pentest-tools

pentest-tools Набор пользовательских инструментов безопасности для быстрых нужд. Важное примечание ‼ В ноябре 2022 года была проведена большая чистка ‼ Некоторые бесполезные/неработающие скрипты были архивированы, а другие перемещены в собственные репозитории для большей видимости. Не стесняйтесь...

Bashark

Bashark 2.0 Инструментарий пост-эксплуатации Bashark помогает пентестерам и исследователям безопасности на этапе пост-эксплуатации при аудите безопасности. Использование Чтобы запустить этот инструмент на скомпрометированном хосте, просто выполните source скрипта bashark.sh из терминала: $ source...

linux-basics-for-hackers-notes

Основы Linux для хакеров — Курс Структурированный курс, созданный на основе личных конспектов книги Linux Basics for Hackers от OccupyTheWeb. Каждый модуль разбивает основные концепции, команды и практические примеры простым языком — достаточно понятно для новичков, но достаточно детально, чтобы...

ADB-Toolkit

!made-with-bashhttps://img.shields.io/badge/-Made%20with%20Bash-1f425f.svg?logo=image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABgAAAAYCAYAAADgdz34AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAyZpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlk...

cve_2022_0492

Shell 脚本模板 一个现代 Bash 脚本模板，具有彩色输出格式和实用函数，用于创建专业的命令行工具。 功能特性 🎨 彩色输出 ：预定义的颜色方案和格式化函数 📝 标准化消息 ：一致的信息、成功、警告和错误消息格式 🔧 实用函数 ：可直接用于常见 shell 脚本操作的现成函数 📦 模块化设计 ：独立的库文件，便于在项目中重复使用 ⚡ 易于设置 ：简单的 source 机制即可立即使用 快速开始 1. 克隆或下载此模板 2. 使你的脚本可执行： root@kitploit: chmod +x script.sh 3. 运行示例脚本： root@kitploit: ./script.s...

GooFuzz

GooFuzz - Google Dorks 的力量 致谢 作者：M3n0sD0n4ld Twitter：@DavidUton 描述： GooFuzz 是一个用 Bash 脚本 编写的工具，它利用高级 Google 搜索技术来获取文件或目录中的敏感信息，而无需向 Web 服务器发送请求。 新特性 想了解 2.0 版本 的新功能以及如何正确使用该工具吗？ 请查看 以下文章，充分利用该工具。 前提条件 Bash/Zsh ：脚本运行的主要引擎。 curl ：用于向搜索引擎发送 HTTP 请求。 jq ：用于处理和过滤 JSON 格式的响应。 sed ：Unix 系统中的标准文本处理工具。...

offensive-security-labs

Offensive Security Labs A collection of hands-on offensive cy...

EUVD-2019-19247

Malware in sbrugna...

hacking-material-books

This repository is an offensive tool for Metasploit and Nmap scripting. It contains a collection of articles and resource files for Metasploit RC/ERB scripting, Nmap NSE scripting, and bash programming. The repository includes examples of how to use Metasploit RC/ERB scripting to automate tasks,...

Ian Dunn: Double evaluation in .bash_prompt of dotfiles allows a malicious repository to execute arbitrary commands

Summary Due to the improper usage of the PS1 environment variable in .bashprompt of dotfiles, a malicious repository can execute arbitrary commands when changed the current directory to it. Description The PS1 environment variable of bash supports command substitutions. For example, setting PS1 t...

GooFuzz - Tool To Perform Fuzzing With An OSINT Approach, Managing To Enumerate Directories, Files, Subdomains Or Parameters Without Leaving Evidence On The Target's Server With Google Dorking

Credits Author: M3n0sD0n4ld Twitter: @DavidUton Description: GooFuzz is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or directories without making requests to the web server. Download and install: $ git clone...

uDork - Tool That Uses Advanced Google Search Techniques To Obtain Sensitive Information In Files Or Directories, Find IoT Devices, Detect Versions Of Web Applications, And So On

uDork is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or directories, find IoT devices, detect versions of web applications, and so on. uDork does NOT make attacks against any server, it only uses predefined dorks and/or...

BlueGhost - A Network Tool Designed To Assist Blue Teams In Banning Attackers From Linux Servers

This tool utilizes various linux network tools and bash scripting to assist blue teams on defending debian and ubuntu based servers from malicious attackers. Scan/Ban shows connected IPs, scans IP addresses for open ports using nmap and whois search to gather reconnaissance on connected IPs, show...

Privilege escalation

The function getoptsimple as described in Advanced Bash Scripting Guide ISBN 978-1435752184 allows privilege escalation and execution of commands when used in a shell script called, for example, via sudo...

CVE-2019-9891

The CVE-2019-9891 entry concerns the getopt_simple function from the Advanced Bash Scripting Guide. Connected sources confirm that using this function in a shell script (e.g., invoked via sudo) can lead to privilege escalation and execution of attacker-controlled commands. Red Hat’s advisory reit...

CVE-2019-9891

The function getoptsimple as described in Advanced Bash Scripting Guide ISBN 978-1435752184 allows privilege escalation and execution of commands when used in a shell script called, for example, via sudo...

PortWitness - Tool For Checking Whether A Domain Or Its Multiple Sub-Domains Are Up And Running

PortWitness is a bash tool designed to find out active domain and subdomains of websites using port scanning. It helps penetration testers and bug hunters collect and gather information about active subdomains for the domain they are targeting.PortWitness enumerates subdomains using Sublist3r and...

[aidSQL] A tool that will aid you when trying to find vulnerable spots in your site

Is a PHP application provided for detecting security holes in your website/s. It's a modular application, meaning that you can develop your very own plugins for SQL injection detection & exploitation. 2013-05-27 NEW aidSQL Release which supports MS SQL SERVER 2000 Database injection and reverse...

bzexe /tmp Race Condition

Hi Packetstorm, This PoC exploit was developed after a discussion on Full-disclosure mailing list, where http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=632862 was proved to be exploitable. A user can wait until a binary that was compressed with bzexe is run by root and execute /tmp/exec. This...