CHN-Server

CHN-Server Community Honey Network server Find the documentation here: https://communityhoneynetwork.readthedocs.io...

scscanner_sh

scscanner - Massive Status Code Scanner scscanner is tool to read website status code response from the lists. This tool have ability to filter only spesific status code, and save the result to a file. Feature Slight dependency. This tool only need curl to be installed Multi-processing. Scanning...

encdecshellcode

Shellcode-Encrypter-Decrypter A Shellcode Encrypter & Decrypter, Using XOR Cipher to enc and dec shellcode. Installation git clone https://github.com/blacknbunny/Shellcode-Encrypter-Decrypter.git && cd Shellcode-Encrypter-Decrypter/ python encdecshellcode.py --help Usage Example Encryption: pytho...

Inventus

Inventus Inventus is a spider designed to find subdomains of a specific domain by crawling it and any subdomains it discovers. It's a Scrapy spider, meaning it's easily modified and extendable to your needs. Demo asciicast Requirements Linux -- I haven't tested this on Windows. Python 2.7 or Pyth...

stretcher

Stretcher Stretcher is a tool to search for open elasticsearch servers. Usage: python stretcher.py --shodan key --action analyze --threads 0..100 --dork python stretcher.py --help / // / / // / \ / / / / / / / / / / / // / / / // // / / / / / //// //// //// Tool designed to help identify...

CLZero

CLZero A project for fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors. About Thank you to @albinowax, @defparam and @d3d else this tool would not exist. Inspired by the tool Smuggler all attack gadgets adapted from Smuggler and...

bucky

Project is on temporary hold. Bucky Bucky is an automatic tool designed to discover S3 bucket misconfiguration, Bucky consists up of two modules Bucky firefox addon and Bucky backend engine. Bucky addon reads the source code of the webpages and uses Regular ExpressionRegex to match the S3 bucket...

Gurp

Requirements BurpSuite Professional version v2.0.0beta or greater from PortSwigger Enable the API under User Options Misc REST API. Dependencies go get -u -v github.com/joanbono/Gurp Add rsrc to the $PATH to build Windows binaries using the icon. Run make all to build binaries for Windows, Linux...

Struts2-048

Struts2-048 CVE-2017-9791 Author: DragonEgg def Usage: print 'check:' print ' python file.py http://1.1.1.1/struts2-showcase/integration/saveGangster.action' print 'poc:' print ' python file.py http://1.1.1.1/struts2-showcase/integration/saveGangster.action command' Demo...

sessionprobe

SessionProbe 🚀⚡ SessionProbe is a multi-threaded pentesting tool designed to assist in evaluating user privileges in web applications. It takes a user's session token and checks for a list of URLs if access is possible, highlighting potential authorization issues. SessionProbe deduplicates URL...

jfrog-CVE-2022-21449

CVE-2022-21449 Overview This tool allows to perform a quick scan of compiled code archives .jar, .war etc in order to check for vulnerability to CVE-2022-21449 by looking for the string indicating the use of ECDSA algorithm. The tool uses Python3 with no additional prerequisites. Usage python...

CVE-2021-43008-AdminerRead

CVE-2021-43008 - AdminerRead Exploit tool for Adminer 1.0 up to 4.6.2 Arbitrary File Read vulnerability Installation git clone https://github.com/p0dalirius/AdminerRead cd AdminerRead sudo python3 setup.py install Usage Vulnerable versions Adminer version 1.0 up to version 4.6.2 included File Rea...

CVE-2022-30190

CVE-2022-30190 Microsoft Office Word RCE Reproduction CVE-2022-30190 Vulnerability Overview MS Office docx files may contain external OLE object references as HTML files. There is an HTML scenario ms-msdt: that calls the msdt diagnostic tool, which is capable of executing arbitrary code specified...

SharpNamedPipePTH

SharpNamedPipePTH This project is a C tool to use Pass-the-Hash for authentication on a local Named Pipe for user Impersonation. You need a local administrator or SEImpersonate rights to use this. There is a blog post for explanation: https://s3cur3th1ssh1t.github.io/Named-Pipe-PTH/ It is heavily...

GeoServerExploit

GeoServerExploit A vulnerability exploitation tool for GeoServer CVE-2024-36401/CVE-2024-36404 This project was jointly developed by @hony and @wh!te?be6ar. If you find this project helpful, please don't forget to give it a 🌟Star to show your support. Thank you. Usage Example Acknowledgements...

imaginaryC2

Imaginary C2 author: Felix Weyne website Twitter Imaginary C2 is a python tool which aims to help in the behavioral network analysis of malware. Imaginary C2 hosts a HTTP server which captures HTTP requests towards selectively chosen domains/IPs. Additionally, the tool aims to make it easy to...

mapsdumper

▒█▀▄▀█ ░█▀▀█ ▒█▀▀█ ▒█▀▀▀█ ▒█▀▀▄ ▒█░▒█ ▒█▀▄▀█ ▒█▀▀█ ▒█▀▀▀ ▒█▀▀█ ▒█▒█▒█ ▒█▄▄█ ▒█▄▄█ ░▀▀▀▄▄ ▒█░▒█ ▒█░▒█ ▒█▒█▒█ ▒█▄▄█ ▒█▀▀▀ ▒█▄▄▀ ▒█░░▒█ ▒█░▒█ ▒█░░░ ▒█▄▄▄█ ▒█▄▄▀ ░▀▄▄▀ ▒█░░▒█ ▒█░░░ ▒█▄▄▄ ▒█░▒█ by: @Tegal1337 MAPSDUMPER Demo • Installation • Feature • Credits A tool for dumping place details from Goog...

email-prediction-asterisks

ASTERISKS & OBELIX Email prediction asterisks is a script that allows you to identify the emails hidden behind asterisks. It is a perfect application for osint analysts and security forces. It allows to intelligently predict, using Intelx leaks, which emails are related to the person we are looki...

Cuteit

Cuteit IP obfuscator made to make a malicious ip a bit cuter 😄 A simple python tool to help you to social engineer, bypass whitelisting firewalls, potentially break regex rules for command line logging looking for IP addresses and obfuscate cleartext strings to C2 locations within the payload. Al...

mosint

Features • Installation • Services • Usage • Docker • Config • Screen Mosint is an automated email osint tool written in Go that allows you investigate for target emails in a fast and efficient manner. It consolidates numerous services, enabling security researchers to swiftly access a wealth of...