4598 matches found
Scanners-Box
English | ็ฎไฝไธญๆ | Espaรฑol Introduction Scanners Box is a curated arsenal of 9,000+ โญ open-source cybersecurity treasures โ with a special focus on AI-driven automated security agents and Red Team / Blue Team tooling. All tools feature source code available , covering 10+ categories from subdomain...
REW-sploit
REW-sploit Need help in analyzing Windows shellcode or attack coming from Metasploit Framework or Cobalt Strike or may be also other malicious or obfuscated code? Do you need to automate tasks with simple scripting? Do you want help to decrypt MSF generated traffic by extracting keys from payload...
PoC-public
PoC-public ๆญคไปๅบๆถ้ๆไปฌๅจๅๅฎๅ จไผ่ฎฎไธๅๅธ็ PoC ไปฃ็ ใ Black Hat EU 2020 CODE BLUE 2021 Black Hat Asia 2023 CODE BLUE 2023...
ioctlance
IOCTLance ๆ่ฟฐ ่ฏฅ้กน็ฎๅจ CODE BLUE 2023 ไธๅฑ็คบ๏ผ่ฎบๆ้ขไธบ ไฝฟ็จ็ฌฆๅทๆง่กๅๆฑก็นๅๆๅขๅผบ WDM ้ฉฑๅจ็จๅบๆผๆดๆๆ๏ผๅฎๅผๅ ฅไบ IOCTLance๏ผไธ็งๅขๅผบๅจ Windows ้ฉฑๅจ็จๅบๆจกๅ WDM ้ฉฑๅจ็จๅบไธญๆฃๆตๅค็งๆผๆด็ฑปๅ่ฝๅ็ๅทฅๅ ทใๅจ้ๅฏน 104 ไธชๅทฒ็ฅๅญๅจๆผๆด็ WDM ้ฉฑๅจ็จๅบๅ 328 ไธชๆช็ฅ้ฉฑๅจ็จๅบ่ฟ่ก็ๅ จ้ข่ฏไผฐไธญ๏ผIOCTLance ๆๅๅฐๅจ 26 ไธชไธๅ็้ฉฑๅจ็จๅบไธญๅ็ฐไบ 117 ไธชๅ ๅๆช็ฅ็ๆผๆดใๆ็ป๏ผๆฅๅไบ 41 ไธช CVE๏ผๅ ๆฌ 25 ไธชๆ็ปๆๅกๆกไพใ5 ไธช่ฎฟ้ฎๆงๅถไธ่ถณๆกไพๅ 11 ไธชๆ้ๆๅๆกไพใ ็นๆง ็ฎๆ ๆผๆด็ฑปๅ ๆ ๅฐ็ฉ็ๅ ๅญ ๅฏๆง่ฟ็จๅฅๆ...
blue-pigeon
Blue Pigeon: Bluetooth-based Data Exfiltration and Proxy Tool for Red Teamers 1. The Motivation | Birth of the Bird โ How does Blue Pigeon work? โ The Pigeon's Key Requirements 2. The Components | Dissecting the Pidgey apart โ 1. Blue Pigeon - The Mobile Applicaton โ 2. Blue Beak - Custom...
cybersecurity-interview-questions
Cybersecurity Interview Questions A Free, OpenโSource Collection for Red Team, Blue Team, Web Security, Incident Response & More Overview...
powerglot
Powerglot Powerglot ไฝฟ็จๅค่ฏญ่จๆททๅๆๆฏๅฏนๅค็ง่ๆฌ่ฟ่ก็ผ็ ๏ผไพๅฆๆปๅปๆง็ PowerShell ่ๆฌใๆ ้ๅ ่ฝฝๅจๅณๅฏ่ฟ่ก่ฝฝ่ทใ ๅจ็บข้ๆผ็ปๆๆปๅปไปปๅกไธญ๏ผ้ๅธธไฝฟ็จ้ๅๆฏๆฅๆฉ็่ฝฝ่ท๏ผๅฐคๅ ถๆฏไธบไบ็ป่ฟ็ฝ็ปๅฑ้ข็้ฒๆค๏ผ่ๆๅธธ่ง็่ฝฝ่ท่ๆฌๆฏ็จ PowerShell ็ผๅ็ใๆ่ฟ็ๆถๆ่ฝฏไปถๅ APT ็ป็ปๅฉ็จไบๅ ถไธญไธไบ่ฝๅ๏ผAPT32ใAPT37ใUrsnifใPowloadใLightNeuron/TurlaใPlatinum APTใWaterbug/TurlaใLokibotใThe Dukes๏ผGhost ่กๅจ๏ผใTitanium ็ญใ Powerglot...
robusto
RobuSTO ๐ฅ Robust-Subdomain-Takeover ๐ฅ Get a list of domains and search for subdomain takeovers. How is it different from other tools? This tools was build around the idea of automating the process, and allow blue-teams to use it to scan their own assets. For example, scan all my organization's...
RTA
Red Team Automation RTA RTA provides a framework of scripts designed to allow blue teams to test their detection capabilities against malicious tradecraft, modeled after MITRE ATT&CK. RTA is composed of python scripts that generate evidence of over 50 different ATT&CK tactics, as well as a compil...
