POSTDump

POSTDump LSASSプロセスのミニダンプを、検出を回避するいくつかの手法を用いて実行するための別のツールです。 POSTDumpは、ReactOSのミニダンプ機能（nanodumpなど）のC/.NET実装であり、Windows APIのMiniDumpWriteDump関数の呼び出しを回避します。 ダンプロジックコードはPOSTMinidumpプロジェクトに保存されており、自分のプロジェクトで自由に使用できます。 NanoDumpと同様に、ミニダンプを暗号化したり、無効な署名を使用したりできます。...

wodat

wodat Windows Oracle 数据库攻击工具 将流行的 Oracle 数据库攻击工具 ODAT https://github.com/quentinhardy/odat 移植到 C .Net Framework 的简单版本。 感谢 https://github.com/quentinhardy/odat，因为大部分功能都是从他的代码移植过来的。 执行基于密码的攻击，例如：用户名作为密码、针对给定密码的用户名列表、针对给定用户名的密码列表、用户名:密码组合列表。 测试凭据/连接字符串是否对目标有效。 暴力攻击以发现有效的 SID/服务名。 根据提供的目标文件或 CIDR...

Endurance-Wiper

Endurance-Wiper Beta - 开源 一款使用 .NET 框架、以 C 编写的小型擦除器恶意软件。 如果你来自 Twitter 或其他任何渠道，你可以清楚地看出该项目正处于积极开发中。 你可以随时在此查看更新。 https://breached.vc/Thread-active-development-custom-wiper-ransomware 系统要求 Visual Studio 22 Visual Studio C 桌面开发包 设置 1. 克隆仓库：git clone https://github.com/IntelBroker/Endurance-Wiper/ 2...

LACheck

LACheck 多线程 C .NET 程序集 本地管理权限枚举 参数 root@kitploit: ./LACheck.exe help | | /\ / | | | | | | / \ | | | | | | | | / /\ \ | | | ' \ / / | |/ / | | / \ | || | | | / | |// \ || |||||\ Usage: LACheck.exe smb rpc /targets:hostname,fqdn.domain.tld,10.10.10.10 /ldap:all /ou:"OU=Special...

SharpShares

SharpShares Ensamblado multihilo en C .NET para enumerar recursos compartidos de red accesibles en un dominio Basado en el proyecto djhohnstein's SharpShares root@kitploit: .\SharpShares.exe help Usage: SharpShares.exe /threads:50 /ldap:servers /ou:"OU=Special Servers,DC=example,DC=local"...

EUVD-2024-1533

Malicious code in bioql PyPI...

CVE-2024-29857

A vulnerability was found in Bouncy Castle. An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters...

CVE-2024-29857

An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of th...

CVE-2024-29857

CVE-2024-29857 (open vulnerability in Bouncy Castle family). An issue in ECCurve.java/ECCurve.cs can allow an EC certificate with crafted F2m parameters to trigger excessive CPU usage while evaluating curve parameters. Affected products/versions include BC Java before 1.78, BC Java LTS before 2.7...

SharpShares - Multithreaded C# .NET Assembly To Enumerate Accessible Network Shares In A Domain

Multithreaded C .NET Assembly to enumerate accessible network shares in a domain Built upon djhohnstein's SharpShares project .\SharpShares.exe help Usage: SharpShares.exe /threads:50 /ldap:servers /ou:"OU=Special Servers,DC=example,DC=local" /filter:SYSVOL,NETLOGON,IPC$,PRINT$ /verbose...

Wodat - Windows Oracle Database Attack Toolkit

Simple port of the popular Oracle Database Attack Tool ODAT https://github.com/quentinhardy/odat to C .Net Framework. Credit to https://github.com/quentinhardy/odat as lots of the functionality are ported from his code. Perform password based attacks e.g. username as password, username list again...

Timing based private key exposure in Bouncy Castle

Bouncy Castle BC Java before 1.66, BC C .NET before 1.8.7, BC-FJA before 1.0.2.1, BC before 1.66, BC-FNA before 1.0.1.1 have a timing issue within the EC math library that can expose information about the private key when an attacker is able to observe timing information for the generation of...

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Bouncy Castle BC Java before 1.66, BC C .NET before 1.8.7, BC-FJA before 1.0.1.2, 1.0.2.1, and BC-FNA before 1.0.1.1 have a timing issue within the EC math library that can expose information about the private key when an attacker is able to observe timing information for the generation of multip...

CVE-2020-15522

CVE-2020-15522 affects Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.1.2/1.0.2.1, and BC-FNA before 1.0.1.1. The issue is a timing side-channel in the EC math library that can reveal information about a private key when an attacker observes timing across multiple d...

CVE-2020-15522

Bouncy Castle BC Java before 1.66, BC C .NET before 1.8.7, BC-FJA before 1.0.1.2, 1.0.2.1, and BC-FNA before 1.0.1.1 have a timing issue within the EC math library that can expose information about the private key when an attacker is able to observe timing information for the generation of multip...

CVE-2020-15522

Bouncy Castle BC Java before 1.66, BC C .NET before 1.8.7, BC-FJA before 1.0.1.2, 1.0.2.1, and BC-FNA before 1.0.1.1 have a timing issue within the EC math library that can expose information about the private key when an attacker is able to observe timing information for the generation of multip...

SharpHound3 - C# Data Collector For The BloodHound Project

Get SharpHound The latest build of SharpHound will always be in the BloodHound repository here Compile Instructions SharpHound is written using C 9.0 features. To easily compile this project, use Visual Studio 2019. If you would like to compile on previous versions of Visual Studio, you can insta...

MuM MapEdit 3.2.6.0 - Multiple Vulnerabilities

Security Advisory -- Multiple Vulnerabilities - MuM Map Edit Product Vendor: Mensch und Maschine Software SE / Mensch und Maschine acadGraph GmbH Product: MapEdit Affected software version: 3.2.6.0 MuM MapEdit provides geodata to the internet and intranets and is deployed on several communal and...

Antak WebShell - A webshell which utilizes PowerShell

Antak is a webshell written in C.Net which utilizes powershell. Antak is a part of Nishang and updates could be found here: https://github.com/samratashok/nishang Use this shell as a normal powershell console. Each command is executed in a new process, keep this in mind while using commands like...