h4rpy

h4rpy h4rpy is an automated WPA/WPA2 PSK attack tool, wrapper of aircrack-ng framework. h4rpy provides clean interface for automated cracking of WPA/WPA2 PSK networks. h4rpy enables monitor mode on selected wireless interface, scans the wireless space for access points, tries to capture WPA/WPA2...

hate_crack

/ | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that fails on purpose...

rollback_car_attack_proverif

Rollback attack formal verif ProVerif proof of concept of the Rollback attack on car keyfob CVE-2022-37418, CVE-2022-36945 and CVE-2022-37305, presented in1 Disclaimer I have no connection with the authors of 1. I am grateful to them for making their paper open access. ProVerif installation...

sshhipot

Version 2 is under development. Please switch to the v2 branch, build, and run with -h. SSHHiPot High-interaction SSH honeypot ok, it's really a logging ssh proxy. Still more or less a work-in-progress. Feel free to go install this repository if you'd like to try it. Run it with -h to see more...

CVE-2021-37152

CVE-2021-37152 Exploit Accsess network clients by sending packets in wirless TP-LINK and preparing for a mitm attack exploit This exploit is designed for accessing and scanning network clients and you will easily access and prepare for a mitm attack, the exploit will attack in layers three and tw...

Pi-Zero-2W-Bad-USB

Raspberry Pi Zero 2 W BadUSB HID Toolkit A programmable BadUSB / HID attack platform built on a Raspberry Pi Zero 2 W. The Pi enumerates as a USB composite device keyboard plus an optional read-only mass-storage volume and executes Ducky-Script-style payloads against the host it's plugged into...

CVE-2018-19410-POC

CVE-2018-19410-POC Proof of concept for the vulnerability CVE-2018-19410 Details PRTG Network Monitor Version: 18.2.39.1661 and earlier Severity level: High Impact: Authentication Bypass, Improper Authorization, Local File Inclusion Access Vector: Remote The vulnerability permits remote and...

threatest

Threatest Threatest is a CLI and Go framework for testing threat detection end-to-end. Threatest allows you to detonate an attack technique, and verify that the alert you expect was generated in your favorite security platform. Read the announcement blog post:...

reconerator

Overview This is a custom .NET assembly which will perform a number of situational awareness activities. There are a number of current featuresets: BASIC - Obtains information from the disk and registry. LDAP - Allows customised AD LDAP queries to be made. RESOLVEHOST - Performs DNS lookup querie...

roca

ROCA detection tool This tool is related to ACM CCS 2017 conference paper 124 Return of the Coppersmith’s Attack: Practical Factorization of Widely Used RSA Moduli. It enables you to test public RSA keys for a presence of the described vulnerability. Update 4.11.2017 : Python 2.7, 3.4+ supported...

roca

Herramienta de detección ROCA Esta herramienta está relacionada con el artículo de la conferencia ACM CCS 2017 124 Return of the Coppersmith’s Attack: Practical Factorization of Widely Used RSA Moduli. Permite probar claves públicas RSA para detectar la presencia de la vulnerabilidad descrita...

automatic-api-attack-tool

Automatic API Attack Tool Imperva's customizable API attack tool takes an API specification as an input, and generates and runs attacks that are based on it as an output. The tool is able to parse an API specification and create fuzzing attack scenarios based on what is defined in the API...

asnmap

Go CLI and Library for quickly mapping organization network ranges using ASN information. Features • Installation • Usage • Running asnmap • Join Discord Features ASN to CIDR Lookup ORG to CIDR Lookup DNS to CIDR Lookup IP to CIDR Lookup ASN/DNS/IP/ORG input JSON/CSV/TEXT output STD IN/OUT suppor...

mininode

Mininode Mininode es una herramienta CLI para reducir la superficie de ataque de las aplicaciones Node.js mediante el análisis estático del código fuente. Soporta dos modos de reducción: 1 grueso, 2 fino. Mininode construye el gráfico de dependencias módulos y funciones utilizados de la aplicació...

wcw-cyberring-pav-decryptor

WCW CyberRing PAV Decryptor Cryptanalysis of a proprietary 1999 video DRM system, recovering 51 minutes of lost media through static binary analysis and known-plaintext attack. Frame from a recovered "CyberRing" match. WCW wrestlers were filmed against blue screen and composited into a CGI arena...

sn0int

sn0int sn0int pronunciado /snoɪnt/ es un framework OSINT semiautomático y un gestor de paquetes. Es utilizado por profesionales de seguridad TI, cazadores de recompensas, agencias de aplicación de la ley y en capacitaciones de concientización en seguridad para recopilar inteligencia sobre un...

sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

nuvola

nuvola nuvola con la n minúscula es una herramienta para volcar y realizar análisis de seguridad automáticos y manuales sobre configuraciones y servicios de entornos AWS, utilizando reglas predefinidas, extensibles y personalizadas creadas con una sintaxis YAML simple. La idea general detrás de...

tamago

TamaGo - bare metal Go tamago | https://github.com/usbarmory/tamago Copyright c The TamaGo Authors. All Rights Reserved. Introduction TamaGo is a framework that enables compilation and execution of unencumbered Go applications on bare metal processors AMD64, ARM, ARM64, RISCV64. The projects spaw...

Arduino_mousejack

Arduino Mousejack ShutDô Arduino Mousejack is a project, based on uCmousejeck by insecuritythings , to get Mousejack attacks into a small embedded device, with the form factor of a key chain. Prototype Mousejack Device Building the device is straight-forward, and the code provides a tool to use...