shed

Shed - .NET runtime inspector Shed is an application that allow to inspect the .NET runtime of a program in order to extract useful information. It can be used to inspect malicious applications in order to have a first general overview of which information are stored once that the malware is...

CVE-2001-1442

CVE-2001-1442 ISC INN 2.x - Desbordamiento de búfer en línea de comandos Exploit-DB publicación 1: https://www.exploit-db.com/exploits/20777/ Exploit-DB publicación 2: https://www.exploit-db.com/exploits/20778/ Publicación de Packetstorm en...

ctftools

CTF工具数据库 Twitter: @hydr0nium 依赖： sudo apt install python2 安装： git clone https://github.com/white-hood/ctftools.git cp .ctftools cd /bin ln -s ctftools /path/to/ctftools.py 用法： ./ctftools | 正常使用 ./ctftools --remove | 从数据库中移除工具 ./ctftools --add | 向数据库添加工具 ./ctftools --help | 显示帮助菜单...

revshellgen

🚀 RevShellGen 反向 Shell 生成器 以优雅的方式自动化反向 Shell 生成 生成、编码、捕获反向 Shell，省去繁琐操作 功能 • 安装 • 用法 • Shell 类型 • 贡献 📖 关于 RevShellGen 是一个强大的命令行工具，简化了生成反向 Shell 命令的过程。无需再查找语法，无需手动编码，无需头疼的配置。本工具通过直观的界面处理一切。 🎯 主要功能 🖥️ 交互式 CLI - 用户友好的菜单驱动界面 🔄 自动编码 - 支持 URL 和 Base64 编码 📋 剪贴板集成 - 自动复制生成的命令 🌐 网络检测 - 自动发现 IP 地址 🎨 多种...

r0ak

r0ak r0ak（“roak”）是 Ring 0 军刀 —— 一个用于在 Windows 10 系统上读取/写入/执行 Ring 0 的命令行工具。...

pentest-a2p2v-core

README Automated Attack Path Planning and Validation A2P2V is a planning and cyber-attack tool that provides the capability for users to determine a set of ranked attack sequences given a specific attacker goal. The aim of the tool is to simplify process so that non-security experts can generate...

rifiuti2

Introduction Rifiuti2 is a for analyzing Windows Recycle Bin INFO2 file. Analysis of Windows Recycle Bin is usually carried out during Windows computer forensics. Rifiuti2 can extract file deletion time, original path and size of deleted files and whether the trashed files have been permanently...

CVE-2017-10271

CVE-2017-10271 用法: python CVE-2017-10271.py url...

LOLSpoof

LOLSpoof LOLSpoof 是一个交互式 shell 程序，能够自动伪造所生成进程的命令行参数。 只需调用看起来可疑的命令行 LOLBin（例如 powershell -w hidden -enc ZwBlAHQALQBwAHIAbwBjAGUA....），LOLSpoof 就会确保进程创建遥测看起来合法且清晰。 仅适用于 64 位 LOLBins 为什么 进程命令行是一种被高度监控的遥测数据，会被防病毒/EDR、SOC 分析师或威胁猎手仔细检查。 如何工作 1. 根据真实命令行构造伪造的命令行：lolbin.exe " " sizeofreal arguments 2...

aiodnsbrute

Async DNS Brute A Python 3.5+ tool that uses asyncio to brute force domain names asynchronously. Speed It's fast. Benchmarks on small VPS hosts put around 100k DNS resoultions at 1.5-2mins. An amazon M3 box was used to make 1 mil requests in just over 3 minutes. Your mileage may vary. It's probab...

CVE-2026-73767

Authenticated command injection vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2026-73753

Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2026-73754

Denial-of-service vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation could allow an authenticated user to disrupt the normal operation of a vulnerable system...

CVE-2023-35078

CVE-2023-35078-Poc-Exploit Esta herramienta está construida en el lenguaje golang para explotar la vulnerabilidad CVE-2023-35078 Para usar esta herramienta es bastante fácil, ejecuta el siguiente comando en tu terminal root@kitploit: λ git clone https://github.com/LazyySec/CVE-2023-35078.git λ cd...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

CVE-2003-0358

CVE-2003-0358 因历史原因发布。 snowcrash [email protected] https://github.com/snowcra5h/ 描述 1 nethack 3.4.0及更早版本，以及2基于nethack的falconseye 1.9.3及更早版本中存在缓冲区溢出漏洞，允许本地用户通过较长的-s 命令行选项获取特权。 参考 https://www.exploit-db.com/?author=4939 https://nvd.nist.gov/vuln/detail/CVE-2003-0358...

AtomShields-cli

AtomShields Cli AtomShields Cli 是一个命令行界面，用于使用软件 AtomShields .. raw:: html 安装 .. code-block:: shell pip install atomshieldscli 基本用法 .. code-block:: shell ascli --target --name 允许的 action 值有： install : 根据设定的上下文安装检查器或报告。 uninstall : 根据设定的上下文卸载检查器或报告。 run : 运行扫描。 show : 根据设定的上下文显示检查器列表或报告列表。 help :...

burpcommander

burpcommander Ruby command-line interface to Burp Suite's REST API Usage root@kitploit: burpcommander VERSION: 1.0.1 - UPDATED: 08/29/2018 -t, --target IP Address Defaults to 127.0.0.1 -p, --port Port Number Defaults to 1337 -k, --key API Key If you require an API key specify it here -i,...

CVE-2023-26256

CVE-2023-26256 -h get help -u run a single URL -f batch run...

CVE-2026-73782 Unauthenticated Format String Vulnerability leads to Remote Code Execution in AOS-CX

A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system...