ad-autopwn

AD AutoPwn De Cero Autenticación a Administrador de Dominio — Cadena de Ataque Automatizada a Active Directory Una herramienta de pruebas de penetración completamente automatizada que encadena más de 25 técnicas de ataque para comprometer entornos de Active Directory. Diseñada para evaluaciones d...

Autopwn

Autopwn™ A simple bash based metasploit automation tool! With just a few clicks, own any android or windows device!! Autopwn in action Caution: This tool is purely for educational purposes, If you end up in any legal trouble and point a finger at me, I'll just laugh at you : The user is responsib...

AutoPWN-Suite

AutoPWN Suite AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically. Features CLI Fully automatic scanning and exploitation Detect network IP range without any user input Vulnerability detection based on service versions Web app vulnerability testing LFI, XS...

LeakedHandlesFinder

LHF - Buscador de Handles Filtrados Herramienta de identificación de handles de procesos de Windows filtrados. Útil para identificar nuevas vulnerabilidades de LPE durante un pentest o simplemente como un nuevo proceso de investigación. Actualmente soporta la explotación autopwn de handles...

autoPwn

Advertencia Actualmente se está reescribiendo por completo. Inicialmente, el enfoque estará en aplicaciones Linux interactivas que solo toman entrada de stdin. Se intentará utilizar la funcionalidad Driller y Fuzzer de Shellphish. autoPwn en su estado actual hará esto de forma limitada. Simplemen...

CVE-2023-4220

autopwn...

jboss-autopwn

⚠️ NOTE: This tool is no longer under active maintenance. JBoss Autopwn 脚本 Christian G. Papathanasiou http://www.spiderlabs.com 简介 该JBoss脚本在目标JBoss AS服务器上部署一个JSP Shell。部署后，脚本利用其上传和命令执行功能提供一个交互式会话。 功能包括： 多平台支持——已在Windows、Linux和Mac目标上测试 支持绑定Shell和反向连接Shell 针对Windows目标的Meterpreter Shell和VNC支持 安装 依赖项包...

autopwn

autopwn 指定目标并针对它们运行工具集 autopwn 旨在让渗透测试人员的工作更轻松、更一致，允许他们指定想要针对目标运行的工具，而无需在 shell 中输入它们或编写脚本。这个工具在某些考试中可能也会派上用场。 安装 建议您使用 Docker 镜像，并暴露 TCP 5000 端口供 autopwn 客户端连接。这是因为 autopwn Docker 镜像已经配置完成（工具已安装并放置在正确的位置）。 只允许此软件包在回环 IP 地址上监听。如果您让此软件包监听公共 IP，就等于允许任意用户以 root 身份在您的服务器上执行命令。最终将需要 HTTPS...

HTTP Client Automatic Exploiter 2 (Browser Autopwn)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "HTTP Client Automatic Exploiter 2 Browser Autopwn", 'Description' = %q This module will automatically serve browser exploits. Here are the option...

AutoPWN Suite - Project For Scanning Vulnerabilities And Exploiting Systems Automatically

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically. How does it work? AutoPWN Suite uses nmap TCP-SYN scan to enumerate the host and detect the version of softwares running on it. After gathering enough information about the host, AutoPWN Suite...

LeakedHandlesFinder - Leaked Windows Processes Handles Identification Tool

Leaked Windows processes handles identification tool. Useful for identify new LPE vulnerabilities during a pentest or simply as a new research process. Currently supports exploiting autopwn procesess leaked handles spawning a new arbitrary process cmd.exe default. LHF identifies in realtime...

Fsociety Hacking Tools Pack

Fsociety Menu Information Gathering Password Attacks Wireless Testing Exploitation Tools Sniffing & Spoofing Web Hacking Private Web Hacking Post Exploitation INSTALL & UPDATE Information Gathering : Nmap Setoolkit Port Scanning Host To IP wordpress user CMS scanner XSStracer Dork – Google Dorks...

HTTP Client Automatic Exploiter 2 (Browser Autopwn)

This module will automatically serve browser exploits. Here are the options you can configure: The INCLUDEPATTERN option allows you to specify the kind of exploits to be loaded. For example, if you wish to load just Adobe Flash exploits, then you can set Include to 'adobeflash'. The EXCLUDEPATTER...

Opera <= 9.10 Configuration Overwrite

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

Java CMM Remote Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' class...

[Blue|Smash] Bluetooth Penetration Testing Suite

Blue|Smash is a free open source bluetooth pentest suite, powered by python for linux. I built Blue|Smash to aid me in my bluetooth adventures and thought others might benefit from my work :D. Here is a list of some of the tools included. Sorbo's Frontline bluetooth sniffer. A bruteforce scanner...

Java Applet - ProviderSkeleton Insecure Invoke Method (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' class Metasploit3 false EXPLOITSTRING =...

Java Applet - Driver Manager Privileged 'toString()' Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' class Metasploit3 false def initialize inf...

Synactis PDF In-The-Box ConnectToSynactic Stack Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

Java CMM Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' class Metasploit3 false def initialize inf...