OffensiveNotion

OffensiveNotion Notion yes, the notetaking app as a C2. A collaboration by: Documentation | Pull Requests | Issues !Pull...

atomic-operator

license atomic-operator This python package is used to execute Atomic Red Team tests Atomics across multiple operating system environments. What's new? Why? atomic-operator enables security professionals to test their detection and defensive capabilities against prescribed techniques defined with...

ScareCrow

THIS REPOSITORY HAS BEEN ARCHIVED To view the latest version of ScareCrow or to submit an issue, reference https://github.com/Tylous/ScareCrow. ScareCrow More Information If you want to learn more about the techniques utilized in this framework please take a look at Part 1 and Part 2 Description...

MSF_PassSpray_Wordlist_Generator

Password Spray Wordlist Generator A handy tool that helps you to create your own wordlist for Metasploit framework, in order to carry out a password spray attack against various network protocols in your victims' domain, such as SMB : Description Metasploit has multiple modules that can be utiliz...

makes

⚠️ Deprecation notice ⚠️ After a thorough review of Makes and other build system alternatives, Fluid Attacks has decided to transition fully to Nix Flakes for all our builds. This decision brings significant benefits, including the opportunity to rely on and contribute to the incredible Nix...

Havoc

Havoc Havoc is a modern and malleable post-exploitation command and control framework, created by@C5pider. Quick Start Please see the Wiki for complete documentation. Havoc works well on Debian 10/11, Ubuntu 20.04/22.04 and Kali Linux. It's recommended to use the latest versions possible to avoid...

Ivy

THIS REPOSITORY HAS BEEN ARCHIVED To view the latest version of Ivy or to submit an issue, reference https://github.com/Tylous/Ivy. More Information If you want to learn more about the techniques utilized in this framework as well as the defensive measure to help defend against it, please take a...

PhoenixC2

PhoenixC2 An Open-Source C2-Framework written in pure Python3. Disclaimer This project is still in development and not ready for professional use. The author and its affiliates do not endorse or condone any illegal or malicious activity conducted with this framework. Users of this framework are...

appmon

Welcome to AppMon! As seen at US & EU AppMon is an automated framework for monitoring and tampering system API calls of native macOS, iOS and android apps. It is based on Frida. This project was only possible because of Ole André Vadla Ravnås and I dedicate it to him. Follow him on GitHub, Twitte...

AndroBugs_Framework

AndroBugs Framework AndroBugs Framework is an Android vulnerability analysis system that helps developers or hackers find potential security vulnerabilities in Android applications. No splendid GUI interface, but the most efficient less than 2 minutes per scan in average and more accurate. Versio...

PANIX

PANIX - Persistance contre NIX PANIX est un framework de persistance Linux puissant, modulaire et hautement personnalisable, conçu pour les chercheurs en sécurité, les ingénieurs en détection, les testeurs d'intrusion, les amateurs de CTF, et plus encore. Pensé pour la polyvalence, PANIX met...

CVE-2022-22965

CVE-2022-22965 المعروف أيضًا باسم "Spring4Shell" ثغرة RCE في Spring Framework عبر Data Binding على JDK 9+ الهدف هو تجميع أكبر قدر ممكن من المعلومات المتاحة للعموم حول الثغرة حتى الآن، ومعرفة الإجراءات التي يجب اتخاذها في هذه الحالة. هل تطبيقي عرضة للخطر؟ الشروط AND التي يجب توفرها هي: JDK 9 +...

Yii2 PHP Framework < 2.0.52 - Remote Code Execution

Yii2 PHP Framework before 2.0.52 is vulnerable to remote code execution via improper validation of the class key in JSON behaviors. An attacker can instantiate arbitrary PHP classes and achieve RCE. id: CVE-2024-58136 info: name: Yii2 PHP Framework 2.0.52 - Remote Code Execution author:...

VMware Workspace ONE Access - Authentication Bypass

VMware Workspace ONE Access has two authentication bypass vulnerabilities CVE-2022-22955 & CVE-2022-22956 in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authentication framework. id: CVE-2022-22956...

web2py-e94946d-CVE-2016-3957

اقرأني web2py هو إطار عمل مجاني ومفتوح المصدر متكامل full-stack للتطوير السريع لتطبيقات ويب سريعة وقابلة للتطوير وآمنة وقابلة للنقل ومعتمدة على قواعد البيانات. مكتوب وقابل للبرمجة بلغة Python. رخصة LGPLv3 اعرف المزيد على http://web2py.com النشر على Google App Engine cp examples/app.yaml ./ cp...

recon

The project has moved to monorepo. See https://github.com/pownjs/pown for more information. Recon Recon is a target reconnaissance framework powered by knowledge graphs. Using knowledge graphs instead of flat table representation is easier to find the relationships between different types of...

flashmingo

FLASHMINGO تثبيت ملاحظة: التعليمات التالية خاصة بـ Python3. إذا كنت بحاجة إلى تثبيت FLASHMINGO على Python2.7، يمكنك مراجعة الإصدار 1.0 تحت علامة التبويب releases. خطوات التثبيت هي نفسها بشكل أساسي. قم بتثبيت حزم Python3 المدرجة في requirements.txt. يمكنك استخدام الأمر التالي: pip3 install -r...

Alfred

WIP - Revamped Alfred 2.0 Alfred - A Modular Recon and Exploitation Framework EXPIREMTNAL PHASE Alfred is a Python-based framework designed to assist in various reconnaissance, exploitation, and post-exploitation tasks. It is highly modular, allowing users to easily add plugins to extend...

PyRIT

Python Risk Identification Tool for generative AI PyRIT The Python Risk Identification Tool for generative AI PyRIT is an open source framework built to empower security professionals and engineers to proactively identify risks in generative AI systems. !WARNING PyRIT has moved! Please see...

CVE-2018-1270

CVE-2018-1270 - ثغرة تنفيذ تعليمات Spel في Spring messaging أمس نشرت Spring ثغرة RCE واحدة، تعرف عليها: CVE-2018-1270: تنفيذ الأوامر عن بُعد باستخدام spring-messaging الإصدارات المتأثرة Spring Framework من 5.0 إلى 5.0.4 Spring Framework من 4.3 إلى 4.3.14 لا تتطلب هذه الثغرة بيئة محددة، إذا كنت...