Penetration-Test

Penetrationstest Vollständiger Penetrationstestbericht gegen IP Ubuntu-VM. Angriffskette: Verzeichnisaufzählung → Sicherungsdateiermittlung → Passwortknacken → CMS-Dateiupload → Reverse Shell → Kernel-Privilegieneskalation Dirty Pipe, CVE-2022-0847. Repository-Struktur /report – Abschlussbericht...

Exploiting-GitLab-CVE-2023-7028

Test di penetrazione mirato a CVE-2023-7028...

Vuln_Exploitation_MegaQuagga_Pentest

Sfruttamento delle Vulnerabilità — Rapporto di Penetration Test di MegaQuagga Analista: Samuel Weiss Organizzazione: 0x2A Security Data: 20 Aprile 2026 Cliente: MegaQuagga Publishing Target: www.megaquagga.local Classificazione: RISERVATO Panoramica Questo progetto documenta un penetration test...

wmohamed2033.github.io

wmohamed2033.github.io CVE-2021-44228 Log4Shell — Relazione del test di penetrazione...

RATel

RATel Per favore, non caricare su virustotal ! Per evitare che RATel venga rilevato dall'antivirus, per favore non caricare il payload su TOTAL VIRUS. Ogni mese testerò personalmente se il payload viene rilevato dall'antivirus. Così avrai ogni mese una foto per dimostrare la discrezione di RATel...

Hack-The-Box-Nexus-Findings-Report

🛡️ Hack The Box - Rapporto sui Riscontri di Nexus 📋 Panoramica Questo repository contiene un rapporto completo di test di penetrazione per la macchina Hack The Box Nexus. 🔍 Riscontri Principali Credenziali esposte nella cronologia dei commit di Gitea - Severità Media Caricamento file non limitato...

pentest-guide

Penetration-Test-Leitfaden basierend auf OWASP + Extra Diese Anleitung richtet sich an Penetrationstester, die nach den geeigneten Testfällen suchen, die während eines Penetrationstestprojekts erforderlich sind. Ich habe den OWASP Testing Guide v4 aus meiner Sicht neu angeordnet, einschließlich 9...

faraday

Open Source Vulnerability Manager Security has two difficult tasks: designing smart ways of getting new information, and keeping track of findings to improve remediation efforts. With Faraday, you may focus on discovering vulnerabilities while we help you with the rest. Just use it in your termin...

nodexp

NodeXP - Detection and Exploitation Tool for Node.js Services! NodeXP is an intergrated tool, written in Python 2.7, capable of detecting possible vulnerabilities on Node.js services as well as exploiting them in an automated way, based on ServerSideJavascriptInjection attack! Getting Started -...

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

mtechweek_04

mtechweek04 Test di penetrazione basato su Metasploit su una VM di laboratorio isolata Metasploitable2 — sfruttamento remoto via DistCC CVE-2004-2687, privilege escalation via udev netlink CVE-2009-1185 e analisi del backdoor vsftpd 2.3.4 CVE-2011-2523, con mitigazione firewall validata end-to-en...

WordPress-Path-Traversal-CVE-2019-11447

Rapporto di Penetration Test WordPress Path Traversal - CVE-2019-11447 Informazioni sul Documento...

spiderfoot

SpiderFoot is an open source intelligence OSINT automation tool. It integrates with just about every data source available and utilises a range of methods for data analysis, making that data easy to navigate...

keimpx

Introduction keimpx is an open source tool, released under the Apache License 2.0. It can be used to quickly check for valid credentials across a network over SMB. Credentials can be: Combination of user / plain-text password. Combination of user / NTLM hash. Combination of user / NTLM logon...

automato

automato.rb automato uses native LDAP libraries to automate the collection and enumeration of various directory objects. This is incredibly useful during an internal penetration test. automato can also conduct password spraying attacks, and identify if a user is a local administrator against any...

CVE-2024-0692-SolarWinds-SEM-RCE

CVE-2024-0692-SolarWinds-SEM-RCE ペネトレーションテスト中の私の研究に基づき、詳細はこちらをご覧ください https://www.sprocketsecurity.com/blog/cve-2024-0692-building-the-exploit-that-didnt-exist...

scanless

⚠️ I am no longer maintaining scanless as of August 2023. ⚠️ scanless This is a Python command-line utility and library for using websites that can perform port scans on your behalf. Supported Online Port Scanners ipfingerprints spiderip standingtech viewdns yougetsignal Install Do it up:...

htcap

HTCAP htcap is a web application scanner able to crawl single page application SPA recursively by intercepting ajax calls and DOM changes. KEY FEATURES Recursive DOM crawling engine Discovers ajax/fetch/jsonp/websocket requests Supports cookies, proxy, custom headers, http auth and more Heuristic...

Best-Practices-Cybersecurity-Otanata-Project

CP3418BestPracticesCybersecurityOTANATAProject CVE-2024-3273 — Report di test di penetrazione autorizzato D-Link DNS-320L NAS | Cliente: Otonata Overview Questo repository contiene il report completo di valutazione della sicurezza per un test di penetrazione autorizzato condotto su un dispositivo...

hardcidr

hardCIDR Background A Linux Bash script to discover the netblocks, or ranges, in CIDR notation owned by the target organization during the intelligence gathering phase of a penetration test. This information is maintained by the five Regional Internet Registries RIRs: ARIN North America RIPE...