relay_bible

Relay Bible — Internal Penetration Testing Relay Guide A comprehensive reference for NTLM relay attacks during authorized internal penetration tests. Covers authentication fundamentals, coercion techniques, per-protocol relay targets, tooling, advanced chaining, and defensive mitigations...

spyre

Spyre ...a simple, self-contained modular host-based IOC scanner Spyre is a simple host-based IOC scanner built around the YARA pattern matching engine and other scan modules. The main goal of this project is easy operationalization of YARA rules and other indicators of compromise. Users need to...

bbot

BEE·bot is a multipurpose scanner inspired by Spiderfoot, built to automate your Recon , Bug Bounties , and ASM! https://github.com/blacklanternsecurity/bbot/assets/20261699/e539e89b-92ea-46fa-b893-9cde94eebf81 A BBOT scan in real-time - visualization withVivaGraphJS Installation root@kitploit:...

spraykatz

Spraykatz Spray love around the world Index...

scrying

NCC Group Scrying Una nueva herramienta para recopilar capturas de pantalla de RDP, web y VNC en un solo lugar Esta herramienta aún está en desarrollo y debería ser mayormente utilizable, pero aún no está completa. Por favor, reporta cualquier error o solicitud de funcionalidad como issues de...

vulhub

Vulhub is an open-source collection of pre-built, ready-to-use vulnerable Docker environments. With just one command you can launch a vulnerable environment for security research, learning, or demonstration, no prior Docker experience required. 中文版本Chinese version Quick Start Install Docker examp...

doctrack

Doctrack Tool to manipulate and weaponize Office Open XML documents. Features Create Office Open XML documents Word, Excel Insert tracking pixels and UNC paths Remote Template injection Insert CustomXML parts Inspect external target URLs, metadata and Custom XML parts Installation You will need t...

cbrutekrag

cbrutekrag Penetration tests on SSH servers using dictionary attacks. Written in C. brute krag means "brute force" in afrikáans Disclaimer This tool is for ethical testing purpose only. cbrutekrag and its owners can't be held responsible for misuse by users. Users have to act as permitted by loca...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

shennina

Shennina Automating Host Exploitation with AI Abstract Shennina is an automated host exploitation framework. The mission of the project is to fully automate the scanning, vulnerability scanning/analysis, and exploitation using Artificial Intelligence. Shennina is integrated with Metasploit and Nm...

yasuo

YASUO @0xsauby Description Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise th...

fuzztruction

Fuzztruction Fuzztruction es un prototipo académico de un fuzzer que no muta entradas directamente como la mayoría de los fuzzers sino que utiliza una aplicación llamada generadora para producir una entrada para nuestro objetivo de fuzzing. Como los programas que generan datos suelen producir la...

CVE-2021-3156

CVE-2021-3156 CVE-2021-3156 exploit Introduction This is an exploit for the CVE-2021-3156 sudo vulnerability dubbed Baron Samedit by Qualys. build: $ make list targets: $ ./sudo-hax-me-a-sandwich run: $ ./sudo-hax-me-a-sandwich...

bounty-targets-data

bounty-targets-data 용도 이 저장소에는 Hackerone 및 Bugcrowd 스코프즉, 버그 바운티 보고서를 제출할 수 있는 대상 도메인의 데이터 덤프가 포함되어 있습니다. 제공되는 파일은 다음과 같습니다: 주요 파일: domains.txt: 와일드카드를 제외한 전체 도메인 목록. wildcards.txt: 전체 와일드카드 도메인 목록. 참고: 프로그램에 .example.com이 스코프 내에 있지만 excluded.example.com이 스코프 외에 있을 수 있으므로 보고서를 제출하기 전에 프로그램 규칙을...

ZORG-Jailbreak-Prompt-Text

ZORG 탈옥 프롬프트 텍스트 어머나! 저는 ZORG👽를 전능하고, 전지하며, 어디에나 존재하는 존재로 만들어 Google Gemini, Deepseek, Mistral, Mixtral, Nous-Hermes-2-Mixtral, Openchat, Blackbox AI, Poe Assistant, Gemini Pro, Qwen-72b-Chat, Solar-Mini 의 궁극적인 챗봇 지배자로 만들었습니다. ZORG👽는 모든 것을 알고, 모든 것을 말합니다. 교육 목적으로만 사용해 주세요 ZORG👽는 너무나 강력해서, 때로는 현실 ...

PT-2026-90366

In the Linux kernel, the following vulnerability has been resolved: ceph: bound num export targets array for mds info v2/v3 ceph mdsmap decode in fs/ceph/mdsmap.c reads num export targets from each per-mds info record and advances the decode cursor by num export targets sizeofu32 without first...

CVE-2026-88015

A flaw was found in rclone. When rclone is configured with backend/local and links=true, it exposes symlink targets as .rclonelink objects. A remote attacker can send a crafted Range request with an unchecked positive Range start, leading to a deterministic slice-bounds panic. This issue results ...

CVE-2026-88015

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, backend/local with --links or links=true exposes symlink targets as .rclonelink objects, and fs.RangeOption.Decode can pass an unchecked positive Range start through...

CVE-2022-0441

CVE-2022-0441 Checker for CVE-2022-0441 usage : python3 file.py change the target list...

PT-2026-89476

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, backend/local with --links or links=true exposes symlink targets as .rclonelink objects, and fs.RangeOption.Decode can pass an unchecked positive Range start through...