mimikatz

mimikatz mimikatz ist ein Tool, das ich erstellt habe, um C zu lernen und ein paar Experimente mit der Windows-Sicherheit zu machen. Es ist mittlerweile bekannt dafür, Klartext-Passwörter, Hashes, PIN-Codes und Kerberos-Tickets aus dem Speicher zu extrahieren. mimikatz kann außerdem Pass-the-Hash...

invoker

Invoker Penetration testing utility and antivirus assessment tool. Built with Visual Studio Community 2022 v17.5.4 64-bit and tested on Windows 10 Enterprise OS 64-bit. Made for educational purposes. I hope it will help! This repository started to have known signatures and I don't have time to...

Security Bulletin: Multiple vulnerabilities in Spring Boot's Cassandra have been addressed in IBM webMethods API Management

Summary Multiple vulnerabilities in Spring Boot's Cassandra have been addressed in IBM webMethods developer portal and IBM webMethos API ControlPlane. Vulnerability Details CVEID:CVE-2026-22746 DESCRIPTION: Vulnerability in Spring Spring Security. If an application is using the...

CVE-2024-30052

Questo repository contiene materiali relativi a CVE-2024-30052. Maggiori dettagli sulla vulnerabilità sono disponibili nel mio post sul blog. struttura La cartella builder contiene i file sorgente per un programma che crea un file dump che sfrutta la vulnerabilità. La cartella poc contiene tre fi...

QCSuper

QCSuper QCSuper è uno strumento che comunica con telefoni e modem basati su Qualcomm, consentendo di catturare frame radio 2G/3G/4G grezzi e su alcuni modelli 5G, tra le altre cose. Ti permetterà di generare catture PCAP utilizzando un telefono Android rooted, un dongle USB o una cattura esistent...

jeopardize

Introduction Jeopardize tool is developed to provide basic threat intelligence&response capabilities against phishing domains at the minimum cost as possible. It detects registered phishing domain candidates typosquatting, homograph etc., analyzes them and assigns a risk score to them. After then...

pickl3

Pickl3 Pickl3 is Windows active user credential phishing tool. You can execute the Pickl3 and phish the target user credential. Operational Usage - 1 Nowadays, since the operating system of many end users is Windows 10, we cannot easily steal account information with Mimikatz-like projects like t...

gokart

GoKart - Go Security Static Analysis GoKart is a static analysis tool for Go that finds vulnerabilities using the SSA single static assignment form of Go source code. It is capable of tracing the source of variables and function arguments to determine whether input sources are safe, which reduces...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

Look-at-The-XNU-Through-A-Tube-CVE-2018-4242-Write-up-Translation-

Guardare lo XNU attraverso un tubo: write-up di CVE-2018-4242 Zhuo Liang di Qihoo 360 Nirvan Team Contenuti 1 Introduzione 1 1.1 CVE-2018-4242 . . . . . . . . . . . . . . . . . . . . . . . . . 1 2 Il kernel XNU 2 2.1 Chiamate di sistema . . . . . . . . . . . . . . . . . . . . 2 2.2 MIG...

anteater

Anteater - CI/CD Gate Check Framework Description Anteater is an open framework to prevent the unwanted merging of nominated strings, filenames, binaries, depreciated functions, staging enviroment code / credentials etc. Anything that can be specified with regular expression syntax, can be sniffe...

flatpak v1.18.2

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. See https://flatpak.org/ for more information. Flatpak is available in the package repositories of most Linux distributions and can be installed from there. See https://flatpak.org/setup/ for quic...

nebulousAD

⚠️ Ein Hinweis für NebulousAD-Benutzer Ab dem 14. April wird NuID die NebulousAD-API, mit der dieser Code kommuniziert, nicht mehr hosten. Als kleines Entwicklerteam haben wir festgestellt, dass es nicht machbar ist, sowohl das NebulousAD-Portal als auch unser Authentifizierungs-Entwicklerportal...

Obfuscapk

!IMPORTANT Questo progetto è archiviato e non più mantenuto. Alcune delle domande più comuni trovano risposta in FAQ e troubleshooting. Uno strumento di offuscamento black-box per app Android. Obfuscapk è uno strumento Python modulare per offuscare app Android senza bisogno del loro codice...

mig

MIG: Mozilla InvestiGator MIG is Mozilla's platform for investigative surgery of remote endpoints. ⚠️ Deprecation Notice ⚠️ Mozilla is no longer maintaining the Mozilla InvestiGator MIG project. Mozilla is also no longer making use of this code internally. You are welcome to use this code as is...

ssh_scan

sshscan A SSH configuration and policy scanner ⚠️ Deprecation Notice ⚠️ Mozilla is no longer maintaining the SSH Scan project. Please fork it to continue development. Key Benefits Minimal Dependencies - Uses native Ruby and BinData to do its work, no heavy dependencies. Not Just a Script -...

securitybot

Securitybot Distributed alerting for the masses! Securitybot is an open-source implementation of a distributed alerting chat bot, as described in Ryan Huber's blog post. Distributed alerting improves the monitoring efficiency of your security team and can help you catch security incidents faster...

gitrob

Gitrob: Putting the Open Source in OSINT Gitrob is a tool to help find potentially sensitive files pushed to public repositories on Github. Gitrob will clone repositories belonging to a user or organization down to a configurable depth and iterate through the commit history and flag files that...

Belati

Belati Belati - Il tradizionale coltellino svizzero per OSINT Belati è uno strumento per la raccolta di dati pubblici e documenti pubblici da siti web e altri servizi a scopo OSINT. Questo strumento è ispirato da Foca e Datasploit per OSINT : Versione corrente v0.2.4 Belati in azione Perché l'ho...

portSpider

██████╗ ██████╗ ██████╗ ████████╗███████╗██████╗ ██╗██████╗ ███████╗██████╗ ██╔══██╗██╔═══██╗██╔══██╗╚══██╔══╝██╔════╝██╔══██╗██║██╔══██╗██╔════╝██╔══██╗ ██████╔╝██║ ██║██████╔╝ ██║ ███████╗██████╔╝██║██║ ██║█████╗ ██████╔╝ ██╔═══╝ ██║ ██║██╔══██╗ ██║ ╚════██║██╔═══╝ ██║██║ ██║██╔══╝ ██╔══██╗ ██║...