BootHole

BootHole Informations générales Ce dépôt a été créé pour contenir des scripts utiles et tout outil ou information supplémentaire qui peut aider d'autres personnes à gérer leurs plans d'atténuation de la vulnérabilité BootHole. Plateformes Windows Nous avons créé un script Powershell qui vérifiera...

aDLL

aDLL - مغامرة مكتبة الارتباط الديناميكي Adventure of Dynamic Link Library aDLL هي أداة تحليل ثنائي تركز على الاكتشاف التلقائي لثغرات اختطاف DLL. تقوم الأداة بتحليل صورة الملف القابل للتنفيذ المحملة في الذاكرة للبحث عن ملفات DLL المحملة وقت التحميل، وتستخدم مكتبة Microsoft Detours لاعتراض...

MSF-screenrecord-on-MacOS

MSF-screenrecord-on-MacOS !!! 이 취약점은 Primefort Private Limited의 Sudhakar Muthumani, Khiem Tran에 의해 동시에 발견되거나 차용되었으며 CVE-2022-22600으로 등록되었습니다. 이는 제가 2021년에 이미 Apple에 이메일을 보냈음에도 불구하고 발생한 일입니다. 영향을 받는 버전 학생으로서 저는 이 취약점을 테스트할 수 있는 기기에 제한적으로 접근할 수 있습니다. 지금까지 테스트한 버전은 MacOS 12.1, MacOS 12.0, MacOS...

vulnerability-url

vulnerability-url 警告！テストと教育のみを対象としています！ root@kitploit: https://github.com/nu11secur1ty/vulnerability-url/raw/main/Calculator512.exe...

qs_old

QuickSand.io للإصدار QuickSand 2 المكتوب بلغة Python مع دعم تحليل PDF، راجع quicksand.io. لم يعد الإصدار QuickSand 1 Lite قيد التطوير النشط. QuickSand هو إطار عمل مدمج بلغة C لتحليل مستندات البرامج الضارة المشتبه بها من أجل: 1 تحديد نقاط الضعف في تدفقات الترميزات المختلفة، 2 تحديد موقع واستخراج...

metasm

Metasm، مجموعة أدوات معالجة لغة التجميع Ruby نماذج سكربتات في samples/ -- اقرأ التعليقات في بداية الملفات جميع الملفات مرخّصة بموجب شروط LGPL المؤلف: Yoann Guillot نظرة عامة أساسية: تتيح لك Metasm التعامل مع تنسيقات الملفات التنفيذية ExeFormat: PE وELF وMach-O وShellcode وغيرها. هناك ثلاث طرق...

ExtensionSpoofer

ExtensionSpoofer ExtensionSpoofer è un'app desktop Visual Basic .NET che dimostra come nomi di file e icone possano essere manipolati visivamente su Windows mentre il tipo di file eseguibile sottostante rimane invariato. Utilizza il carattere Unicode Right-to-Left Override U+202E per invertire i...

CVE-2021-1732_exp

CVE-2021-1732-Exploit CVE-2021-1732 Exploit "Não use para atividades ilegais, caso contrário, a responsabilidade é sua!" Uso do EXP CVE-2021-1732exploit.exe whoami Recurso: https://bbs.pediy.com/thread-266362.htm...

PortEx

PortEx Benvenuti in PortEx PortEx è una libreria Java per l'analisi statica del malware di file eseguibili portatili. Il suo focus è sulla robustezza contro malformazioni PE e sul rilevamento di anomalie. PortEx è scritto in Java e Scala ed è destinato ad applicazioni Java. Funzionalità Lettura...

CVE-2025-24071-POC

sudo apt update sudo apt install wine wine CVE-2025-24071-POC.exe -i 10.10.14.8 -n try ZIP créé : try.zip impacket-smbserver: smbserver.py try /root/smbshare -smb2support -ip 10.10.14.8 -debug Impacket Exegol fork v0.13.0.dev0+20250723.125503.b5db2dd7 - Copyright Fortra, LLC and its affiliated...

enumy

Enumy Enumy è un eseguibile portatile ultra veloce che si inserisce nella macchina Linux di destinazione durante un pentest o CTF nella fase di post-exploitation. Eseguire enumy enumererà la macchina per vulnerabilità di sicurezza comuni. Installazione Puoi scaricare il binario finale dalla sched...

Exe2Image

Exe2Image Ein einfaches Dienstprogramm zum Konvertieren von EXE-Dateien in PNG-Bilder und umgekehrt. Herunterladen: https://github.com/OsandaMalith/Exe2Image/releases Screenshots Putty.exe in ein Bild konvertiert...

peframe

======= peframe peframe is a open source tool to perform static analysis on Portable Executable malware and generic suspicious file. It can help malware researchers to detect packer, xor, digital signature, mutex, anti debug, anti virtual machine, suspicious sections and functions, macro and much...

FUSE

FUSE FUSE è un sistema di penetration testing progettato per identificare vulnerabilità di caricamento di file eseguibili non limitati UEFU. I dettagli della strategia di test sono descritti nel nostro articolo, "FUSE: Finding File Upload Bugs via Penetration Testing", presentato a NDSS 2020. Per...

InfectPE

Usando questo strumento puoi iniettare x-code/shellcode in un file PE. InjectPE funziona solo con file eseguibili a 32 bit. Perché hai bisogno di InjectPE? Puoi testare i tuoi prodotti di sicurezza. Usalo in una campagna di phishing. Impara come funziona l'iniezione PE. ...e così via. Nel progett...

rp

rp++: a fast ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries Overview rp++ or rp is a C++ ROP gadget finder for PE/ELF/Mach-O executables and x86/x64/ARM/ARM64 architectures. Finding ROP gadgets To find ROP gadget you need to specify a file with the --file / -f option and use the...

gdb-frontend

GDBFrontend is an easy, flexible and extensionable gui debugger. Installing Requirements GDB = 8.2 with python3 python3 = 3.6 tmux PIP Package Python Wheel Recommended You can install GDBFrontend with pip. root@kitploit: sudo python3 -m pip install gdbfrontend if it is already installed and you a...

pe_to_shellcode

petoshellcode Converts PE so that it can be then injected just like a normal shellcode. At the same time, the output file remains to be a valid PE. Supports both 32 and 64 bit PEs Authors:@hasherezade & @hh86 Objective The goal of this project is to provide a possibility to generate PE files that...

pbtk

pbtk - Reverse engineering Protobuf apps Protobuf is a serialization format developed by Google and used in an increasing number of Android, web, desktop and more applications. It consists of a language for declaring data structures , which is then compiled to code or another kind of structure...

PS2EXE

Repository senza IA - l'intelligenza artificiale sta uccidendo la creatività e la nostra natura! PS2EXE Rielaborazione del grande script di Ingo Karstein con supporto GUI. L'output e l'input GUI sono attivati con un solo interruttore, vengono generati eseguibili Windows reali. Compila solo script...