pentest-tools

pentest-tools مجموعة من أدوات الأمان المخصصة للاحتياجات السريعة. ملاحظة مهمة ‼ حدث تنظيف كبير في 2022-11 ‼ تم أرشفة بعض البرامج النصية غير المفيدة/غير العاملة وتم نقل البعض الآخر إلى مستودعاتها الخاصة للحصول على مزيد من الرؤية، لا تتردد في التحقق منها: apk-analyzer cloudflare-origin-ip csp-analyz...

GooFuzz

GooFuzz - قوة استعلامات جوجل المتقدمة الإسناد المؤلف: M3n0sD0n4ld تويتر: @DavidUton الوصف: GooFuzz هو سكريبت مكتوب بلغة Bash Scripting يستخدم تقنيات بحث جوجل المتقدمة للحصول على معلومات حساسة في ملفات أو أدلة دون إرسال طلبات إلى خادم الويب. الجديد هل تريد التعرف على الميزات الجديدة في الإصدار 2.0...

Bashark

Bashark 2.0 مجموعة أدوات لمرحلة ما بعد الاستغلال يساعد Bashark مختبرِي الاختراق وباحثي الأمن خلال مرحلة ما بعد الاستغلال في التدقيق الأمني. الاستخدام لتشغيل هذه الأداة على المضيف المخترق، قم ببساطة بتضمين source السكربت bashark.sh من الطرفية: $ source bashark.sh ثم اكتب help لرؤية قائمة المساعدة...

linux-basics-for-hackers-notes

Bases Linux pour les Hackers — Cours Un cours structuré construit à partir de notes d'étude personnelles du livre Linux Basics for Hackers par OccupyTheWeb. Chaque module décompose les concepts clés, les commandes et les exemples pratiques en anglais simple — assez direct pour les débutants, asse...

ADB-Toolkit

!made-with-bashhttps://img.shields.io/badge/-Made%20with%20Bash-1f425f.svg?logo=image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABgAAAAYCAYAAADgdz34AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAyZpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlk...

cve_2022_0492

Шаблон Shell-скрипта Современный шаблон Bash-скрипта с цветным форматированием вывода и вспомогательными функциями для создания профессиональных утилит командной строки. Возможности 🎨 Цветной вывод : Предопределённые цветовые схемы и функции форматирования 📝 Стандартизированные сообщения : Единый...

offensive-security-labs

Offensive Security Labs A collection of hands-on offensive cy...

EUVD-2019-19247

Malware in sbrugna...

hacking-material-books

This repository is an offensive tool for Metasploit and Nmap scripting. It contains a collection of articles and resource files for Metasploit RC/ERB scripting, Nmap NSE scripting, and bash programming. The repository includes examples of how to use Metasploit RC/ERB scripting to automate tasks,...

Ian Dunn: Double evaluation in .bash_prompt of dotfiles allows a malicious repository to execute arbitrary commands

Summary Due to the improper usage of the PS1 environment variable in .bashprompt of dotfiles, a malicious repository can execute arbitrary commands when changed the current directory to it. Description The PS1 environment variable of bash supports command substitutions. For example, setting PS1 t...

GooFuzz - Tool To Perform Fuzzing With An OSINT Approach, Managing To Enumerate Directories, Files, Subdomains Or Parameters Without Leaving Evidence On The Target's Server With Google Dorking

Credits Author: M3n0sD0n4ld Twitter: @DavidUton Description: GooFuzz is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or directories without making requests to the web server. Download and install: $ git clone...

uDork - Tool That Uses Advanced Google Search Techniques To Obtain Sensitive Information In Files Or Directories, Find IoT Devices, Detect Versions Of Web Applications, And So On

uDork is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or directories, find IoT devices, detect versions of web applications, and so on. uDork does NOT make attacks against any server, it only uses predefined dorks and/or...

BlueGhost - A Network Tool Designed To Assist Blue Teams In Banning Attackers From Linux Servers

This tool utilizes various linux network tools and bash scripting to assist blue teams on defending debian and ubuntu based servers from malicious attackers. Scan/Ban shows connected IPs, scans IP addresses for open ports using nmap and whois search to gather reconnaissance on connected IPs, show...

Privilege escalation

The function getoptsimple as described in Advanced Bash Scripting Guide ISBN 978-1435752184 allows privilege escalation and execution of commands when used in a shell script called, for example, via sudo...

CVE-2019-9891

The CVE-2019-9891 entry concerns the getopt_simple function from the Advanced Bash Scripting Guide. Connected sources confirm that using this function in a shell script (e.g., invoked via sudo) can lead to privilege escalation and execution of attacker-controlled commands. Red Hat’s advisory reit...

CVE-2019-9891

The function getoptsimple as described in Advanced Bash Scripting Guide ISBN 978-1435752184 allows privilege escalation and execution of commands when used in a shell script called, for example, via sudo...

PortWitness - Tool For Checking Whether A Domain Or Its Multiple Sub-Domains Are Up And Running

PortWitness is a bash tool designed to find out active domain and subdomains of websites using port scanning. It helps penetration testers and bug hunters collect and gather information about active subdomains for the domain they are targeting.PortWitness enumerates subdomains using Sublist3r and...

[aidSQL] A tool that will aid you when trying to find vulnerable spots in your site

Is a PHP application provided for detecting security holes in your website/s. It's a modular application, meaning that you can develop your very own plugins for SQL injection detection & exploitation. 2013-05-27 NEW aidSQL Release which supports MS SQL SERVER 2000 Database injection and reverse...

bzexe /tmp Race Condition

Hi Packetstorm, This PoC exploit was developed after a discussion on Full-disclosure mailing list, where http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=632862 was proved to be exploitable. A user can wait until a binary that was compressed with bzexe is run by root and execute /tmp/exec. This...