ad-autopwn

AD AutoPwn Zero-Auth to Domain Admin — Automated Active Directory Attack Chain A fully automated penetration testing tool that chains 25+ attack techniques to compromise Active Directory environments. Designed for authorized security assessments. root@kitploit: /\ | \ /\ | | | \ / | | | / \ || | ...

AutoPWN-Suite

AutoPWN Suite AutoPWN Suite es un proyecto para escanear vulnerabilidades y explotar sistemas automáticamente. Características CLI Escaneo y explotación completamente automáticos Detectar el rango de IP de red sin ninguna entrada del usuario Detección de vulnerabilidades basada en versiones de...

LeakedHandlesFinder

LHF - Buscador de Handles Filtrados Herramienta de identificación de handles de procesos de Windows filtrados. Útil para identificar nuevas vulnerabilidades de LPE durante un pentest o simplemente como un nuevo proceso de investigación. Actualmente soporta la explotación autopwn de handles...

autoPwn

Advertencia Actualmente se está reescribiendo por completo. Inicialmente, el enfoque estará en aplicaciones Linux interactivas que solo toman entrada de stdin. Se intentará utilizar la funcionalidad Driller y Fuzzer de Shellphish. autoPwn en su estado actual hará esto de forma limitada. Simplemen...

Autopwn

Autopwn™ 간단한 bash 기반 메타스플로이트 자동화 도구! 몇 번의 클릭만으로 안드로이드 또는 윈도우 기기를 장악하세요!! Autopwn 작동 중 주의: 이 도구는 순수하게 교육 목적으로 제작되었습니다. 만약 법적 문제에 휘말려 저를 탓하신다면, 저는 그저 비웃을 것입니다 : 사용자는 자신의 행동에 대해 책임을 져야 합니다 업데이트:...

CVE-2023-4220

autopwn...

jboss-autopwn

⚠️ NOTE: This tool is no longer under active maintenance. JBoss Autopwn Script Christian G. Papathanasiou http://www.spiderlabs.com INTRODUCTION This JBoss script deploys a JSP shell on the target JBoss AS server. Once deployed, the script uses its upload and command execution capability to provid...

autopwn

autopwn Specify targets and run sets of tools against them autopwn is designed to make a pentester's life easier and more consistent by allowing them to specify tools they would like to run against targets, without having to type them in a shell or write a script. This tool will probably be usefu...

HTTP Client Automatic Exploiter 2 (Browser Autopwn)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "HTTP Client Automatic Exploiter 2 Browser Autopwn", 'Description' = %q This module will automatically serve browser exploits. Here are the option...

AutoPWN Suite - Project For Scanning Vulnerabilities And Exploiting Systems Automatically

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically. How does it work? AutoPWN Suite uses nmap TCP-SYN scan to enumerate the host and detect the version of softwares running on it. After gathering enough information about the host, AutoPWN Suite...

LeakedHandlesFinder - Leaked Windows Processes Handles Identification Tool

Leaked Windows processes handles identification tool. Useful for identify new LPE vulnerabilities during a pentest or simply as a new research process. Currently supports exploiting autopwn procesess leaked handles spawning a new arbitrary process cmd.exe default. LHF identifies in realtime...

Fsociety Hacking Tools Pack

Fsociety Menu Information Gathering Password Attacks Wireless Testing Exploitation Tools Sniffing & Spoofing Web Hacking Private Web Hacking Post Exploitation INSTALL & UPDATE Information Gathering : Nmap Setoolkit Port Scanning Host To IP wordpress user CMS scanner XSStracer Dork – Google Dorks...

HTTP Client Automatic Exploiter 2 (Browser Autopwn)

This module will automatically serve browser exploits. Here are the options you can configure: The INCLUDEPATTERN option allows you to specify the kind of exploits to be loaded. For example, if you wish to load just Adobe Flash exploits, then you can set Include to 'adobeflash'. The EXCLUDEPATTER...

Java CMM Remote Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' class...

Opera <= 9.10 Configuration Overwrite

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

[Blue|Smash] Bluetooth Penetration Testing Suite

Blue|Smash is a free open source bluetooth pentest suite, powered by python for linux. I built Blue|Smash to aid me in my bluetooth adventures and thought others might benefit from my work :D. Here is a list of some of the tools included. Sorbo's Frontline bluetooth sniffer. A bruteforce scanner...

Java Applet - ProviderSkeleton Insecure Invoke Method (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' class Metasploit3 false EXPLOITSTRING =...

Java Applet - Driver Manager Privileged 'toString()' Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' class Metasploit3 false def initialize inf...

Synactis PDF In-The-Box ConnectToSynactic Stack Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

Java CMM Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' class Metasploit3 false def initialize inf...