The_Shelf

The Shelf The Shelf è un posto dove Trustedsec colloca gli strumenti che vengono ritirati dal nostro uso standard. Gli strumenti caricati sullo shelf non sono supportati e sono forniti "così come sono" AS IS. Questo repo non accetterà pull request e queste verranno chiuse senza commento. Layout...

CVE-2019-19781

CVE-2019-19781 Modulo CVE-2019-19781 per Router Scan Project Come Usare preparazione root@kitploit: pip3 install ipcalc,requests utilizzo root@kitploit: python3 scanner.py Copyright Parte di questo repository che invia la risposta TCP è in parte un fork di trustedsec/cve-2019-19781 con alcune...

meterssh

Nome dello strumento: MeterSSH Scritto da: David Kennedy Azienda: TrustedSec Sito web: https://www.trustedsec.com Twitter: @TrustedSec, @HackingDave MeterSSH è un modo per prendere uno shellcode, iniettarlo in memoria e quindi incapsulare qualsiasi porta si desideri su SSH per mascherare qualsias...

ptf

Das PenTesters Framework PTF Ein TrustedSec-Projekt - Urheberrecht 2022 Geschrieben von: David Kennedy @HackingDave https://www.trustedsec.com Twitter: @TrustedSec, @HackingDave Das PenTesters Framework PTF ist ein Python-Skript, das für Debian/Ubuntu/ArchLinux-basierte Distributionen entwickelt...

SysmonCommunityGuide

TrustedSec Sysmon सामुदायिक मार्गदर्शिका यह कार्य क्रिएटिव कॉमन्स एट्रिब्यूशन-शेयरअलाइक 4.0 अंतर्राष्ट्रीय लाइसेंस के अंतर्गत लाइसेंस प्राप्त है, कृपया TrustedSec LLC को श्रेय दें आप स्वतंत्र हैं: साझा करें — सामग्री को किसी भी माध्यम या प्रारूप में प्रतिलिपि और पुनर्वितरित करें। अनुकूलित करें —...

btrpa-scan

btrpa-scan Um scanner Bluetooth Low Energy BLE com resolução avançada de Endereço Privado Resolvível RPA. Descubra dispositivos BLE próximos, rastreie um dispositivo específico por endereço MAC ou resolva endereços randomizados por privacidade usando uma Chave de Resolução de Identidade IRK...

hate_crack

root@kitploit: / | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that...

ridenum

RIDENUM - Eine einfache Open-Source-Methode zur Durchführung von Null-Session-Brute-Force-Angriffen Copyright 2018 TrustedSec Geschrieben von: David Kennedy ReL1K Twitter: @HackingDave und @TrustedSec Website: https://www.trustedsec.com root@kitploit: . . . . . | \ | | | \ | || \ | | | | | | | / ...

ASPX_WebShell_COFFLoader

ASPX Web Shell con COFF Loader Basato su CSCOFFLoader di TrustedSec Descrizione Questa web shell ASPX consente l'esecuzione di Beacon Object Files BOF su un server target utilizzando un client Python semi-interattivo. Sfrutta un'implementazione del loader COFF derivata da CSCOFFLoader di...

hate_crack

root@kitploit: / | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that...

tap

Die TrustedSec-Angriffsplattform TAP TAP - Remote-Builder für Penetrationstest-Plattformen. Geschrieben von: David Kennedy @HackingDave Firma: TrustedSec https://www.trustedsec.com Projektseite: https://github.com/trustedsec/tap Ein TrustedSec-Projekt - Copyright 2020 Unterstützte Betriebssysteme...

ADCSPwn - A Tool To Escalate Privileges In An Active Directory Network By Coercing Authenticate From Machine Accounts And Relaying To The Certificate Service

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts Petitpotam and relaying to the certificate service. Usage Run ADCSPwn on your target network. authentication will be relayed to. Optional arguments: port - The port ADCSPwn will listen on...

Citrix ADC (NetScaler) Directory Traversal / Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Citrix ADC NetScaler Directory Traversal RCE', 'Description' = %q This module exploits a directory traversal in Citrix Application Delivery...

Unpatched Citrix Flaw Now Has PoC Exploits

Proof-of-concept PoC exploit code has been released for an unpatched remote-code-execution vulnerability in the Citrix Application Delivery Controller ADC and Citrix Gateway products. The vulnerability CVE-2019-19781, which Threatpost reported on in December, already packs a double-punch in terms...

Citrix ADC (NetScaler) Directory Traversal RCE

This module exploits a directory traversal in Citrix Application Delivery Controller ADC, aka NetScaler, and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0, to execute an arbitrary command payload. Module Options msf use exploit/freebsd/http/citrix/dirtraversalrce msf undefineddirtraversalrce show...

SET v8.0.1 - The Social-Engineer Toolkit

Copyright 2019 The Social-Engineer Toolkit SET Written by: David Kennedy ReL1K Company: TrustedSec DISCLAIMER: This is only for testing purposes and can only be used where strict consent has been given. Do not use this for illegal purposes, period. Please read the LICENSE under readme/LICENSE for...

Microsoft Lync For Mac 2011 Injection

Exploit Title: Microsoft Lync for Mac 2011 Injection Forced Browsing/Download Author: @nyxgeek - TrustedSec Date: 2018-03-20 Vendor Homepage: microsoft.com Software Link: https://www.microsoft.com/en-us/download/details.aspx?id=36517 CVE: CVE-2018-8474 Version: Lync:Mac 2011 14.4.3, likely earlie...

Microsoft Lync for Mac 2011 - Injection Forced Browsing/Download Exploit

Exploit Title: Microsoft Lync for Mac 2011 Injection Forced Browsing/Download Author: @nyxgeek - TrustedSec Vendor Homepage: microsoft.com Software Link: https://www.microsoft.com/en-us/download/details.aspx?id=36517 CVE: CVE-2018-8474 Version: Lync:Mac 2011 14.4.3, likely earlier versions Tested...

Microsoft Lync for Mac 2011 - Injection Forced BrowsingDownload

Microsoft Lync for Mac 2011 - Injection Forced BrowsingDownload Exploit Title: Microsoft Lync for Mac 2011 Injection Forced Browsing/Download Author: @nyxgeek - TrustedSec Date: 2018-03-20 Vendor Homepage: microsoft.com Software Link: https://www.microsoft.com/en-us/download/details.aspx?id=36517...

Automating Cracking Methodologies Through Hashcat: hate_crack

A tool for automating cracking methodologies through Hashcat from the TrustedSec team. Installation Get the latest hashcat binaries https://hashcat.net/hashcat/ OSX Install https://www.phillips321.co.uk/2016/07/09/hashcat-on-os-x-getting-it-going/ mkdir -p hashcat/deps git clone...