ms-photos_NTLM_Leak

تسريب NTLM عبر مخطط URI في Microsoft ms-photos ثغرة جديدة تسمح بتسريب تجزئات NTLM من المتصفحات بنقرة واحدة بقلم Ruben Enkaoua الوصف مخطط URI الخاص بـ Microsoft ms-photos يقبل معامل fileName، والذي يمكن إرساله بمسار UNC، مما يؤدي إلى تسريب تجزئات NTLMv2-SSP بمجرد الفتح. من خلال صياغة رابط منسق...

hcxdumptool

hcxdumptool WLAN उपकरणों से पैकेट कैप्चर करने और WPA प्रोटोकॉल के विरुद्ध लेयर 2 हमले चलाकर अपने WiFi नेटवर्क के भीतर संभावित कमजोर बिंदुओं की खोज करने का एक उपकरण। Raspberry Pi Zero जैसे छोटे सिस्टमों पर अधिकतर हेडलेस चलाने के लिए डिज़ाइन किया गया। hcxnmealog GPS उपकरणों से NMEA 0183 वाक्यों को...

packj

Packj flags malicious/risky open-source packages Packj pronounced package is a tool to help to mitigate software supply chain attacks. It can detect malicious, vulnerable, abandoned, typo-squatting, and other "risky" packages from popular open-source package registries, such as NPM, RubyGems, and...

rpcfirewall

I Need More Information Check out our RPC Firewall blog post or our BlackHat talk to gain better understanding of RPC, RPC attacks, and the solution: RPC Firewall. Join our |Zero| Labs Slack Community workspace for any questions, issues, or simply to shout out. We would love to hear from you also...

rpcfirewall

أحتاج إلى مزيد من المعلومات اطّلع على مقالنا حول جدار حماية RPC أو محادثتنا في BlackHat لفهم أفضل لـ RPC وهجمات RPC والحل: جدار حماية RPC. انضم إلى مساحة عمل مجتمع Slack |Zero| Labs لأي أسئلة أو مشكلات أو ببساطة للتحية. نود أيضًا أن نسمع منك عبر البريد الإلكتروني إذا كنت من هذا النوع. اتصل بنا عل...

adfsbrute

adfsbrute A script to test credentials against Active Directory Federation Services ADFS, calculating the ADFS url of an organization and allowing password spraying or bruteforce attacks. The main idea is carrying out password spraying attacks with a random and high delay between each test and...

nexmon

What is nexmon? Nexmon is our C-based firmware patching framework for Broadcom/Cypress WiFi chips that enables you to write your own firmware patches, for example, to enable monitor mode with radiotap headers and frame injection. Below, you find an overview what is possible with nexmon. This...

overload

ओवरलोड एक Python-आधारित नेटवर्क स्ट्रेस टेस्टिंग टूल जो अधिकृत सुरक्षा परीक्षण के लिए लेयर 2, लेयर 4 और लेयर 7 हमले के तरीकों को शामिल करता है। !WARNING यह प्रोजेक्ट संग्रहीत किया गया है और अब सक्रिय रूप से बनाए नहीं रखा गया है। हालांकि स्रोत कोड उपलब्ध है, कोई नई सुविधाएँ, बग फिक्स या अपडेट की...

openclaw-security-monitor

مراقب أمان OpenClaw مراقبة أمنية استباقية، وفحص التهديدات، ورؤية فورية لنشر OpenClaw. يكتشف التهديدات من حملة ClawHavoc أكثر من 824 مهارة ضارة، وبرنامج AMOS الخبيث ، وبرنامج Vidar الخبيث لسرقة المعلومات ، وبرنامج GhostSocks الوكيل الخبيث ، وهجوم ClawJacked بالقوة الغاشمة عبر WebSocket، وهجمات...

quarantyne

=== THIS PROJECT IS ARCHIVED === Quarantyne · Modern Web Firewall 🛃 Automated web security made simple TL;DR Quarantyne is a reverse-proxy that protects web applications and APIs from fraudulent behavior, misuse, bots and cyber-attacks in real-time. Requirements Presentation Features Coverage...

crypto-attacks

مقدمة تطبيقات بلغة Python للهجمات والأدوات التشفيرية. المتطلبات SageMath مع Python 3.9 PyCryptodome يمكنك التحقق من إصدار Python الخاص بـ SageMath باستخدام الأمر التالي: $ sage -python --version Python 3.9.0 إذا كان إصدار SageMath Python أقدم من 3.9.0، فقد لا تعمل بعض الميزات في بعض البرامج النصي...

wfuzz

Wfuzz - The Web Fuzzer Wfuzz has been created to facilitate the task in web applications assessments and it is based on a simple concept: it replaces any reference to the FUZZ keyword by the value of a given payload. A payload in Wfuzz is a source of data. This simple concept allows any input to ...

rtl8812au

RTL8812AU/21AU and RTL8814AU Wireless drivers Only for use with Linux & Android THESE DRIVERS IS DEPRECATED. Use the mac80211 drivers over at https://github.com/lwfinger/rtw88 Important! Use "ip" and "iw" instead of "ifconfig" and "iwconfig" It's described further down, READ THE README! Note: The...

bluemonday

bluemonday bluemonday is a HTML sanitizer implemented in Go. It is fast and highly configurable. bluemonday takes untrusted user generated content as an input, and will return HTML that has been sanitised against an allowlist of approved HTML elements and attributes so that you can safely include...

batchql

BatchQL BatchQL is a GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations. This script is not complex, and we welcome improvements. When exploring the problem space of GraphQL batching attacks, we found that there were a few blog posts on the internet,...

isip

isip Interactive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks. Video https://asciinema.org/a/11128 Setup git clone https://github.com/halitalptekin/isip.git cd isip pip install -r requirements.txt Usage Packet manipulation tools are...

Crypton

Crypton Crypton एक शैक्षिक पुस्तकालय है जो आक्रामक और रक्षात्मक क्रिप्टोग्राफी को सीखने और अभ्यास करने के लिए है। यह मूल रूप से विभिन्न एन्क्रिप्शन सिस्टम सममित और असममित, डिजिटल हस्ताक्षर, संदेश प्रमाणीकरण कोड और प्रमाणित एन्क्रिप्शन सिस्टम पर सभी मौजूदा कमजोरियों और हमलों की व्याख्या और...

snmpwn

SNMPwn is an SNMPv3 user enumerator and attack tool. It is a legitimate security tool designed to be used by security professionals and penetration testers against hosts you have permission to test. It takes advantage of the fact that SNMPv3 systems will respond with "Unknown user name" when an...

bitlocker-attacks

هجمات BitLocker قائمة بالهجمات العامة على BitLocker. أي هجوم عام لديه القدرة على مهاجمة BitLocker ولكن الطريقة الدقيقة ما تزال غير عامة مثل baton drop خارج النطاق. معظم الهجمات تكون للحالات التي يكون فيها VMK مغلقًا بواسطة TPM فقط، وهو الإعداد الافتراضي، وهو ما يستخدمه BitLocker التلقائي إلى جانب...

lockphish

Lockphish v2.0 Lockphish it's the first tool 07/04/2020 for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone Passcode using a https link. LockPhish Tutorial: https://www.kalilinux.in/2020/05/lockphish.html Author: The Linux Choice Who deleted his...