lightkeeper

lightkeeper A port of the Lighthouse plugin to GHIDRA. Icons made by Pixel perfect from www.flaticon.com...

MikrotikExploit

Mikrotik Exploit Scan and Export RouterOS Password allow you to scan subnet of IPv4 in loop with different port. Installation install python3 Ubuntu/Debian: $ apt-get install python3 install python3 Python package manager Ubuntu/Debian: $ apt-get install python3-pip Mac $ ruby -e "$curl -fsSL...

WMIHACKER

WMIHACKER（No need 445 Port） 中文版Chinese version Disclaimer: The technology involved in this project is only for security learning and defense purposes, illegal use is prohibited! Bypass anti-virus software lateral movement command execution test tool（No need 445 Port） Introduction: The common...

chomtesh

CHOMTE.SH Be sure to :star: this repo so you can keep up to date on any daily progress! CHOMTE.SH is a versatile framework designed for automating reconnaissance tasks in penetration testing. It's useful for bug bounty hunters and penetration testers in both internal and external network...

raven

Raven - Advanced Cyber Threat Map Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, 100,000 cities, and can be used in an isolated environment without external lookups!. Structure Offline - Demo Firefox, Chrome or Safari Live - Regression 500 attacks at onc...

domainim

DOMAINIM Features • Usage • Installation • Usage • Contributing • Additional Notes Domainim is a fast domain reconnaissance tool for organizational network scanning. The tool aims to provide a brief overview of an organization's structure using techniques like OSINT, bruteforcing, DNS resolving...

domainim

DOMAINIM Características • Uso • Instalación • Uso • Contribuir • Notas adicionales Domainim es una herramienta rápida de reconocimiento de dominios para el escaneo de redes organizativas. La herramienta tiene como objetivo proporcionar una visión general breve de la estructura de una organizació...

bore

bore Un túnel TCP moderno y simple en Rust que expone puertos locales a un servidor remoto, evitando los cortafuegos de conexión NAT estándar. Eso es todo lo que hace: ni más, ni menos. Instalación requiere Rust, ver alternativas abajo cargo install bore-cli En tu máquina local bore local 8000 --...

CVE-2019-0708

Microsoft 3389 Remote Desktop Vulnerability CVE-2019-0708 Mass Detection Tool 0x001 Detection on Windows https://github.com/robertdavidgraham/rdpscan C:\Users\K8team\Desktop\rdpscan-master\vs10\Release 的目录 2019/06/02 02:11 . 2019/06/02 02:11 .. 2019/06/02 01:55 2,582,016 libcrypto-11.dll 2019/06/...

creak

creak Performs some of the most famous MITM attack on target addresses located in a local network. Among these, deny navigation and download capabilities of a target host in the local network performing an ARP poison attack and sending reset TCP packets to every request made to the router. Born a...

naabu

Features • Installation • Usage • Running naabu • Config • NMAP integration • CDN/WAF Exclusion • Discord Naabu is a port scanning tool written in Go that allows you to enumerate valid ports for hosts in a fast and reliable manner. It is a really simple tool that does fast SYN/CONNECT/UDP scans o...

naabu

功能 • 安装 • 使用 • 运行naabu • 配置 • NMAP集成 • CDN/WAF排除 • Discord Naabu 是一款用 Go 编写的端口扫描工具，能够以快速且可靠的方式枚举主机的有效端口。它是一款非常简单的工具，可对主机/主机列表执行快速的 SYN/CONNECT/UDP 扫描，并列出所有返回响应的端口。 功能 快速简单的基于 SYN/CONNECT/UDP 探测的扫描 针对易用性和轻量级 资源消耗进行了优化 DNS 端口扫描 自动 IP 去重 （针对 DNS 端口扫描） IPv4/IPv6 端口扫描（实验性 ） 使用 Shodan Internetdb 的被动 端口...

DInvoke_rs

DInvokers Rust port of Dinvoke. DInvokers may be used for many purposes such as PE parsing, dynamic exported functions resolution, dynamically loading PE plugins at runtime, API hooks evasion and more. Features: Dynamically resolve and invoke undocumented Windows APIs from Rust. Primitives allowi...

gost

gost - GO Simple Tunnel A simple security tunnel written in Golang Features Listening on multiple ports Multi-level forward proxy - proxy chain Standard HTTP/HTTPS/HTTP2/SOCKS4A/SOCKS5 proxy protocols support Probing resistance support for web proxy Support multiple tunnel types TLS encryption vi...

CVE-2023-51764

PoC for CVE-2023-51764 SMTP SMUGGLING Postfix CVE-2023-5176525.py Description This script allows sending messages using port 25 of the mail server. Usage Before running, modify the variables: smtpserver - address of the mail server fromaddress - sender of the first email toaddress - recipient of...

sniffles

Sniffles--Packet Capture Generator for IDS and Regular Expression Evaluation Sniffles is a tool for creating packet captures that will test IDS that use fixed patterns or regular expressions for detecting suspicious behavior. Sniffles works very simply. It takes a set of regular expressions or...

Mitel 6000 - OS Command Injection

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones through 6.4 SP4 R6.4.0.4006, and the 6970 Conference Unit through 6.4 SP4 R6.4.0.4006 or version V1 R0.1.0, could allow an unauthenticated attacker to conduct a command injection attack due to insufficient paramete...

Milvus - Unauthenticated Metrics API Access

Milvus 2.5.27 and 2.6.10 contains an authentication bypass caused by weak default token and unauthenticated REST API on TCP port 9091, letting attackers perform arbitrary expression evaluation and data manipulation, exploit requires network access to port 9091. id: CVE-2026-26190 info: name: Milv...

Apache OFBiz - XML External Entity Injection

The /webtools/control/xmlrpc endpoint in OFBiz XML-RPC event handler is exposed to External Entity Injection by passing DOCTYPE declarations with executable payloads that discloses the contents of files in the filesystem. In addition, it can also be used to probe for open network ports, and figur...

shodan

Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...