get_Team_Pass

getTeamPass Obtén el ID y contraseña de TeamViewer desde un ordenador remoto en la LAN Este programa obtiene el ID y la contraseña de TeamViewer desde un ordenador remoto en la LAN. Muy útil para post-explotación o administradores de sistemas Probado en Windows 7 y Windows 10 x86 y x64 Descarga l...

Auto-PostXploit

Auto-PostXploit Auto Post-Explotación de Windows - Para ReD Team https://github.com/emilyanncr/Windows-Post-Exploitation/ Descarga : wget https://raw.githubusercontent.com/BehzaDMagzer/Auto-PostXploit/master/Auto-PostXploit.exe Uso : meterpreter upload %path%/Auto-PostXploit.exe...

CVE-2021-4773

CVE-2021-4773 this is a practice example of how exploit vulnerability CVE-2021-4773 with a virtual machine for this tutorial you need the next virtual machine as kali linux virtual machine as ubuntu server install apache version 2.4.49 so lets started when you have 2 virtual machines running you...

WEF

Marco de Explotación WiFi Codificado con 💙 por D3Ext Introducción • Ataques • Características • Instalación • Uso README en español Introducción Esta herramienta está diseñada para investigadores de seguridad y probadores de penetración para analizar y explotar vulnerabilidades en redes Wi-Fi...

PowerUpSQL

PowerUpSQL includes functions that support SQL Server discovery, weak configuration auditing, privilege escalation on scale, and post exploitation actions such as OS command execution. It is intended to be used during internal penetration tests and red team engagements. However, PowerUpSQL also...

vulmap

🌟 Vulmap - Web vulnerability scanning and verification tools Cliquez ici pour la version anglaise Vulmap est un outil de scan et de vérification des vulnérabilités web, capable d'analyser les applications web et de les exploiter. Les applications web actuellement prises en charge incluent activem...

how2heap

Обучение эксплуатации кучи Этот репозиторий предназначен для изучения различных техник эксплуатации кучи. Мы используем релизы Libc от Ubuntu как эталон. Каждая техника проверена на соответствующих релизах Ubuntu. Вы можете выполнить apt source libc6, чтобы загрузить исходный код используемой вам...

DBC2

DBC2 ÚLTIMA/VERSIÓN ACTUAL: 0.2.6 Autor: Arno0x0x - @Arno0x0x DBC2 DropboxC2 es una herramienta modular de post-explotación, compuesta por un agente que se ejecuta en la máquina de la víctima, un controlador que se ejecuta en cualquier máquina, módulos de PowerShell y servidores de Dropbox como...

CVE-2018-15877-RCE

CVE-2018-15877-RCE RCE via the Planview Activity Monitor plugin for wordpress. Requirements: Python3 Selenium Usage: ./exploit.py...

CVE-2019-10149

CVE-2019-10149 - Exim 4.87 Local/Makefile cp eximmonitor/EDITME Local/eximon.conf Create exim user and group sudo groupadd -g 31 exim sudo useradd -d /dev/null -c "Exim Daemon" -g exim -s /bin/false -u 31 exim Install dependencies sudo apt-get update sudo apt-get install -y make build-essential...

ppmap

ppmap A simple scanner/exploitation tool written in GO which automatically exploits known and existing gadgets checks for specific variables in the global context to perform XSS via Prototype Pollution. NOTE: The program only exploits known gadgets, but does not cover code analysis or any advance...

ppmap

ppmap Una herramienta sencilla de escaneo/explotación escrita en GO que explota automáticamente gadgets conocidos y existentes busca variables específicas en el contexto global para realizar XSS mediante Prototype Pollution. NOTA: El programa solo explota gadgets conocidos, pero no cubre análisis...

swap_digger

swapdigger swapdigger is a bash script used to automate Linux swap analysis for post-exploitation or forensics purpose. It automates swap extraction and searches for Linux user credentials, Web form credentials, Web form emails, HTTP basic authentication, WiFi SSID and keys, etc. Download and run...

swap_digger

swapdigger swapdigger es un script de bash utilizado para automatizar el análisis de swap de Linux con fines de post-explotación o forenses. Automatiza la extracción de swap y busca credenciales de usuario de Linux, credenciales de formularios web, correos electrónicos de formularios web,...

nodexp

NodeXP - Outil de détection et d'exploitation pour les services Node.js ! NodeXP est un outil intégré, écrit en Python 2.7, capable de détecter les vulnérabilités possibles sur les services Node.js et de les exploiter de manière automatisée, basé sur l'attaque ServeurSideJavaScriptInjection ! Pou...

Zimbra

Active Exploitation of Zimbra CVE-2022-37042 RCE Unauthenticated The following research began by trying to understand the POCs from several GitHub repositories shared by many researchers and ended in an interesting surprise, which I will share in the following paragraphs. On August 10 of this yea...

CVE-2020-0688-GUI

一、Project Purpose and Reference The purpose is simple: I'm planning to write a C2 in C again recently, so let's first write some small tools to practice and increase interest. So I thought of turning zcgonvh's tool into a GUI. The source tool link is as follows:...

log4j-vulnerability

LOG4J Vulnerability A Java-based project presenting how to exploit CVE-2021-44228 vulnerability. https://user-images.githubusercontent.com/13152452/147803050-458593e9-4b54-4e1f-ba07-802866b9b43e.mp4 Requirements A Linux-based operating system: I used Ubuntu Desktop 20.10 64 bits OpenJDK 17.0.1: T...

spring4shell-scan

spring4shell-scan A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities Features Support for lists of URLs. Fuzzing for more than 10 new Spring4Shell payloads previously seen tools uses only 1-2 variants. Fuzzing for HTTP GET and POST...

CVE-2021-41773

ApacheRCE ApacheRCE is a small little python script that will allow you to input the apache version 2.4.49-2.4.50 and then input a list of ip addresses from a text file and mass run the exploit on them, this can be useful if you are running mutiple websites and you want to see if they can all be...