-Threat-to-the-Foundation-of-Computing.pdf βββ AS-23-Bai-Stealthy-Sensitive-Information-Collection-from-Android-Apps.pdf βββ...
whodunit
whodunit Recognizing the most likely APT groups responsible for an incident Description This program takes a report from a cybersecurity incident containing the MITRE ATT&CK techniques that have been detected to have been used in the incident and tries to recognize which APT groups are the most...