CVE-2000-0114

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2000-0114 Run bellow command to check CVE-2000-0114 -h Configurations 2. We integrated with the Telegram API to receive...

CVE-2020-14882

Thank you NS-Sp4ce、Jas502n、s1kr10s、demon、斯文 reference： https://github.com/NS-Sp4ce/CVE-2020-14882 https://github.com/jas502n/CVE-2020-14882 https://github.com/s1kr10s/CVE-2020-14882 usage: CVE-2020-14882.py -h -u URL -f FILE -c CMD optional arguments: -h, --help show this help message and exit -u...

sashay

Sashay Introduction ℹ️ Sashay is an all in one automatic installer for useful Linux based tools.There are over 340 tools available. Installation⬇️ pip install -U sashay Tool Categories Information Gathering Vulnerability Scanner Exploitation Tools Wireless Testing Forensics Tools Web Hacking Stress...

xssmap

2020.08.20 update There are still a lot of bugs, so I'll take the time to fix them soon, so please keep updating. XSSMAP Detect XSS vulnerability in Web Applications Usage mimics sqlmap, and if you know sqlmap, you can easily handle xssmap! 中文介绍 Screenshots Easy Installation As simple as below,...

themida-unmutate

themida-unmutate A Python 3 tool to statically deobfuscate functions protected by Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation. The tool has been tested on Themida up to version 3.1.9. It's expected to work on WinLicense and Code Virtualizer as well. A Binary Ninja...

keyhacks

KeyHacks shows methods to validate different API keys found on a Bug Bounty Program or a pentest. @Gwen001 has scripted the entire process available here and it can be found here Table of Contents ABTasty API Key Algolia API key Amplitude API Keys Asana Access token AWS Access Key ID and Secret...

dronesploit

DroneSploit Easily pentest drones. This CLI framework is based on sploitkit and is an attempt to gather hacking techniques and exploits especially focused on drone hacking. For the ease of use, the interface has a layout that looks like Metasploit. pip3 install dronesploit ⚠️ When starting up the...

LFiFreak

LFI Freak Features Works with Windows, Linux and OS X Includes bind and reverse shell for both Windows and Linux Written in Python 2.7 What is this all about? A unique tool for exploiting local file inclusions using PHP Input, PHP Filter and Data URI methods. Dependencies BeautifulSoup Disclaimer...

Pinkerton

🕵️ Pinkerton Investigating JavaScript files since 1850 Python project to crawl for JavaScript files and search for secrets like API keys, authorization tokens, hardcoded passwords, or related data. ⚡ Getting started A quick guide on how to install and use Pinkerton. 1. Clone the repository with:...

soc-faker

soc-faker soc-faker is used to generate fake data for use by Security Operation Centers, Information security professionals, product teams, and many more. Getting Started soc-faker works with Python 3.6 or greater. You can install soc-faker using pip as well as cloning this repository directly. A...

TEx

Welcome to Telegram Explorer About The Project TEx is a Telegram Explorer tool created to help Researchers, Investigators and Law Enforcement Agents to Collect and Process the Huge Amount of Data Generated from Criminal, Fraud, Security and Others Telegram Groups. ⚠️ BETA VERSION ⚠️ Please note...

DepFuzzer

DepFuzzer DepFuzzer is a tool used to find dependency confusion or project where owner's email can be takeover. Install the tool /!\ This tool requires python = 3.10 /!\ $ python3 -m venv .venv $ source .venv/bin/activate $ pip3 install -r requirements.txt Or you can use the docker image : $ dock...

SCCMVersionGuesser

SCCMVersionGuesser Automated SCCM build and patch level detection tool Requirements requests Usage $ python3 SCCMVersionGuesser.py https://sccm.example.com Reference https://learn.microsoft.com/en-us/intune/configmgr/hotfix/ https://github.com/MicrosoftDocs/memdocs/tree/main/intune/configmgr/hotf...

Ox4Shell

Ox4Shell Deobfuscate Log4Shell payloads with ease. Description Since the release of the Log4Shell vulnerability CVE-2021-44228, many tools were created to obfuscate Log4Shell payloads, making the lives of security engineers a nightmare. This tool intends to unravel the true contents of obfuscated...

lsassy

lsassy Python tool to remotely extract credentials on a set of hosts. This blog post explains how it works. This tool uses impacket project to remotely read necessary bytes in lsass dump and pypykatz to extract credentials. Chapters| Description ---|--- Warning| Before using this tool, read this...

shisoserial

shisoserial What is this A simple tool targeted at shiro framework attacks with ysoserial. Contributor 4nth0ny @Fridaylab Runtime python 3.x JDK 1.8 Installation python3 -m pip install -r requirements.txt for AttributeError: module 'Crypto.Cipher.AES' has no attribute 'MODEGCM' or No module named...

Coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through many methods. Windows Support To build a binary for Windows, download the installer.ps1 script from this repository. Run it simply with no arguments to create a binary in the working directory...

WAS

WAS WAS - Wait A Sec : Automatic USB drive malware scanning tool for the security-minded person. Author: Fabio Baroni http://www.pentest.guru/ @Fabiothebest89 How many times have you plugged in a USB drive and double clicked on a file without scanning for malware? I guess, MANY. Wait A Sec! Even ...

ESXi-Ransomware-Scanner-mi

ESXiransomwarescanner A program that scans IP addresses for signs of ESXi compromise by grabbing the ransom note from an html page and comparing the strings. Requirements python 3.x requests BeautifulSoup tqdm colorama Installation Use the package manager pip to install the required packages. pip...

autonoma

Autonoma Autonoma detects hardcoded secrets and replaces them withos.environ... references using AST rewrites. Changes are applied only when the rewrite is deterministic and semantically-preserving. Rewrites use the parsed syntax tree — not regex on raw text. Runs locally with no network calls...