crauEmu

Mascot designed by@kottsarapkin crauEmu is an uEmu extension for developing and analyzing payloads for code-reuse attacks. Slides from ZeroNights 2019 Demo 1 - X32-64, Edge, rop-gadgets from pwnjs Demo 2 - ARM64, checkm8 callback-chain RopEditor Installation 1. Put the file crauEmu.py in same...

bitlocker-attacks

Attaques contre BitLocker Une liste d'attaques publiques contre BitLocker. Toute attaque publique ayant le potentiel d'attaquer BitLocker mais dont la méthode exacte n'est pas encore publique comme baton drop est hors du périmètre. La plupart des attaques concernent les cas où le VMK est scellé p...

Active-Directory-Exploitation-Cheat-Sheet

Aide-mémoire Active Directory Ce dépôt contient une méthodologie générale pour l'environnement Active Directory. Il est fourni avec une sélection de commandes rapides issues des outils les plus efficaces basés sur Powershell, C, .Net 3.5 et .Net 4.5. Processus général : Reconnaissance Énumération...

ms-photos_NTLM_Leak

Microsoft ms-photos URI NTLM Leak New vulnerability allowing to leak NTLM hashes from browsers with one click By Ruben Enkaoua Description The Microsoft ms-photos URI scheme takes fileName as parameter, which can be submitted with a UNC path, leaking NTLMv2-SSP hashes one opened. By crafting a...

openclaw-security-monitor

مراقب أمان OpenClaw مراقبة أمنية استباقية، وفحص التهديدات، ورؤية فورية لنشر OpenClaw. يكتشف التهديدات من حملة ClawHavoc أكثر من 824 مهارة ضارة، وبرنامج AMOS الخبيث ، وبرنامج Vidar الخبيث لسرقة المعلومات ، وبرنامج GhostSocks الوكيل الخبيث ، وهجوم ClawJacked بالقوة الغاشمة عبر WebSocket، وهجمات...

psudohash

psudohash Cool New Features of v1.1.0 Special thanks to DavidAngelos: ▶️ Added a progress bar in every step to track execution. ▶️ Added options: In-order joins -i / --inorder: join keywords only in the original order e.g. foo,bar,baz → foo, bar, baz, foobar, foobaz, barbaz, foobarbaz. All-order...

nexmon

What is nexmon? Nexmon is our C-based firmware patching framework for Broadcom/Cypress WiFi chips that enables you to write your own firmware patches, for example, to enable monitor mode with radiotap headers and frame injection. Below, you find an overview what is possible with nexmon. This...

beef

حقوق النشر c 2006-2026 وايد ألكورن - [email protected] إطار استغلال المتصفحات BeEF - https://beefproject.com راجع ملف 'doc/COPYING' للحصول على إذن النسخ =============================================================================== ما هو BeEF؟ BeEF هو اختصار لـ إطار استغلال المتصفحات The...

wfuzz

Wfuzz - The Web Fuzzer Wfuzz has been created to facilitate the task in web applications assessments and it is based on a simple concept: it replaces any reference to the FUZZ keyword by the value of a given payload. A payload in Wfuzz is a source of data. This simple concept allows any input to ...

pegasus-neo

| \ | \ | | | | / / |/ / | | | / | | | | / / | | | \ \ || \ \ |\ | || |, |,|/,|/| | |/ ███▄ █ ▓█████ ▒█████ ██ ▀█ █ ▓█ ▀ ▒██▒ ██▒ ▓██ ▀█ ██▒▒███ ▒██░ ██▒ ▓██▒ ▐▌██▒▒▓█ ▄ ▒██ ██░ ▒██░ ▓██░░▒████▒░ ████▓▒░ ░ ▒░ ▒ ▒ ░░ ▒░ ░░ ▒░▒░▒░ ░ ░░ ░ ▒░ ░ ░ ░ ░ ▒ ▒░ ░ ░ ░ ░ ░ ░ ░ ▒ ░ ░ ░ ░ ░ PEGASUS-NEO...

batchql

BatchQL BatchQL is a GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations. This script is not complex, and we welcome improvements. When exploring the problem space of GraphQL batching attacks, we found that there were a few blog posts on the internet,...

offensive-ai-compilation

Compilation sur l'IA offensive Une liste organisée de ressources utiles couvrant l'IA offensive. 📁 Sommaire 📁 🚫 Abus 🚫 🧠 Apprentissage automatique adversarial 🧠 ⚡ Attaques ⚡ 🔒 Extraction 🔒 ⚠️ Limitations ⚠️ 🛡️ Actions défensives 🛡️ 🔗 Liens utiles 🔗 ⬅️ Inversion ou inférence ⬅️ 🛡️ Actions défensives...

OpenAttack

Documentation • Features & Uses • Usage Examples • Attack Models • Toolkit Design OpenAttack is an open-source Python-based textual adversarial attack toolkit, which handles the whole process of textual adversarial attacking, including preprocessing text, accessing the victim model, generating...

attack_range

Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs — Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...

ai-kill-chain

Chaîne de cyberattaque étendue pour les menaces de l'ère de l'IA Une mise à jour de la Cyber Kill Chain de Lockheed Martin pour les défenseurs confrontés aux attaques par LLM et IA agentique. Ajoute une étape de pré-attaque pour la compromission de la chaîne d'approvisionnement des modèles. Ajout...

rpcfirewall

I Need More Information Check out our RPC Firewall blog post or our BlackHat talk to gain better understanding of RPC, RPC attacks, and the solution: RPC Firewall. Join our |Zero| Labs Slack Community workspace for any questions, issues, or simply to shout out. We would love to hear from you also...

rpcfirewall

أحتاج إلى مزيد من المعلومات اطّلع على مقالنا حول جدار حماية RPC أو محادثتنا في BlackHat لفهم أفضل لـ RPC وهجمات RPC والحل: جدار حماية RPC. انضم إلى مساحة عمل مجتمع Slack |Zero| Labs لأي أسئلة أو مشكلات أو ببساطة للتحية. نود أيضًا أن نسمع منك عبر البريد الإلكتروني إذا كنت من هذا النوع. اتصل بنا عل...

browser-identity-attacks-matrix

Browser & Identity Attacks Matrix This repository is a collection of browser and identity attack techniques covering SaaS apps, browser-based attacks, identity providers, and phishing. It is intended to be a resource for security researchers, red/blue teams, and penetration testers to learn about...

crypto-attacks

Introduction Implémentations Python d'attaques et d'utilitaires cryptographiques. Prérequis SageMath avec Python 3.9 PyCryptodome Vous pouvez vérifier la version Python de SageMath à l'aide de la commande suivante : $ sage -python --version Python 3.9.0 Si votre version Python de SageMath est...

WordPress CAS Theme <= 1.0.0 - Server-Side Request Forgery

The CAS WordPress theme through version 1.0.0 is vulnerable to Server-Side Request Forgery SSRF via the 'url' parameter in the getremotedata.php script. This vulnerability allows unauthenticated attackers to make the server perform requests to arbitrary URLs. id: CVE-2024-4399 info: name: WordPre...