poro

poro Description Scan for publicly accessible assets on your AWS environment Services covered by this tool: AWS ELB API Gateway S3 Buckets RDS Databases EC2 instances Redshift Databases Poro also check if a tag you specify is applied to identified public resources using --tag-key and --tag-value...

heappy

🙂 Heappy: a happy heap editor Heappy is an editor based on gdb/gef that helps you to handle the heap during your exploitation development. The project should be considered a didactic tool useful to understand the evolution of the heap during the process life cycle. It has been created to simplify...

gitbleed_tools

GitBleed Tools - for extracting data from mirrorred git repositories About This repo contains shell scripts that can be used to download and analyze differences between cloned and mirror Git repositories. For more information about the underlying quirk in Git behavior, please visit read our blog...

js-driveby-download-CVE-2006-4777

js-driveby-download-CVE-2006-4777 利用互联网浏览器6.0 SP1在Windows XP SP2上的漏洞的客户端恶意软件。 不需要用户同意，也不下载任何文件。 在Windows XP上通过IE的JavaScript在RAM中注入Shell代码。 无文件、驱动下载、客户端恶意软件。...

operative-framework

operative framework is a digital investigation framework, you can interact with multiple targets, execute multiple modules, create links with target, export rapport to PDF file, add note to target or results, interact with RESTFul API, write your own modules. important The project has undergone a...

awesome-pentest

Awesome Penetration Testing A collection of awesome penetration testing and offensive cybersecurity resources. Penetration testing is the practice of launching authorized, simulated attacks against computer systems and their physical infrastructure to expose potential security weaknesses and...

mimicry

Mimicry Mimicry Mimicry is a security tool developed by Chaitin Technology for active deception in exploitation and post-exploitation. Active deception can live migrate the attacker to the honeypot without awareness. We can achieve a higher security level at a lower cost with Active deception...

c-jwt-cracker

JWT cracker A multi-threaded JWT brute-force cracker written in C. If you are very lucky or have a huge computing power, this program should find the secret key of a JWT token, allowing you to forge valid tokens. This is for testing purposes only, do not put yourself in trouble : I used the Apple...

AllHackingTools

• 许可证 • 问题 • 项目 • 维基百科 • AllHackingTools：是一个旨在自动化下载和安装各种渗透测试工具的系统。 嗨，如果你想快速配置 Termux，那么这里为你准备！更多黑客工具，一应俱全！ 我不对你的行为负责。下载本仓库的软件，即表示你同意许可证。 支持的系统 安装需要 5-20 分钟 以下系统上 AllHackingTools 可以正常工作 工具测试于： 如果你有不懂的地方，可以查看翻译。 新功能： 1 新工具和功能 新增渗透测试工具。以及许多新的可能性。 2 自定义与设计 现在新增了终端自定义功能，并添加了新的设计。 3 新设计与功能...

whatsfoto

WhatsFoto 简单工具，用于从WhatsApp下载多个个人资料图片。它是一个Chrome扩展程序。 安装 下载zip或文件夹，然后拖入你的扩展程序页面。 确保你已启用开发者模式。或者使用zip文件。 使用方法 登录 web.whatsapp.com 点击图标，以csv格式输入电话号码，例如： 31600000000, 06-12345678 以06开头的号码会被替换为316。 所有图片都会存储在一个zip文件中。 待办事项 待办事项 😤 🔴 测试 🔵 按换行符分隔号码 🔵 获取反馈 错误 🔵 请使用最新的Chrome版本。 请提交问题。 尝试打开控制台并查看错误信息。 许可证 Mi...

zmap

ZMap: The Internet Scanner ZMap is a fast stateless single packet network scanner designed for Internet-wide network surveys. On a typical desktop computer with a gigabit Ethernet connection, ZMap is capable of scanning the entire public IPv4 address space on a single port in under 45 minutes. Fo...

lazybee

ABOUT TOOL : Lazybee tool is a python based script from which you can generate random wordlist for brutefocre attacks. This tool has a unique features like wordlist generating time calculation and direct .txt saving in current directory. This tool works on both rooted Android device and Non-roote...

barf-project

BARF : Binary Analysis and Reverse engineering Framework The analysis of binary code is a crucial activity in many areas of the computer sciences and software engineering disciplines ranging from software security and program analysis to reverse engineering. Manual binary analysis is a difficult...

pwndoc

PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...

Kali-Linux

Trucos y configuración de Kali-Linux versión actual Imágenes semanales de Kali: href Descargar un solo inode apt install subversion -y svn checkout https://github.com/nu11secur1ty/Kali-Linux/trunk/$inode Introducción: ¿Es Kali Linux adecuado para ti? Como desarrolladores de la distribución, podrí...

yara

!IMPORTANT This project is in maintenance mode. More info: https://virustotal.github.io/yara-x/blog/yara-x-is-stable/ YARA in a nutshell YARA is a tool aimed at but not limited to helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malwar...

CVE-2021-39433

CVE-2021-39433 存在一个本地文件包含（LFI）漏洞，影响版本 BIQS IT Biqs-drive v1.83 及更早版本。当向 download/index.php 的 file 参数发送特定 payload 时，攻击者能够以配置的 Web 用户权限读取服务器上的任意文件。 curl https://TARGET/download/index.php?file=../../../../../../../../../etc/passwd...

lmg

Linux Memory Grabber A script for dumping Linux memory and creating VolatilityTM profiles. Hal Pomeranz [email protected], 2020-02-01 THANKS! "If I have seen further it is by standing on the shoulders of giants." Issac Newton There are a lot of people who deserve thanks for making this simpl...

struts-pwn

struts-pwn An exploit for Apache Struts CVE-2017-5638 Usage Testing a single URL. python struts-pwn.py --url 'http://example.com/struts2-showcase/index.action' -c 'id' Testing a list of URLs. python struts-pwn.py --list 'urls.txt' -c 'id' Checking if the vulnerability exists against a single URL...

jshole

jshole A simple JavaScript components vulnrability scanner, based on RetireJS. Why use JShole instead of RetireJS? By default, RetireJS only searches one page, but JShole tries to crawl all pages. Get Started Requirements requests Install git clone https://github.com/callforpapers-source/jshole.g...