RATel

RATel Per favore, non caricare su virustotal ! Per evitare che RATel venga rilevato dall'antivirus, per favore non caricare il payload su TOTAL VIRUS. Ogni mese testerò personalmente se il payload viene rilevato dall'antivirus. Così avrai ogni mese una foto per dimostrare la discrezione di RATel...

htcap

HTCAP htcap is a web application scanner able to crawl single page application SPA recursively by intercepting ajax calls and DOM changes. KEY FEATURES Recursive DOM crawling engine Discovers ajax/fetch/jsonp/websocket requests Supports cookies, proxy, custom headers, http auth and more Heuristic...

automato

automato.rb automato uses native LDAP libraries to automate the collection and enumeration of various directory objects. This is incredibly useful during an internal penetration test. automato can also conduct password spraying attacks, and identify if a user is a local administrator against any...

golddigger

Gold Digger Search files for gold Gold Digger is a simple tool used to help quickly discover sensitive information in files recursively. Originally written to assist in rapidly searching files obtained during a penetration test. Installation Gold Digger requires Python3. root@kitploit: virtualenv...

recox

Recox v2.0 RecoX is an incredibly versatile and powerful tool that is specifically designed to aid in the identification and classification of vulnerabilities within web applications. The script is able to detect vulnerabilities that are not typically included in the OWASP top ten vulnerabilities...

nodexp

NodeXP - Detection and Exploitation Tool for Node.js Services! NodeXP is an intergrated tool, written in Python 2.7, capable of detecting possible vulnerabilities on Node.js services as well as exploiting them in an automated way, based on ServerSideJavascriptInjection attack! Getting Started -...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

Penetration-Test

Penetration-Test Report completo del test di penetrazione contro IP VM Ubuntu. Catena di attacco: enumerazione delle directory → scoperta di file di backup → cracking delle password → upload di file CMS → reverse shell → escalation dei privilegi del kernel Dirty Pipe, CVE-2022-0847. Struttura del...

pentest-guide

Guida al Test di Penetrazione basata su OWASP + Extra Questa guida è pensata per i penetration tester che cercano i casi di test appropriati necessari durante un progetto di test di penetrazione. Ho riorganizzato la OWASP Testing Guide v4 dal mio punto di vista, includendo 9 Classi di Test e ogni...

keimpx

Introduction keimpx is an open source tool, released under the Apache License 2.0. It can be used to quickly check for valid credentials across a network over SMB. Credentials can be: Combination of user / plain-text password. Combination of user / NTLM hash. Combination of user / NTLM logon...

metasploitable-pentest-report

मेटास्प्लॉइटेबल 2 — पेनिट्रेशन टेस्ट रिपोर्ट अस्वीकरण: यह पेनिट्रेशन टेस्ट केवल शैक्षिक उद्देश्यों के लिए एक निजी, पृथक VMware लैब वातावरण में किया गया। किसी भी वास्तविक सिस्टम तक पहुँच नहीं बनाई गई। सभी IP पतों को गुमनाम कर दिया गया है। अवलोकन क्षेत्र| विवरण ---|--- परीक्षक| Prafullya Shandilya...

wmohamed2033.github.io

wmohamed2033.github.io CVE-2021-44228 Log4Shell — Relazione del test di penetrazione...

Exploiting-GitLab-CVE-2023-7028

Penetrationstest gegen CVE-2023-7028...

scanless

⚠️ I am no longer maintaining scanless as of August 2023. ⚠️ scanless This is a Python command-line utility and library for using websites that can perform port scans on your behalf. Supported Online Port Scanners ipfingerprints spiderip standingtech viewdns yougetsignal Install Do it up:...

pathprober

pathprober Probe and discover HTTP pathname using brute-force methodology and filtered by specific word or 2 words at once. Purpose Brute-forcing website directories or HTTP pathname and validate using HTTP response code is not relevant anymore. This tool will help you to perform a penetration...

Hack-The-Box-Nexus-Findings-Report

🛡️ Hack The Box - Nexus Findings-Bericht 📋 Übersicht Dieses Repository enthält einen umfassenden Penetrationstest-Bericht für die Hack The Box-Maschine Nexus. 🔍 Wichtige Erkenntnisse Offengelegte Anmeldedaten im Gitea-Commit-Verlauf - Mittlere Schwere Krayin CRM Unbeschränkter Datei-Upload...

spiderfoot

SpiderFoot is an open source intelligence OSINT automation tool. It integrates with just about every data source available and utilises a range of methods for data analysis, making that data easy to navigate. SpiderFoot has an embedded web-server for providing a clean and intuitive web-based...

CVE-2024-0692-SolarWinds-SEM-RCE

CVE-2024-0692-SolarWinds-SEM-RCE Basato sulla mia ricerca durante un test di penetrazione, vedi i dettagli qui https://www.sprocketsecurity.com/blog/cve-2024-0692-building-the-exploit-that-didnt-exist...

Best-Practices-Cybersecurity-Otanata-Project

CP3418BestPracticesCybersecurityOTANATAProject CVE-2024-3273 — Report di test di penetrazione autorizzato D-Link DNS-320L NAS | Cliente: Otonata Overview Questo repository contiene il report completo di valutazione della sicurezza per un test di penetrazione autorizzato condotto su un dispositivo...

Vuln_Exploitation_MegaQuagga_Pentest

भेद्यता शोषण — MegaQuagga प्रवेश परीक्षण रिपोर्ट विश्लेषक: Samuel Weiss संगठन: 0x2A Security तारीख: 20 अप्रैल, 2026 ग्राहक: MegaQuagga Publishing लक्ष्य: www.megaquagga.local वर्गीकरण: गोपनीय अवलोकन यह परियोजना MegaQuagga Publishing वेब वातावरण के विरुद्ध किए गए एक संरचित प्रवेश परीक्षण का...