sh00t

A Testing Environment for Manual Security Testers Sh00t es un gestor de tareas para que te centres en realizar pruebas de seguridad proporciona listas de verificación Por Hacer de casos de prueba ayuda a crear informes de errores con plantillas de errores personalizables Características: Gestor d...

Reverse_HTTPS_Bot

ReverseHTTPSBot 0.8 Descripción: Un troyano de acceso remoto https basado en Python para pruebas de penetración. El servidor está basado actualmente en NodeJS Requisitos del Bot: pip install requests pip install pyscreenshot Requisitos del Servidor: sh setup.sh para generar certificado autofirmad...

PowerLurk

PowerLurk PowerLurk is a PowerShell toolset for building malicious WMI Event Subsriptions. The goal is to make WMI events easier to fire off during a penetration test or red team engagement. Please see my post Creeping on Users with WMI Events: Introducing PowerLurk for more detailed information:...

aws_pwn

AWS pwn Resumen Esta es una colección de guiones horriblemente escritos para realizar varias tareas relacionadas con pruebas de penetración en AWS. No te entristezcas si no funciona para ti. Puede que AWS haya cambiado desde que se escribió una herramienta en particular o que el código sea una...

aws_pwn

AWS pwn Summary This is a collection of horribly written scripts for performing various tasks related to penetration testing AWS. Please don't be sad if it doesn't work for you. It might be that AWS has changed since a given tool was written or it might be that the code sux. Either way, please fe...

subdomain3

Subdomain3 README.md enChinese 中文 Descripción Subdomain3 es una herramienta de nueva generación que ayuda a los testers de penetración a descubrir más información en menos tiempo que otras herramientas. La información incluye subdominios, IP, CDN, entre otros. Disfrútala. Captura de pantalla Patr...

wafpass

WAFPASS ██╗ ██╗ █████╗ ███████╗██████╗ █████╗ ███████╗███████╗ ██║ ██║██╔══██╗██╔════╝██╔══██╗██╔══██╗██╔════╝██╔════╝ ██║ █╗ ██║███████║█████╗ ██████╔╝███████║███████╗███████╗ ██║███╗██║██╔══██║██╔══╝ ██╔═══╝ ██╔══██║╚════██║╚════██║ ╚███╔███╔╝██║ ██║██║ ██║ ██║ ██║███████║███████║ ╚══╝╚══╝ ╚═╝...

progpilot

progpilot Pruebas de seguridad de aplicaciones estáticas SAST para PHP Instalación Hay muchas opciones disponibles, selecciona la que mejor se adapte a tu caso de uso. Usar lanzamientos PHAR Descarga el último archivo PHAR desde la página de lanzamientos. Coloca el archivo en algún lugar de tu PA...

PHPunit-Exploit

PHPunit Exploiter + Checker CVE-2017-9841 Overview : PHPUnit is a unit test framework for the PHP programming language. This is a sample xUnit architecture for a unit testing framework that originated with SUnit and became popular with JUnit. PHPUnit was created by Sebastian Bergmann Installation...

nuclei-templates-labs

🎯 Nuclei-Templates-Labs A comprehensive collection of vulnerable environments paired with ready-to-use Nuclei templates for practical security testing and learning! 🚀 A comprehensive collection of vulnerable environments paired with ready-to-use Nuclei templates for practical security testing and...

drow

drow Description TL;DR drow is a command-line utility that is used to inject code and hook the entrypoint of ELF executables post-build. It takes unmodified ELF executables as input and exports a modified ELF contianing an embedded user-supplied payload that executes at runtime. Slightly more...

log4j2burpscanner

SOLO PARA PRUEBAS, NO ATAQUES A NADIE SOLO PARA PRUEBAS, NO ATAQUES A NADIE SOLO PARA PRUEBAS, NO ATAQUES A NADIE Grupo de discusión Si el código QR no funciona, agrega WeChat f-f0ng, comentario log4j2burpscanner para intercambio Sigue la cuenta oficial de WeChat only security, responde...

EasY_HaCk

EasYHaCk 1. Hack the World using Termux this tool is developed by sabri.zaki for penetration testing using 2. metasploit-framework 3. sqlmap 4. nmap 5. metagoofil 6. RED HAWK 7. recon-ng and much more powerful testing tools EasYHaCk is a tool for network scanning and information gathering and for...

Rabbit Hole

Overview Rabbit Hole provides a very limited subset of the functionality of Maltego, focused on creating visual representations of information for Penetration Testing. It provides creation of various types of nodes such as IP Addresses, Ports, Services, etc and links between them, with a much mor...

awesome-oscp

Awesome OSCP Una lista curada de recursos increíbles de OSCP Contenido Recursos Reseñas y Guías de OSCP Cheatsheets y Scripts Temas Buffer Overflow Escalada de Privilegios Active Directory Otros Recursos de OSCP Libros Licencia Recursos Reseñas y Guías de OSCP Guía Oficial del Examen de...

yarasafe

YARASAFE - Automatic Binary Function Similarity Checks with Yara SAFE is a tool developed to create Binary Functions Embedding developed by Massarelli L., Di Luna G.A., Petroni F., Querzoni L. and Baldoni R. You can use SAFE to create your function embedding to use inside yara rules. If you are...

brutemap

Brutemap .. image:: https://brutemap-dev.github.io/static/brutemap-logo.jpg :target: https://brutemap-dev.github.io :alt: Logotipo de Brutemap |Build Status| |Python| |License| .. |Build Status| image:: https://travis-ci.org/brutemap-dev/brutemap.svg?branch=master :target:...

brutemap

Brutemap .. image:: https://brutemap-dev.github.io/static/brutemap-logo.jpg :target: https://brutemap-dev.github.io :alt: Brutemap Logo |Build Status| |Python| |License| .. |Build Status| image:: https://travis-ci.org/brutemap-dev/brutemap.svg?branch=master :target:...

spb

spb Shortest Path Bridging vulnerability testing scripts used to find CVE-2016-2783...

Zerologon_CVE-2020-1472

ZerologonCVE-2020-1472 Objective This vulnerability research aimed to establish a controlled environment for simulating a Zerologon on windows Server 2016 through Kali Linux for detection and mtigiation purposes. The primary focus was to perform a vulnerability pentration and show the possiblity ...