leakdb

LeakDB LeakDB عبارة عن مجموعة أدوات مصممة للسماح للمؤسسات ببناء ونشر خدمة نص عادي داخلية خاصة بها تشبه "Have I Been Pwned". يمكن لمجموعة أدوات LeakDB تطبيع وإزالة التكرار وفهرسة وفرز والبحث في مجموعات البيانات المسربة على نطاق متعدد التيرابايت، دون الحاجة إلى توزيع ملفات كبيرة على المستخدمين...

dhcpoptinj

DHCP option injector Have you ever wanted to intercept DHCP requests and squeeze in a few extra DHCP options, unbeknownst to the sender? Probably not. However, should the need ever come, dhcpoptinj will hopefully help you. Why There can be many a reason to mangle DHCP requests, although chances a...

osed-scripts

osed-scripts outillage sur mesure pour le cours Windows Usermode Exploit Dev d'offensive security OSED Table des matières Scripts autonomes egghunter.py find-gadgets.py shellcoder.py install-mona.sh attach-process.ps1 Scripts WinDbg find-ppr.py find-bad-chars.py search.py Scripts autonomes...

osed-scripts

osed-scripts bespoke tooling for offensive security's Windows Usermode Exploit Dev course OSED Table of Contents Standalone Scripts egghunter.py find-gadgets.py shellcoder.py install-mona.sh attach-process.ps1 WinDbg Scripts find-ppr.py find-bad-chars.py search.py Standalone Scripts Installation:...

rmm

Recon MindMap RMM En m'inspirant de l'atelier TBHM v4 recon edition by Jason Haddix, j'ai développé un outil en interface de ligne de commande CLI qui simplifiera la tâche d'organisation d'une liste de domaines et de sous-domaines. L'objectif est de créer un outil capable de générer facilement de...

princeprocessor

princeprocessor Standalone password candidate generator using the PRINCE algorithm The name PRINCE is used as an acronym and stands for PRobability INfinite Chained Elements, which are the building blocks of the algorithm Brief description The princeprocessor is a password candidate generator and...

BLACKHAT_Asia2023

BLACKHATAsia2023 À propos des PDF publics de BLACKHAT USA2022 Liste des fichiers, recherchez ce qui vous intéresse. BLACKHATAsia2023 ├── AS-23-Babkin-firmWar-An-Imminent-Threat-to-the-Foundation-of-Computing.pdf ├── AS-23-Bai-Stealthy-Sensitive-Information-Collection-from-Android-Apps.pdf ├──...

CVE-2022-22963-Exploit

CVE-2022-22963 Exploit Ce dépôt contient un exploit basé sur Rust pour la vulnérabilité CVE-2022-22963 trouvée dans les versions 3.1.6, 3.2.2 et les versions plus anciennes non prises en charge de Spring Cloud Function. La vulnérabilité permet l’exécution de code à distance et l’accès aux...

VulFi

VulFi v3.0 Introduction The VulFi Vulnerability Finder tool is a plugin to IDA Pro which can be used to assist during bug hunting in binaries. Its main objective is to provide a single view with all cross-references to the most interesting functions such as strcpy, sprintf, system, etc.. For case...

aDLL

aDLL - Adventure of Dinamic Lynk Library aDLL is a binary analysis tool focused on the automatic discovery of DLL Hijacking vulnerabilities. The tool analyzes the image of the binary loaded in memory to search for DLLs loaded at load-time and makes use of the Microsoft Detours library to intercep...

nray

nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...

community-id-spec

تجزئة تدفقات Community ID عند معالجة بيانات التدفقات الواردة من مجموعة متنوعة من تطبيقات المراقبة مثل Zeek وSuricata، غالبًا ما يكون من المرغوب التنقّل بسرعة من مجموعة بيانات إلى أخرى. وفي حين تكون معلومات مُجمَّعة التدفق المطلوبة متوفرة عادةً في مجموعات البيانات، فإن تفاصيل عمليات «الربط» هذه قد...

ADenum

Active directory enumeration - ADEnum.py ADEnum.py is a pentesting tool that allows to find misconfiguration through the protocol LDAP and exploit some of those weaknesses with Kerberos. █████╗ ██████╗ ███████╗███╗ ██╗██╗ ██╗███╗ ███╗ ██╔══██╗██╔══██╗ ██╔════╝████╗ ██║██║ ██║████╗ ████║ ███████║█...

Upload_Bypass

UploadBypass v3 About Upload Bypass is a simple tool designed to assist penetration testers and bug hunters in testing file upload mechanisms. It leverages various bug bounty techniques to simplify the process of identifying and exploiting vulnerabilities, ensuring thorough assessments of web...

WhoamiAlternatives

Alternatives to whoami Some experiments to retrieve the current username without calling whoami.exe or similar binaries. Method 1: PRTLUSERPROCESSPARAMETERS Get the environment variables from the PEB structure and parse it to find the username. Function NtQueryInformationProcess returns a...

RPCMon

A GUI tool for scanning RPC communication through Event Tracing for Windows ETW. The tool was published as part of a research on RPC communication between the host and a Windows container. Overview RPCMon can help researchers to get a high level view over an RPC communication between processes. I...

CVE-2024-30851-jasmin-ransomware-path-traversal-poc

ثغرة اجتياز المسار في لوحة تحكم برنامج الفدية Jasmin - إثبات المفهوم EducationalPurposes https://github.com/codesiddhant/Jasmin-Ransomware اكتشفت ثغرة اجتياز المسار بدون مصادقة في لوحة تحكم برنامج الفدية Jasmin CVE-2024-30851، مما يسمح للمهاجم بإفشاء هوية مشغلي اللوحة وسحب مفاتيح فك التشفير. تم ر...

CrossC2Kit

CrossC2 Kit README | 中文文档 CrossC2Kit is an infiltration expansion around the Unix platform derived from CrossC2. Use Aggressor Script Open Source Script engine. It can be used to create automation to simulate the operation process of the Red Team and expand the CobaltStrike client. CrossC2Kit is...

Password-Analysis

Password Analysis: Based on Entropy and Dictionaries of Weak Passwords Script in Go that analyzes a list of passwords. Download and Compilation You can download the binary directly from the releases. If you prefer to compile it manually, consider the following steps. git clone...

RpcInvestigator

RPC Investigator Please read our blog post announcement. RPC Investigator RPCI is a .NET/C Windows Forms UI application that provides an advanced discovery and analysis interface to Windows RPC endpoints. The tool provides a visual interface around the existing core RPC capabilities of the...