3604 matches found
Emby Server - Authentication Bypass
Emby Server is a user-installable home media server which stores and organizes a user's media files of virtually any format and makes them available for viewing at home and abroad on a broad range of client devices. This vulnerability may allow administrative access to an Emby Server system,...
Leantime < 2.4 - Authenticated SQL Injection
Leantime is an open source project management system. A 'userId' variable in app/domain/files/repositories/class.files.php is not parameterized. An authenticated attacker can send a carefully crafted POST request to /api/jsonrpc to exploit an SQL injection vulnerability. Confidentiality is impact...
jok3r
.. raw:: html .. image:: ./pictures/logo.png .. raw:: html Jok3r v3 beta .. image:: https://img.shields.io/badge/python-3.6-blue.svg :target: https://www.python.org/downloads/release/python-366/ :alt: Python 3.6 .. image:: https://readthedocs.org/projects/jok3r/badge/?version=latest :target:...
Empire-GUI
Empire GUI The Empire Multiuser GUI is a graphical interface to the Empire post-exploitation Framework. It was written in Electron and utilizes websockets SocketIO on the backend to support multiuser interaction. The main goal of this project is to enable red teams, or any other color team, to wo...
packj
Packj señala paquetes de código abierto maliciosos/riesgosos Packj pronunciado 'paquete' es una herramienta para ayudar a mitigar los ataques a la cadena de suministro de software. Puede detectar paquetes maliciosos, vulnerables, abandonados, de typo-squatting y otros 'riesgosos' de registros de...
zap-hud
ZAP Heads Up Display El HUD ya no está en desarrollo activo Desafortunadamente, el HUD ya no está en desarrollo activo debido a que nadie se está centrando en él. El HUD es una interfaz única e innovadora que sabemos que a algunas personas les encanta. Pero también requiere una cantidad nada...
msploitego
msploitego - El conjunto de pentesting para Maltego ESTA ES UNA VERSIÓN BETA, por favor sea amable y reporte cualquier problema Novedades Nuevas características Ahora compatible con múltiples workspaces para Metasploit a través de consultas Postgres Un script bash que ejecuta toneladas de módulos...
CVE-2019-19609-EXPLOIT
CVE-2019-19609-EXPLOIT Exploit for CVE-2019-19609 in Strapi Remote code execution in strapi-3.0.0-beta.17.7 or earlier. I was faced with a scenario with this vulnerability, but without a public exploit. I decided to create my own and share it here. Instalation git clone...
bbrecon
This project is no longer maintained and I took the crawling infrastructure offline. The audience was not big enough to justify maintaining it. Bug Bounty Recon bbrecon is a free Recon-as-a-Service for bug bounty hunters and security researchers. The API aims to provide a continuously up-to-date...
c2s
C2S Command and Control server on Slack What is C2S? C2S allows you to build a simple Command and Control server using only and only Slack without any extra server or anything. Installation pip3 install requests The rest of installation focus config on Slack workspace settings so please follow th...
heimdall_webserver
ATENCIÓN, este proyecto está en versión beta, hay muchos errores y problemas, si quieres ayudar al proyecto úsalo en un laboratorio, no en tu entorno real. NO, aún no está implementado HTTPS, llegará en la próxima actualización Heimdall Es una herramienta para gestionar paquetes vulnerables en tu...
inhale
Inhale - Malware Inhaler Inhale es una herramienta de análisis y clasificación de malware capaz de automatizar y escalar muchas operaciones de análisis estático. Esta es la versión beta, destinada a pruebas, retroalimentación y desarrollo comunitario. Antecedentes Inhale comenzó como una serie de...
link
link link es un framework de comando y control escrito en Rust. Actualmente en beta. Tabla de Contenidos Introduction Features Feedback Build Process Acknowledgments Introducción link proporciona implantes para MacOS, Linux y Windows que pueden carecer de las técnicas evasivas necesarias...
featherduster
FeatherDuster e Cryptanalib FeatherDuster è uno strumento scritto principalmente da Daniel "unicornfurnace" Crowley, con contributi della community, per violare la crittografia; cerca di rendere il più semplice possibile il processo di identificazione e sfruttamento di sistemi crittografici debol...
mud-visualizer
Visualizzatore di Manufacturer Usage Description MUD Attenzione: mud-visualizer è attualmente in beta. Usalo a tuo rischio. Questo strumento può essere utilizzato per visualizzare i file MUD in formato JSON. Indice Motivazione Installazione Astrazioni MUD supportate Contributi Supporto Citazione...
Endurance-Wiper
Endurance-Wiper Beta - Open Source A small wiper malware written in C using the .NET framework. If you are from Twitter or any other source, you can clearly tell this is in active development. You are free to check the updates here...
ephemora-cell
Ephemora-cell Ephemora-cell is an ephemeral, stateless, capability-bound execution boundary for untrusted AI and agent-generated code. create → constrain → execute → prove → destroy Every execution starts from a clean state, runs under limits the host granted — fuel, memory, time, I/O, output siz...
Pentest-Tools-Framework
Pentest Tools Framework exploits, Scanner, Password. Details | | ---|---|--- NEWS Modules PTF UPDATE! PTF OPtions ------------------------------------------------------------------------------------- | Global Option |...
Invoke-ATTACKAPI
Invoke-ATTACKAPI DEPRECATED WE RECOMMEND TO USE: https://github.com/Cyb3rWard0g/ATTACK-Python-Client A PowerShell script to interact with the MITRE ATT&CK Framework via its own API in order to gather information about techniques, tactics, groups, software and references provided by the MITRE ATT&...