mimikatz-detector-condrv

Mimikatz Detector - ConDrv + ConsoleMonitor Questo progetto si basa sulla ricerca effettuata per la tecnica di rilevamento di mimikatz fase 2. La soluzione contiene più progetti: ConsoleMonitor - Un'applicazione GUI in C per intercettare il traffico relativo alla console input output tramite ConD...

fast-security-scanners

Scanner/controlli di sicurezza veloci Un piccolo contributo alla community : Usiamo tutti questi strumenti nelle valutazioni di sicurezza e nel nostro servizio di monitoraggio delle vulnerabilità Controlla il tuo dominio per DNS NS takeover Repo docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e...

BLUE-SPY

BLUE-SPY - फास्ट पेयर भेद्यता अनुसंधान उपकरण सुरक्षा अस्वीकरण और कानूनी चेतावनी ⚠️ यह सॉफ़्टवेयर केवल अधिकृत सुरक्षा अनुसंधान और नैतिक परीक्षण के लिए है ⚠️ इस उपकरण का अनधिकृत उपयोग उन उपकरणों के खिलाफ जिनके आप मालिक नहीं हैं या जिनके लिए आपके पास स्पष्ट लिखित अनुमति नहीं है, अवैध है और इसके...

CVE-2023-48223

CVE-2023-48223 PoC Confusione algoritmo fast-jwt Questo repository dimostra la confusione degli algoritmi JWT in fast-jwt quando la verifica del token non blocca gli algoritmi consentiti. Configurazione dell'ambiente Requisiti Node.js 18 o superiore npm OpenSSL deve essere disponibile nel PATH de...

CVE-2025-30144

सारांश fast-jwt लाइब्रेरी RFC https://datatracker.ietf.org/doc/html/rfc7519page-9 के अनुसार iss क्लेम को सही ढंग से मान्य नहीं करती है। विवरण fast-jwt लाइब्रेरी में iss जारीकर्ता क्लेम सत्यापन स्ट्रिंग्स की एक सरणी को एक वैध iss मान के रूप में अनुमति देता है। यह डिज़ाइन दोष एक संभावित हमले को सक्...

NtHiM

NtHiM - Rilevamento di Sub-domain Takeover Super Veloce...

hashcobra

hashcobra hashcobra Hash Cracking tool. Description This tool uses a new method to crack hashes. With the help of rainbow tables concept this tool generates rainbow tables from wordlists to heavily optimize the cracking process. Usage root@kitploit: $ ./hashcobra -H --== hashcobra by sepehrdad ==...

waldo

Waldo is a lightweight and multithreaded directory and subdomain bruteforcer implemented in Python. It can be used to locate hidden web resources and undiscovered subdomains of the specified target. Key Features Quickly and easily generate a list of all subdomains of target domain Discover hidden...

vulnx

VulnX Vulnx 🕷️ is An Intelligent Bot Auto Shell Injector that detects vulnerabilities in multiple types of Cms...

lama

lama Lama, the application that does not mince words. Description Lama is a GNU Linux tool to generate a word list. The goal is to obtain a custom password dictionary to a particular target, whether physical or moral. It is therefore important that words in this list correspond to the target. Kee...

ros2_CVE-2024-28231

Questo repository include un'immagine Docker vulnerabile di ROS2 Iron basata su Ubuntu 22 e un exploit corrispondente. Sfruttiamo la vulnerabilità in Fast-RTPS versione 2.10.3, che consente il denial of service di un subscriber remoto tramite heap buffer overflow. Immagine base vulnerabile Fast...

CVE-2023-50257

ROS2 CVE-2023-50257 Reproduktion 🔍 Übersicht Dieses Repository basiert auf einem PoC für CVE-2023-50257 und automatisiert die Erfassung von RTPS-Paketen, analysiert GUID-Werte und sendet ein erfolgreiches DoS-Paket. CVE-2023-50257 ist eine bekannte Sicherheitslücke in ROS2 Robot Operating System ...

webshell

webshell 简体中文 This is a webshell collection project Give someone a rose, there is a fragrance in your hand if you download this project, please also submit a shell This project covers various common scripts Such as: asp, aspx, php, jsp, pl, py If you submit a webshell, please do not change the na...

fastfluxanalysis

DNS-Analyse-Skripte Eine Sammlung von Skripten zur Erkennung von Fast-Flux-Domains und DGA-Domains. Basierend auf Forschung für MSc-Arbeit, verwandte Forschungspapiere sind an folgenden Orten verfügbar: ISSA 2011 ISSA 2012 Botconf 2013 Grundlegende Verwendung Zur Analyse einer einzelnen Domain:...

power_analysis

Angriff durch Leistungsanalyse auf RSA Index Einleitung Angriffe durch Leistungsanalyse RSA: Eine kurze Einführung RSA-Beispiel Ausrüstung Leistungsmessung: Eine kurze Einführung Ohmsches Gesetz Kirchhoffs Spannungsgesetz KVL Spannungsteiler Shunt-Widerstand Beispiel einer Leistungsmessung Schnel...

domhttpx

domhttpx is a google search engine dorker with HTTP toolkit built with python, can make it easier for you to find many URLs/IPs at once with fast time. List Install Usage Flags Basic Usage One Keyword Multiple Keyword Extract Title Page Extract Title Page from Real Path Extract Status Code Extrac...

columbus-server

Columbus server This repository is deprecated! ‼️ The server component is moved to https://github.com/elmasy-com/columbus. Columbus Project is an API first subdomain discovery service, blazingly fast subdomain enumeration service with advanced features. Columbus returned 638 subdomains of tesla.co...

truehunter

Truehunter The goal of Truehunter is to detect encrypted containers using a fast and memory efficient approach without any external dependencies for ease of portability. It was designed to detect Truecrypt and Veracrypt containers, however it may detect any encrypted file with a 'header' not...

kiterunner

Kiterunner Introduction For the longest of times, content discovery has been focused on finding files and folders. While this approach is effective for legacy web servers that host static files or respond with 3xx’s upon a partial path, it is no longer effective for modern web applications,...

netmap.js

netmap.js Fast browser-based network discovery module This project is no longer maintained. Description netmap.js provides browser-based host discovery and port scanning capabilities to allow you to map website visitors' networks. It's quite fast, making use of es6-promise-pool to efficiently run...