CA-Common-Services-privilege-escalation-cve-2016-9795-revisited

CA Common Services privilege escalation CVE-2016-9795 revisited Description In one of my pentests, I stumbled across the casrvc SUID binary which is part of CA Common Services suite. As I found out, the binary is vulnerable to local privilege escalation. As a matter of fact, a public CVE...

CrackMapExecWin

CrackMapExecWin Description The great CrackMapExec tool compiled for Windows Features Latest 2.2 version Compiled for x86 so should work on x86 and x64 platforms Usage 1. Download the whole archive 2. Extract it and run crackmapexec.exe 3. Profit Older versions Browse the release section to find...

rizin-notebook

Rizin Notebook A notebook for binary analysis with rizin. Keep notes, commands, and scripts organized per binary. Requires rizin 0.7.0 or later. What it does Each notebook page is tied to one binary. It stores the binary itself, its SHA-256 hash, and a list of cells : command cells - a rizin...

kernagent

root@kitploit: | | | | | |/ / \ '| ' \ / |/ |/ \ ' | | | / | | | | | | | | | / | | | | ||\|| || ||,|, ||| ||| |/ 🔍 kernagent Turn binaries into conversations — deterministic, auditable, offline-capable. kernagent converts a binary into a portable static snapshot and lets an LLM or your...

elfpack

ElfPack: ELF Binary Section Docking for Stageless Payload Delivery Highlights Overview of payload bundling mechanisms: compilation,linking and loading. Binary compatibility and creation of loosely coupled payloads to their delivery mechanism. Avoiding automatic memory loading of sections. Use of...

uafuzz

UAFuzz: Binary-level Directed Fuzzing for Use-After-Free Vulnerabilities Directed Greybox Fuzzing DGF like AFLGo aims to perform stress testing on pre-selected potentially vulnerable target locations, with applications to different security contexts: 1 bug reproduction, 2 patch testing or 3 stati...

shuffledns

massDNS wrapper to bruteforce and resolve the subdomains with wildcard handling support Feature • Install • Run • Wildcard • License • Discord shuffleDNS is a wrapper around massdns, written in go, that allows you to enumerate valid subdomains using active bruteforce, as well as resolve subdomain...

xpfarm

XPFarm An open-source vulnerability scanner that wraps well-known open-source security tools behind a single web UI. Index Section| Description ---|--- Why| Motivation and philosophy behind XPFarm Wrapped Tools| The 10 open-source tools orchestrated by XPFarm Architecture Map| Full system...

NeuroCore

NeuroCore High-Performance Structural Binary Analysis and Visualization Utility Abstract NeuroCore is a native macOS utility engineered for the structural analysis of binary data through high-velocity visualization. By leveraging General-Purpose Computing on Graphics Processing Units GPGPU via...

dnsdiag

DNS Measurement, Troubleshooting and Security Auditing Toolset Have you ever wondered if your ISP is intercepting your DNS traffic? Have you noticed any unusual behavior in your DNS responses, or been redirected to the wrong address and suspected something might be off with your DNS? We offer a...

reverse-captcha-eval

Reverse CAPTCHA: Evaluating LLM Susceptibility to Invisible Unicode Instruction Injection An evaluation framework that tests whether large language models follow invisible Unicode-encoded instructions embedded in otherwise normal-looking text. Where traditional CAPTCHAs exploit tasks humans can...

attesor

Rosetta 2 Reverse Engineering Project A comprehensive reverse-engineering effort to understand and document Apple's Rosetta 2 binary translation technology. Table of Contents 1. Background 2. What is Rosetta? 3. What is Rosetta 2? 4. How Apple Delivers Rosetta 2 in macOS 5. Technical Architecture...

yaralyzer

THE YARALYZER 바이너리 데이터 및/또는 텍스트에서 발견된 모든 정규식 일치 그리고 더 섹시하고 비밀스러운 사촌인 YARA 일치를 시각적으로 검사합니다. 일치된 바이트에 다양한 문자 인코딩을 강제로 적용했을 때 어떤 일이 일어나는지 확인하세요. 색상과 함께. 빠른 시작 root@kitploit: pipx install yaralyzer YARA 규칙 파일로 스캔: yaralyze --yara-rules /secret/vault/sigmundsmalwarerules.yara lacanbuysthedip.pdf 임의의...

botb

Break out the Box BOtB BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies. What does it do? BOtB is a CLI tool which allows you to: Exploit common container vulnerabilities Perform commo...

speakeasy

Speakeasy Speakeasy is a Windows malware emulation framework that executes binaries, drivers, and shellcode in a modeled Windows runtime instead of a full VM. It emulates APIs, process/thread behavior, filesystem, registry, and network activity so samples can keep moving through realistic executi...

go_parser

Yet Another Golang binary parser for IDAPro English |中文 NOTE : Now the latest master branch is the Python3 version. The old master branch has been changed to branch py2 , and temporarily not maintained. Instructions for Python3 branch This version is developed and tested on macOS/Windows, IDA7.4+...

go_parser

IDAPro를 위한 또 다른 Golang 바이너리 파서 영어 |중국어 참고 : 현재 최신 master 브랜치는 Python3 버전입니다. 이전 master 브랜치는 py2 브랜치로 변경되었으며 임시로 유지보수되지 않습니다. Python3 브랜치 사용법 이 버전은 macOS/Windows, IDA7.4+ 및 Python3.8.x에서 개발 및 테스트되었습니다. 다른 플랫폼이나 버전에서 문제가 발생하면 이슈나 Pull Request를 제출해 주세요. 또한 macOS의 IDA7.4는 기본적으로 설치된 Python3를 사용하므로, 사용...

Dna

Dna Dna is a static binary analysis framework built on top of LLVM. Notably it's written almost entirely in C, including managed bindings for LLVM, Remill, and Souper. Functionality Dna implements an iterative control flow graph reconstruction inspired heavily by the SATURN paper. It iteratively...

minion-ticket-bleed-plugin

Minion Ticketbleed 플러그인 이것은 F5 TLS 계층에서 TicketbleedCVE-2016-9244 취약점을 확인하는 Minion 플러그인입니다. 테스트는 Go 스크립트 또는 Linux 바이너리로 실행될 수 있습니다. 스크립트는 https://filippo.io/Ticketbleed/에서 개선되었습니다. 설치 프로젝트를 git clone https://github.com/glestel/minion-ticket-bleed-plugin.git으로 클론하세요. 그런 다음 프로젝트 디렉토리에서,...

zabbix-threat-control

Zabbix Threat Control ztc 이미 운영 중인 Zabbix를 취약점 관리 콘솔로 만들어 보세요. ztc는 기본 zabbix-agent2 를 통해 각 호스트의 소프트웨어 인벤토리를 읽고추가 에이전트 배포 불필요, 이를 Vulners에 대조 감사하여 점수화된 호스트별 결과 — 문제, 대시보드 및 CVSS 그래프 — 를 Zabbix로 다시 푸시합니다. 단일 정적 바이너리이며, 단일 명령으로 설치됩니다. 왜 ztc인가 새 에이전트 없음, RCE 없음. 호스트는 표준 zabbix-agent2 UserParameter를 ...