CVE-2022-21907
CVE-2022-21907 Description 1. This repository detects a system vulnerable to CVE-2022-21907 CVSS:3.1 9.8 and protects against this vulnerability if desired. I offer 2 powershell codes in 1 line. 2. I propose pure python, powershell, ruby scripts and metasploit, nmap modules to attack a vulnerable...
BlueHound
BlueHound is an open-source tool that helps blue teams pinpoint the security issues that actually matter. By combining information about user permissions, network access and unpatched vulnerabilities, BlueHound reveals the paths attackers would take if they were inside your network It is a fork o...
CVE-2019-0708-Batch-Blue-Screen
CVE-2019-0708-Batch-Blue-Screen Modified version of a blue screen script by an expert, changed to batch blue screen for a network segment. Usage: root@kitploit: python3 poc.py 192.168.20 64 Batch attacks hosts 1-255 in the 192.168.20 network segment to cause blue screens. Modify accordingly based...
CVE-2024-6768
CVE-2024-6768: Improper validation of specified quantity in input produces an unrecoverable state in CLFS.sys causing a BSoD. Introduction: CVE-2024-6768 is a vulnerability in the Common Log File System CLFS.sys driver of Windows, caused by improper validation of specified quantities in input dat...
scour
Scour - AWS Detection Framework This tool is used to emulate attack patterns inside of the AWS Controlplane. Each attack is tagged with a specific UA for the blue team to signal off of. Status This is still an active work in progress. Lots of Bugs Not ready for production Where to file issues :...
redteam-plan
๐ฅ ๐ Planning a Red Team exercise This document helps inform red team planning by contrasting against the very specific red team style described in Red Teams. This method expresses several biases to optimize for blue team value and enthusiasm. It specifically avoids attempts to motivate by red tea...
CVE-2019-0708
CVE-2019-0708 Blue Screen PoC Windows 7 64-bit has been testedใ Command: python crashpoc.py ip 64 https://github.com/n1xbyte/CVE-2019-0708/ Leaving for a wedding tomorrow, if I can't find anything then someone else take the reins Going to drop the crash PoC here Friday if there isnt one public...
reportly
Reportly ๆฏไธๆฌพ EntraID ็จๆทๆดปๅจๆฅๅๅทฅๅ ทใ ๅ ณไบๆฌๅทฅๅ ท ๆฌๅทฅๅ ทๆจๅจๅธฎๅฉ่้ๅจไบๅฎๅ จไบไปถ่ฐๆฅไธญๅฟซ้่ทๅไฟกๆฏใ ่ฟ่กๆถ๏ผ็ ็ฉถ่ ่พๅ ฅๅฏ็็จๆทๅๆถ้ด่ๅด๏ผๅณๅฏ็ๆไธไปฝ่ฏฆ็ปๆฅๅ๏ผๅ ๅฎนๅ ๆฌ๏ผ 1. ็จๆทไฟกๆฏ 2. ็จๆทๆง่ก็ๆไฝ 3. ้ๅฏน็จๆทๆง่ก็ๆไฝ 4. ็จๆท็ปๅฝๅๅคฑ่ดฅๆฅๅฟ ไฝฟ็จๆนๆณ ่ฟ่กๅทฅๅ ทๆถ๏ผไผๆพ็คบ่บซไปฝ้ช่ฏ้พๆฅๅ่ฎพๅคไปฃ็ ๏ผ่ฏท่ฎฟ้ฎ้พๆฅๅนถ่พๅ ฅไปฃ็ ๅฎๆ้ช่ฏใ ่พๅ ฅๅฏ็็จๆท็็จๆทไธปไฝๅ็งฐ๏ผUser Principal Name๏ผใ ๆไปฅไธๆ ผๅผ่พๅ ฅๅผๅงๅ็ปๆๆถ้ด๏ผ2022-11-16 ๅปบ่ฎฎๆถ้ด่ทจๅบฆไธ่ถ ่ฟไธๅจใ ๆฅๅ็ๆๅฎๆฏๅ๏ผๅทฅๅ ทไผ่พๅบโYour report is...
CVE-2016-0051
Proof-of-concept BSoD Blue Screen of Death and Elevation of Privilege to SYSTEM code for my CVE-2016-0051 MS-016. vulnerabilty poc auhor: koczkatamas https://twitter.com/koczkatamas Original code: https://github.com/koczkatamas/CVE-2016-0051 Thanks to koczkatamas this PoC will run from CMD and th...
Invoke-BSOD
Invoke-BSOD For when you want a computer to be done - without admin! BSOD method from here: https://github.com/Leurak/MEMZ/blob/master/WindowsTrojan/Source/Destructive/KillWindows.cL10-L18 Invoke-BSOD.ps1 A PowerShell script to induce a Blue Screen of Death BSOD without admin privileges. Also...
PENTEST-LAB
PENTEST-LAB A modern vulnerable application & cyber range for learning web, API, cloud, AI, and blue-team security through hands-on attack chains. root@kitploit: โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โ โโโโโโโ โโโโโโโโโโโโ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โ โ...