PasswordsSniffer

PasswordsSniffer Description This module sniff username and password of unprotected protocols. Requirements This package require: python3 python3 Standard Library Scapy Installation pip install PasswordsSniffer Usages Command line PasswordsSniffer python3 -m PasswordsSniffer python3...

ksentinel

ksentinel - Kernel Syscalls Integrity Monitor Overview ksentinel monitors critical kernel functions and the syscall table for unauthorized modifications. It detects common syscalls that are targeted by most rootkits including ftrace hooks, kprobes, and syscall table hijacking. Features Function...

process_overwriting

Process Overwriting Process Overwriting is a PE injection technique, closely related to Process Hollowing and Module Overloading. With its help, you can replace the main executable not a DLL of the target process. It works only for a newly created process - injection to existing processes is not...

All-CEHv13-Module-wise-PDF-Reports

CEHv13 Modules Banner 📁 CEHv13 Modules - PDF Report Collection 📁 Repository Structure CEHv13-Modules/ ├── Module-01-Introduction/ │ └── Module-01-Introduction.pdf ├── Module-02-Footprinting/ │ └── Module-02-Footprinting.pdf ├── Module-03-Scanning/ │ └── Module-03-Scanning.pdf ├──...

HoneypotBuster

Microsoft PowerShell module designed for red teams that can be used to find honeypots and honeytokens in the network or at the host. CodeExecution Execute code on a target machine using Import-Module. Invoke-HoneypotBuster HoneypotBuster is a tool designed to spot Honey Tokens, Honey Bread Crumbs...

wolfGuard

WolfGuard VPN with FIPS 140-3 cryptography WolfGuard is the wolfSSL FIPS-compliant refactor of Linux kernel-based WireGuard, originally designed and authored by Jason Donenfeld. Usage is essentially identical. There are two principal components to WolfGuard, the wolfguard.ko kernel module and the...

PowerShellArsenal

PowerShellArsenal is a PowerShell module used to aid a reverse engineer. The module can be used to disassemble managed and unmanaged code, perform .NET malware analysis, analyze/scrape memory, parse file formats and memory structures, obtain internal system information, etc. PowerShellArsenal is...

frieren

Frieren: The micro-framework for security gadgets Description Frieren is a framework for running security tools on OpenWrt routers and Single Board Computers SBCs. It provides a web panel with WiFi management, installable modules, an integrated terminal, and a package manager. The stack is a PHP...

Sharpmad

Sharpmad C version of Powermad This is not yet complete and has not been fully tested. It's also missing the following: Invoke-DNSUpdate Get-KerberosAESKey Temp Readme ADIDNS Module Sharpmad.exe ADIDNS -Action new -Node test Action| Description ---|--- AddACE| Add ACE to node. Disable| Tombstone ...

poastal

Poastal - the Email OSINT tool Poastal is an email OSINT tool that provides valuable information on any email address. With Poastal, you can easily input an email address and it will quickly answer several questions, providing you with crucial information. ✨ Features Determine the name of the...

AzureHunter

A Powershell module to run threat hunting playbooks on data from Azure and O365 for Cloud Forensics purposes. Getting Started 1. Check that you have the right O365 Permissions The following roles are required in Exchange Online, in order to be able to have read only access to the UnifiedAuditLog:...

Astral_Projection

Astral Projection - UDRL Astral Projection is a Cobalt Strike UDRL User-Defined Reflective Loader, that performs advanced module stomping. The UDRL loads a module using LoadLibraryExW, then manipulates its internals by setting VEH to intercept strategic calls that allow it to steal the section...

sshprank

Description A fast SSH mass-scanner, login cracker, banner grabber and password auth checker tool using the python-masscan and shodan module. Usage hacker@blackarch $ sshprank -H / / / / / / / / / / / / /// | / / / // / / / // / / / / , opts | mode options -h - single host, cidr, ip range or...

AFLplusplus

American Fuzzy Lop plus plus AFL++ Release version: 5.03c GitHub version: 5.04a Repository: https://github.com/AFLplusplus/AFLplusplus AFL++ is maintained by: Marc "van Hauser" Heuse [email protected] Dominik Maier [email protected] Andrea Fioraldi [email protected] Heiko "hexcoder...

NovaLdr

NovaLdr ⚜️ NovaLdr is a Threadless Module Stomping written in Rust, designed as a learning project while exploring the world of malware development. It uses advanced techniques like indirect syscalls and string encryption to achieve its functionalities. This project is not intended to be a complet...

ADLab

ADLab PowerShell Module Introduction The purpose of this module is to automate the deployment of an Active Directory lab for practicing internal penetration testing. Credits to Joe Helle and his PowerShell for Pentesters course regarding the generation of the attack vectors. Instructions...

SYNwall

SYNwall Zero config IoT firewall. SYNwall is a project built for the time being as a Linux Kernel Module, to implement a transparent and no-config/no-maintenance firewall. You may want to have a look to the for an example of usage. Basics Usually IoT devices are out of a central control, with low...

MaFrida

MaFrida A simple yet powerful Magisk module that automates starting the Frida server on boot and provides a convenient command-line interface to manage different Frida versions on Android. Features Automatically starts frida-server at boot. Easily switch between different Frida versions...

CVE-2026-103939

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.3.0, interface/modules/custommodules/oe-module-weno/scripts/filedownload.php has no ACL or CSRF check and ignores the result of validateAdminCredentials. When the Weno module is...

CVE-2026-103939

Prior to version 8.3.0 , OpenEMR is vulnerable due to a lack of ACL and CSRF checks in the interface/modules/custom_modules/oe-module-weno/scripts/file_download.php script. When the Weno module is enabled, the default GET path triggers PharmacyService::removeWenoPharmacies(), which can be execute...