trackerjacker

trackerjacker Como nmap para mapear redes wifi a las que no estás conectado. Mapea y rastrea redes wifi y dispositivos mediante monitorización raw 802.11. Página PyPI: https://pypi.python.org/pypi/trackerjacker Instalar pip3 install trackerjacker Plataformas compatibles : Linux probado en Ubuntu,...

ghostscript-CVE-2023-43115

ghostscript-CVE-2023-43115 A small write-up with examples to help understand CVE-2023-43115. !WARNING I wrote this mainly for myself to understand the problem and to learn about cybersecurity. So there may be errors. The Problem To utilize the IJS device Improved Inkjet Printing, Ghostscript is...

The vulnerability of the Aquarius L311 device driver for the Autora operating system, related to access control errors, allows a perpetrator to gain access to protected information and affect the system.

The vulnerability of the Aquarius L311 device’s driver for the Avora operating system is related to access control errors. Exploiting this vulnerability can allow attackers to gain access to protected information and affect the system...

UltimateWDACBypassList

Ultimate WDAC Bypass List A centralized resource for previously documented WDAC/Device Guard/UMCI bypass techniques as well for building/managing/testing WDAC policies Note: WDAC Windows Defender Application Control has been rebranded by Microsoft as "Application Control" or "Application Control...

initroot

initroot: Motorola Bootloader Kernel Cmdline Injection Secure Boot & Device Locking Bypass CVE-2016-10277 By Roee Hay / Aleph Research, HCL Technologies First stage exploit: Tethered jailbreak This exploit gains an ephemeral unrestricted root access on the device. For example, on cedric some...

BlueSpy

BlueSpy - PoC to record audio from a Bluetooth device This repository contains the implementation of a proof of concept to record and replay audio from a bluetooth device without the legitimate user's awareness. The PoC was demonstrated during the talk BSAM: Seguridad en Bluetooth at RootedCON 20...

adaudit

adaudit This PowerShell script is designed to conduct a comprehensive audit of Microsoft Active Directory, focusing on identifying common security vulnerabilities and weaknesses. Its execution facilitates the pinpointing of critical areas that require reinforcement, thereby fortifying your...

androidReverse

Android Reverse A reverse engineering suite that runs entirely on Android. No PC, no ADB, no desktop tools — everything from APK extraction to native binary analysis, editing, and rebuilding happens on-device. MCP Server androidReverse includes a built-in Model Context Protocol server, allowing...

scrcpy

!WARNING Este repositorio de GitHub https://github.com/Genymobile/scrcpy es la única fuente oficial del proyecto. No descargues las versiones desde sitios web aleatorios, incluso si su nombre contiene scrcpy. scrcpy v5.0 se pronuncia "scr een c opy " Esta aplicación refleja dispositivos Android...

Project-Pwnag0dchi

Proyecto Pwnag0dchi Creé esto porque mucha gente preguntaba sobre los plugins personalizados y configuraciones que uso. Siguiendo esta guía, tu Pwnagotchi se verá exactamente como se ve en mis redes sociales y videos de YouTube en 5 minutos como máximo. También encontrarás una guía completa de...

btlejack

BtleJack: una navaja suiza de Bluetooth Low Energy Btlejack proporciona todo lo que necesitas para esnifar, interferir y secuestrar dispositivos Bluetooth Low Energy. Se basa en uno o más dispositivos BBC Micro:Bit que ejecutan un firmware dedicado. También es posible que quieras usar un sniffer...

ssl-kill-switch2

SSL Kill Switch 2 Blackbox tool to disable SSL/TLS certificate validation - including certificate pinning - within iOS and macOS applications. Second iteration of https://github.com/iSECPartners/ios-ssl-kill-switch . Description Once loaded into an iOS or macOS application, SSL Kill Switch 2 will...

rinhit

RinHit RinHit - macOS ecosystem reconnaissance framework. Collects artifacts from the Apple ecosystem to build timelines of network activity, cross-device identity, and physical location correlation. This is the open-source reconnaissance module. The closed-source Swift payload rinhit-agent is...

Microsoft365_devicePhish

Microsoft365devicePhish Abusando del flujo de autorización OAuth de Microsoft 365 para ataques de phishing Este es un script simple de prueba de concepto que permite a un atacante realizar un ataque de phishing contra el flujo de autorización OAuth de Microsoft 365. Usando esto, uno puede...

DIY_WhisperPair

DIY-WhisperPair CVE-2025-36911 Reference Implementation & Vulnerability Verification Toolkit OFFICIAL IMPLEMENTATION NOW LIVE , thanks to the team at KU Leuven Thanks for the shoutout LEGAL NOTICE : This is a security research tool. ReadLEGAL.md before use. Unauthorized access to computer systems...

NetAlertX

NetAlertX - Marco de Visibilidad de Red e Inteligencia de Activos !mainmain 📷 Haz clic para ver más capturas de pantalla !Main screenmain| !devicedetails 1devicedetails| !Screen networknetwork ---|---|--- !presencepresence| !maintenancemaintenance| !settingssettings !synchubsynchub|...

PhoneSploit-Pro

PhoneSploit Pro The Swiss Army knife for Android. An all-in-one hacking tool written in Python to remotely take over Android devices using ADB, scrcpy, Nmap, and Metasploit-Framework. Table of contents Overview Screenshots Features Requirements Installing dependencies Getting started Device setup...

cve-2022-31705

CVE-2022-31705 Intro https://www.vmware.com/content/vmware/vmware-published-sites/us/security/advisories/VMSA-2022-0033.html.html Test on windows vmware workstation 16.2.0, with guest os ubuntu server 22 At leat one usb device is be attached to guest machine change the 'qh-field4' in the ehci.c...

pybatfish

Got questions, feedback, or feature requests? Join our community onSlack! Pybatfish Pybatfish is a Python client for Batfish. What is Batfish? Batfish is a network validation tool that provides correctness guarantees for security, reliability, and compliance by analyzing the configuration of...

cve-2023-20198

cve-2023-20198 Descripción. Prueba de concepto de 1vere$k sobre CVE-2023-20198 basada en el Blog. También incluye una verificación de respuesta hexadecimal según el artículo original de Cisco. El script funciona en dos modos: Modo check: solo realiza una conexión a la URL específica y verifica el...