356 matches found
DNS-resolve-checker
DNS-resolver Usage bash pdnscheck.sh follow the steps...
log4j-ioc-detector
log4j Linux IoC Detector A basic Bash script to detect log4j Indicator of Compromise IoC in Linux. How to Use 1. Clone this repository: git clone https://github.com/santosomar/log4j-ioc-detector 2. Run the the log4jiocdetector.sh script, as demonstrated below: bash sudo log4jiocdetector.sh A basi...
SUDO-privilege-escalation
SUDO Privilege Escalation Overview: This project demonstrates the exploitation of the Sudo privilege escalation vulnerability CVE-2023-22809. The objective is to simulate how an attacker can gain unauthorized root access by exploiting this vulnerability in a controlled environment. Technologies...
pivotool
pivotool pivotool in ethical hacking, as expected, is a simple tool written in bash that could help you in the post exploitation phase to pivot to other systems. Description Pivotool is a tool that does not pretend to revolutionize the post exploitation phase of a penetration test, but it can hel...
Fenrir
Fenrir Simple Bash IOC Scanner Fenrir is a simple IOC scanner bash script. It allows scanning Linux/Unix/OSX systems for the following Indicators of Compromise IOCs: Hashes MD5, SHA1 and SHA256 using md5sum, sha1sum, sha -a 256 File Names string - checked for substring of the full path, e.g...
Fortinet-PoC-Auth-Bypass
Fortinet-PoC-Auth-Bypass Bash Proof of Concept PoC for Fortinet Authentication Bypass - CVE-2022-40684 Usage: Usage: ./poc.sh Example: ./poc.sh 10.10.10.120 8443 Available in Exploit-db: https://www.exploit-db.com/exploits/51092...
CurveballCertTool
CurveballCertTool CVE-2020-0601 This automated bash script for Code Signing was created using this repository: https://github.com/ollypwn/CurveBall Please use this script for educational purposes only. Requirements openssl ruby osslsigncode Usage ./CurveballCertTool.sh -c: Create new "legit"...
ASLRay
ASLRay Linux ELF x32/x64 ASLR DEP/NX bypass exploit with stack-spraying Properties: ASLR bypass DEP/NX bypass Cross-platform Minimalistic Simplicity Unpatchable Dependencies: Linux 2.6.12+ - would work on any x86-64 Linux-based OS BASH - the whole script Limitations: Stack needs to be executable...
procinfo
procinfo A portable process inspector for Linux and macOS. Get details about any running process instantly! Also see procinfominimal.sh - pure sh implementation of procinfo. Installation curl -fsSL https://raw.githubusercontent.com/wenekar/procinfo/main/procinfo.sh -o procinfo chmod +x procinfo...
LazyDroid
Lazydroid 0.4 by Dani Martinez @dan1t0 Lazydroid is a tool written as a bash script to facilitate some aspects of an Android Assessment. It provides some common tasks such as: Set the debug flag of an application to true Set the backup flag of an application to true Re-Build the application Re-Si...
MIDA-Multitool
MIDA - Multitool Bash script purposed for system enumeration, vulnerability identification and privilege escalation. MIDA Multitool draws functionality from several of my previous scripts namely SysEnum and RootHelper and is in some regards RootHelpers successor, or sister script at the very leas...
uDork
uDork - Google Hacking Tool Author: M3n0sD0n4ld Twitter: @DavidUton News 11/06/2022 I have some bad news to give, last week Facebook withdrew the service by which the tool made the requests, unfortunately the tool no longer works. Sorry, thank you very much to all the users who have been using it...
debian11-dirty_pipe-patcher
debian11-dirtypipe-patcher This Project is still under development Since the Debian 11 still comes with the kernel version 5.10, which is vulnerable to the Dirty Pipe Vulnerability, this scirpt is made for manually compile and install the kernel version 5.18 which is not vulnerable. Usage 1. Clon...
virustotalx
virustotalx for endpoints virustotalx for IPs V2 Installation git clone https://github.com/orwagodfather/virustotalx.git cd virustotalx create a 3 accounts https://www.virustotal.com/gui/join-us and copy the 3 api keys === nano orwa.sh & nano orwaV2.sh paste 3 api keys here .... if $apikeyindex -...
webcopilot
WebCopilot An automation tool that enumerate subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities. Features • Installation • Usage • WebCopilot • Tools Used • Acknowledgement WebCopilot is an automation tool designed to enumerate...
TLDHunt
TLDHunt - Domain Availability Checker TLDHunt is a command-line tool designed to help users find available domain names for their online projects or businesses. By providing a keyword and a list of TLD top-level domain extensions, TLDHunt checks the availability of domain names that match the giv...
defender
🛡️ Linux-Defender.sh 📝 Table of Contents 📌 Overview 🚀 Features 🐧 Supported Distros 📦 Tools Installed ⚙️ Installation Building from Source General 📦 Package Installation Debian .deb Package Arch Linux Package 🧰 Running the Defender 🧾 License 🙋♂️ Author ☕ Support & Contribution 📌 Overview Linux...
PartyLoud
Partyloud Get your privacy back Generate fake web browsing and mitigate tracking CodeFactor PartyLoud is a highly configurable and straightforward free tool that helps you prevent tracking directly from your linux terminal, no special skills required. Once started, you can forget it is running. I...
Hacknetics
Hacknetics Hacknetics 🛡️ Owner: ice-wzl Contributors: ice-wzl, Jfox32199 Please consider donating: https://buymeacoffee.com/icewzl Description: Your one-stop reference for OSCP and Red Teaming! 🚀 This repository contains a curated collection of code snippets, guides, command syntax, and high-level...
Bulk_403_Bypass
Bulk 403 Bypass This is a Bash script that performs bulk 403 bypass by adding a custom header to HTTP requests. It can be useful for testing whether a website is vulnerable to 403 bypass techniques. Usage To use the script, pass in a list of URLs as a command line argument: ./403bypass.sh urls.tx...