Snaffler

Snaffler 它的用途是什么？ Snaffler 是一款面向渗透测试人员 和红队成员 的工具，旨在帮助在大量乏味讨厌的干草堆（庞大的 Windows/AD 环境）中找到美味的糖果针（主要是凭据，但也很灵活）。 它也可能对其他做其他事情的人有用，但明确来说，它并非设计为“审计”工具。 我不想读所有这些！！！ 呃，好吧。但我们不对结果负责。我们为你写了所有这些，不过没关系。我们不生气，只是失望。 snaffler.exe -s -o snaffler.log 它是做什么的？ 广义上讲 - 它从 Active Directory 获取 Windows 计算机列表，然后将其 snaffly...

ubertooth

Ubertooth Project Ubertooth is an open source wireless development platform suitable for Bluetooth experimentation. Ubertooth ships with a capable BLE Bluetooth Smart sniffer and can sniff some data from Basic Rate BR Bluetooth Classic connections. The latest release is 2020-12-R1. The latest...

yara-x

YARA-X YARA-X is a re-incarnation of YARA, a pattern matching tool designed with malware researchers in mind. This new incarnation intends to be faster, safer and more user-friendly than its predecessor. The ultimate goal of YARA-X is replacing YARA as the default pattern matching tool for malwar...

ALEAPP

Android Logs Events And Protobuf Parser If you want to contribute hit me up here: https://abrignoni.github.io Blog posts here: https://leapps.org/blog Download Pre-built releases need no Python installation: ALEAPP GitHub Releases, or LEAPPs Releases for the whole LEAPP family. Platform| Download...

krbrelayx

Krbrelayx - Kerberos relaying and unconstrained delegation abuse toolkit Toolkit for abusing Kerberos. Requires impacket, ldap3 and dnspython to function. It is recommended to install impacket from git directly to have the latest version available. More info about this toolkit available in my blo...

mip22

mip22 mip22 v3.3 mip22 is a advanced phishing tool 83 default websites, clone any site with manual method, add any site with customize method, mask link with subdomains, url shortener, audio notice for view the credentials live, music in background etc... The program is made for educational...

aclpwn.py

aclpwn.py Aclpwn.py is a tool that interacts with BloodHound to identify and exploit ACL based privilege escalation paths. It takes a starting and ending point and will use Neo4j pathfinding algorithms to find the most efficient ACL based privilege escalation path. Aclpwn.py is similar to the...

kube-score

kube-score kube-score is a tool that performs static code analysis of your Kubernetes object definitions. The output is a list of recommendations of what you can improve to make your application more secure and resilient. You can test kube-score out in the browser with the online demo source...

r2frida

r2frida Radare2 and Frida better together Description Self-contained plugin for radare2 that ships frida and allows to instrument local or remote processes using r2 commands instead but not limited to Frida scripts. The radare project provides a complete toolchain for reverse engineering, it's...

r2frida

r2frida Radare2 与 Frida 强强联合 描述 radare2 的自包含插件，内置 frida，允许使用 r2 命令（但不限于）Frida 脚本 来对本地或远程进程进行插桩。 radare 项目提供了一套完整的逆向工程工具链， 它被积极维护，提供维护良好的功能， 并通过其他编程语言和工具扩展其特性。 Frida 是一个动态插桩工具包，通过注入你自己的 JavaScript， 可以轻松检查和操纵正在运行的进程，并且可选地与你的脚本进行通信。 特性 运行未经修改的 Frida 脚本（使用 :. 命令） 在任意进程中执行 C、Javascript 或 TypeScript 代码...

SharpHound

SharpHound 获取 SharpHound SharpHound 的最新构建版本始终可以在此处找到。 要确定与已部署的 BloodHound CE 实例兼容的 SharpHound 版本，请登录 BloodHound CE 的 Web UI，点击 ⚙️（设置）→ 下载收集器。然后，点击用户界面中的“下载 SharpHound”按钮，或使用显示的 SharpHound 版本下载相应的发布二进制文件。或者，从相应的发布提交编译 SharpHound 二进制文件。 文档 请参阅 SharpHound 部分，它是 BloodHound Community Edition 文档 的一部分。...

changeme

changeme A default credential scanner. About changeme picks up where commercial scanners leave off. It focuses on detecting default and backdoor credentials and not necessarily common credentials. It's default mode is to scan HTTP default credentials, but has support for other credentials. change...

fuxploider

fuxploider Fuxploider is an open source penetration testing tool that automates the process of detecting and exploiting file upload forms flaws. This tool is able to detect the file types allowed to be uploaded and is able to detect which technique will work best to upload web shells or any...

iLEAPP

iOS Logs, Events, And Plists Parser iLEAPP parses iOS and iPadOS forensic extractions and produces HTML, TSV, timeline, KML, and LAVA output. It supports iOS/iPadOS 11 through current versions. Browse the full searchable artifact list at leapps.org/artifacts filter by LEAPP tool. Quick Start...

openssl

Welcome to the OpenSSL Project !openssl logowww.openssl.org !github actions ci badgegithub actions ci OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations ar...

CVE-2022-43704

CVE-2022-43704 - 非端点可访问通道/通过捕获重放绕过认证 Sinilink XY-WFTX WiFi远程恒温器模块温度控制器 标题 产品文档 应用程序 用户手册 硬件 数据手册 ESP8285 降压转换器 固件 产品描述 Overview WIFI Remote Thermostat High Precision Temperature Controller Module Cooling and Heating APP Temperature Collection XY-WFT1 WFTX Technical Parameters Temperature display:...

CVE-2019-19781-CitrixRCE

Citrix未授权远程代码执行攻击工具 - CVE-2019-19781 参考资料： https://blog.fox-it.com/2020/07/01/a-second-look-at-cve-2019-19781-citrix-netscaler-adc/ 绕过方式： 1 - 已删除/修改的脚本位于：/vpn/../vpns/portal/scripts/ 2 - Perl命令注入（模板注入）攻击后出现的正斜杠（"/"）问题...

passivedns

| | @ | \ | \ | || | TM | |.------. .-----. .-----. -. .-.------. | |\ || | || | | | | || --'| --'| |\ Y /| --| | |/ || || | | || || ||||||| / | /|/ | |||| A tool to collect DNS records passively to aid Incident handling, Network Security Monitoring NSM and general digital forensics. PassiveDNS...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

cloudsplaining

Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report Documentation For full documentation, please visit the project on ReadTheDocs. Installation Cheatsheet Example report...