PAKURI

PAKURI: Penetration Test Achieve Knowledge Unite Rapid Interface PAKURI has been merged with Python and launched as a new project, PAKURI-THON. Overview PAKURI is a penetration test tool with a terminal user interface TUI that can be operated with just the keypad. What's PAKURI I've consulted man...

trape

trape stable v2.0 People tracker on the Internet: Learn to track the world, to avoid being traced. Trape is an OSINT analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time. It was created with the aim of teaching the world how larg...

patoolkit

.. image:: https://user-images.githubusercontent.com/743886/43845704-6dbd2558-9ae1-11e8-9f77-239210fe7b6a.png PA Toolkit Pentester Academy Wireshark Toolkit PA Toolkit is a collection of traffic analysis plugins to extend the functionality of Wireshark from a micro-analysis tool and protocol...

reconpal

ReconPal: Leveraging NLP for Infosec Recon is one of the most important phases that seem easy but takes a lot of effort and skill to do right. One needs to know about the right tools, correct queries/syntax, run those queries, correlate the information, and sanitize the output. All of this might ...

mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...

frogy2.0

Orbis - 공격 표면 인텔리전스 전체 스펙트럼 공격 표면 인텔리전스 Orbis 는 조직의 인터넷에 노출된 전체 공격 표면, 서브도메인, 열린 포트, 웹 애플리케이션, 클라우드 인프라, TLS 인증서, 이메일 보안 상태, 노출된 비밀, 로그인 패널 등을 자동으로 매핑하고, 발견된 모든 자산을 점수화하고 순위를 매겨 정확히 어디에 먼저 집중해야 하는지 알려줍니다. 기능 도메인 목록을 입력하면 나머지는 Orbis가 처리합니다. 도메인 목록을 입력하면 나머지는 Orbis가 처리합니다. google.com → Frogy 2.0...

crlf-desyncs

CRLF Desyncs 이는 BlackHat USA 2026 및 DEFCON 34에서 발표된, CRLF 기반 Desync을 탐지하고 악용하기 위한 유용한 도구와 리소스를 포함하는 저장소입니다. 구성 cdn-origin/ - 응답에서 CRLF 인젝션을 퍼징하는 데 유용한 집계된 오리진-투-엣지 헤더가 포함되어 있습니다. nuclei-templates/ - 대규모로 CRLF 인젝션을 탐지하는 데 도움이 되는 nuclei 템플릿 모음입니다. cookier.py - CRLF 기반 쿠키 토싱cookie tossing 페이로드를 쉽게...

slides

슬라이드 다르게 해킹하기: Z세대 버그로 iOS 14 제압하기 BlackHat USA 2021 Zhi Zhou@CodeColorist, Jundong Xie @Jdddong 백서 녹화 패러디 Eval은 보지 마: Objective-C 런타임 동적 코드 실행 RWCTF 2021 Zhi Zhou@CodeColorist 크로스 사이트 탈출: 특이한 방법으로 macOS Safari 샌드박스 제압하기 BlackHat EU 2020 Zhi Zhou@CodeColorist 난 자유로워지고 싶어: 특이한 로직 Safari 샌드박스 탈출...

hakuin

Hakuin is a Blind SQL Injection BSQLI optimization and automation framework written in Python 3. It abstracts away the extraction logic and allows users to easily and efficiently dump databases from vulnerable web applications. To speed up the process, Hakuin utilizes a variety of optimization...

Conferences

컨퍼런스 컨퍼런스 발표 슬라이드: BlackHat USA 2025 8월 2-7일 Offensivecon 2025 5월 16-17일 Black Hat Asia 2025 4월 1-4일 Black hat Europe 2024 12월 9-12일 Hexacon 2024 슬라이드 10월 4-5일 Black Hat USA 2024 슬라이드 8월 3-8일 REcon 2024 슬라이드 6월 28-30일 Offensivecon 2024 5월 10-11일 Blackhat Asia 2024 4월 16-19일 Blackhat Asia 2023...

HyperV

HyperV Almost one year ago, I wrote a PoC for CVE-2017-0075 after had read Jordan Rabet's blackhat talk. But I've no time to make a working exploit:...

pymultitor

PyMultiTor Python Multi Threaded Tor Proxy, Did you ever want to be at two different places at the same time? When I asked myself this question, I actually started developing this solution in my mind. While performing penetration tests there are often problems caused by security devices that bloc...

vapi

vAPI vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios in the means of Exercises. Requirements PHP MySQL PostMan MITM Proxy Installation Docker docker-compose up -d Installation Manual Copying the Code cd git clone...

archerysec

지원 여러분의 아낌없는 후원은 저희에게 큰 동기부여가 됩니다. Paypal: Archery 도구 개요 참고 요구 사항 OpenVAS OWASP Zap Burp Scanner SSLScan Nikto NMAP Vulners 설치 Windows 설치 개발자 및 기여자를 위한 설치 참고 사항 수동 및 자동 설치 참고 사항 Docker 설치 Docker Compose를 통한 ArcherySec 사용 타사 통합 설정 ZAP 데몬 모드 실행 Zap 설정 OpenVAS 설정 로드맵 주요 개발자 기여자 소셜 미디어 ArcherySec는...

BLACKHAT_USA2022

BLACKHATUSA2022 BLACKHAT USA2022 공개 PDF 릴리스 또는 이 미러에서 다운로드 파일 목록, 관심 있는 항목을 검색하세요. ├── BLACKHATUSA2022 │ ├── Taking Kerberos To The Next Level.pdf │ ├── US-22-ABDELLATIF-Unlimited-Results-Breaking-Firmware-Encryption.pdf │ ├──...

BLACKHAT_Asia2023

BLACKHATAsia2023 BLACKHAT USA2022 공개 PDF에 관한 내용입니다. 파일 목록, 관심 있는 항목을 검색하세요. BLACKHATAsia2023 ├── AS-23-Babkin-firmWar-An-Imminent-Threat-to-the-Foundation-of-Computing.pdf ├── AS-23-Bai-Stealthy-Sensitive-Information-Collection-from-Android-Apps.pdf ├──...

The Rise of ‘Vibe Hacking’ Is the Next AI Nightmare

In the very near future, victory will belong to the savvy blackhat hacker who uses AI to generate code at scale...

The great Google Ads heist: criminals ransack advertiser accounts via fake Google ads

Table of contents Overview Criminals impersonate Google Ads Lures hosted on Google Sites Phishing for Google account credentials Victimology Who is behind these campaigns? Fuel for other malware and scam campaigns Indicators of Compromise Overview Online criminals are targeting individuals and...

CVE-2024-38202

CVE-2024-38202 describes an elevation of privilege in Windows Update that could allow a user with basic privileges to reintroduce mitigated vulnerabilities or bypass some VBS protections. The vulnerability requires an attacker to coax an Administrator or delegated user into performing a system re...

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Summary: As of July 10, 2025 Microsoft has completed mitigations to address this vulnerability. See KB5042562: Guidance for blocking rollback of virtualization-based security related updates and the Recommended Actions section of this CVE for guidance on how to protect your systems from this...