CVE-2024-21626

إثبات المفهوم لـ CVE-2024-21626 اقرأ مقالتي الكاملة للشرح المفصل هنا. مقالة ذات صلة أثناء التحقيق في CVE-2024–21626 ، اكتشفت ثغرة أمنية تم التغاضي عنها في الإصدارات الأقدم من Docker و runC. لمعرفة المزيد حول ما وجدته، اقرأ المقالة التالية: "استكشاف الثغرات الأمنية المخفية في إصدارات Docker القديم...

galah

TL;DR: Galah /ɡəˈlɑː/ - pronounced ‘guh-laa’ is an LLM-powered web honeypot designed to mimic various applications and dynamically respond to arbitrary HTTP requests. Galah supports major LLM providers, including OpenAI, GoogleAI, GCP's Vertex AI, Anthropic, Cohere, and Ollama. Unlike traditional...

NamedPipePTH

NamedPipePTH This project is a PoC code to use Pass-the-Hash for authentication on a local Named Pipe user Impersonation. There also is a blog post for explanation: https://s3cur3th1ssh1t.github.io/Named-Pipe-PTH/ It is heavily based on the code from the projects Invoke-SMBExec.ps1 and RoguePotat...

BackupOperatorToDA

From Backup Operator To Domain Admin If you compromise an account member of the group Backup Operators you can become the Domain Admin without RDP or WinRM on the Domain Controller. All credit from filipdragovic with his inital POC ! I build this project because I wanted to have a more generic...

screenscrub

screenscrub Find credentials in screenshots, extract them to a secret manager, and irreversibly redact them from the images — so secrets don't rot in your notes, screenshots, and /Desktop. Local. Offline. Silent. No network, no telemetry by default. screenscrub bridges two existing tool categorie...

vulnhuntr

Un outil pour identifier les vulnérabilités exploitables à distance à l'aide des LLM et de l'analyse statique de code. Les premières vulnérabilités 0day au monde découvertes de manière autonome par une IA Description Vulnhuntr exploite la puissance des LLM pour créer et analyser automatiquement d...

pict

PICT - Post-Infection Collection Toolkit This set of scripts is designed to collect a variety of data from an endpoint thought to be infected, to facilitate the incident response process. This data should not be considered to be a full forensic data collection, but does capture a lot of useful...

binja_arch_ref

binjaarchref Un plugin Binary Ninja simple pour afficher une aide-mémoire avec des informations sur l'architecture actuelle Origines Ce projet est le fruit du programme de stage d'été 2017 de NCC Group. Les prochaines mises à jour seront suivies surhttps://github.com/ehennenfent/binjaarchref. NCC...

divd-2021-00038--log4j-scanner

divd-2021-00038--log4j-scanner سيقوم هذا الماسح بفحص المسارات بشكل متكرر بما في ذلك الأرشيفات بحثًا عن إصدارات log4j الضعيفة وملفات org/apache/logging/log4j/core/lookup/JndiLookup.class. حاليًا تحدد قائمة السماح الإصدارات غير القابلة للاستغلال، وهي في هذه الحالة log4j-core 2.17.0 و 2.12.3. الميزا...

confused

Confused A tool for checking for lingering free namespaces for private package names referenced in dependency configuration for Python pypi requirements.txt, JavaScript npm package.json, PHP composer composer.json or MVN maven pom.xml. What is this all about? On 9th of February 2021, a security...

bpflock

bpflock - Lock Linux machines bpflock - eBPF driven security for locking and auditing Linux machines. Note: bpflock is currently in experimental stage , it may break, options and security semantics may change, some BPF programs will be updated to use Cilium ebpf library. Sections 1. Introduction...

ppfuzz

ppfuzz Prototype Pollution Fuzzer A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀 Installation Binary Source Dependencies Demonstration Usage Basic Options Usage Supporting Materials Contributing Attribution Acknowledments License Installation Binary Simply,...

shomon

ShoMon is a Shodan alert feeder for TheHive written in GoLang. With version 2.0, it is more powerful than ever! Functionalities Can be used as Webhook OR Stream listener Webhook listener opens a restful API endpoint for Shodan to send alerts. This means you need to make this endpoint available to...

DOCxNGINxFX

WORDLISTxGENERATORxFX Version 1.0 Version 2.0 WORDLISTxGENERATORxFX renamed to DOCxNGINxFX Version 3.0 DOCxNGINxFX I wrote this to give somethink back to the great and powerful open source community all out there that shares their knowledge or frameworks and from whom I have learned so much. The...

StegoScan

StegoScan Overview StegoScan.py is a powerful, next-generation tool for automated steganography detection in websites, web servers, and local directories, integrating AI-driven object and text recognition with deep file analysis. Unlike traditional steganography detection tools that focus on a...

PwnCtfTool

Tool for ret2win challenges. / \ / / // / / / / / // / | /| / / / / / / / / / / / / / / /| |/ |/ / / / / // // / / / / // / // / / // |/|// ///// // /// By: DiegoAltF4 and Dbd4 Introduction It can be used both locally and remotely indicating IP and port. It automatically finds the offset to...

decker

ديكر - إطار تنسيق اختبار الاختراق الغرض ديكر هو إطار تنسيق لاختبار الاختراق. يعتمد على لغة تكوين هاشيكورب 2 نفس لغة التكوين مثل تيرافورم للسماح بـاختبار الاختراق التصريحي كرمز، بحيث يمكن حفظ اختباراتك وتتبع نسخها وإعادة استخدامها والتعاون فيها مع فريقك أو المجتمع. مثال على ملف تكوين ديكر: // يتم...

msynth

msynth Auteur : Tim Blazytko et Moritz Schloegel msynth est un framework de désobfuscation de code permettant de simplifier les expressions d'arithmétique booléenne mixte MBA. Étant donné un oracle de simplification pré-calculé, il parcourt une expression complexe représentée sous forme d'arbre...

SharpCookieMonster

SharpCookieMonster .&@. .@@. &&&@ @/ @ @ & ,& &@@@@/ &/ @ &@ @@@@@@@@ @. @. @@/ @ @@@@@@@/ @, @@ @ @@@@@@@@ && %%/%%&//... /% @@@@@@@@ @ ,@///////@. .@..@, %@@ &/////@@. .&@/////////////////&@. &%///@. &/////////////////////////%@ @/////////////////////////////////////////////////@//&@...

PipeViewer

A GUI tool for viewing Windows Named Pipes and searching for insecure permissions. The tool was published as part of a research about Docker named pipes: "Breaking Docker Named Pipes SYSTEMatically: Docker Desktop Privilege Escalation – Part 1" "Breaking Docker Named Pipes SYSTEMatically: Docker...