maigret

Maigret English · 简体中文 Maigret collects a dossier on a person by username only , checking for accounts on a huge number of sites and gathering all the available information from web pages. No API keys required. AI profiling demo. Sponsors IPcook provides reliable residential proxies for online...

pybeacon

PyBeacon PyBeacon is a collection of scripts for dealing with Cobalt Strike's encrypted traffic. It can encrypt/decrypt beacon metadata, as well as parse symmetric encrypted taskings Scripts included There is a small library which includes encryption/decoding methods, however some example scripts...

awesome-web-security

Awesome Web Security - JP 🐶 Curated list of Web Security materials and resources. Needless to say, most websites suffer from various types of bugs which may eventually lead to vulnerabilities. Why would this happen so often? There can be many factors involved including misconfiguration, shortage ...

OffensiveDLR

OffensiveDLR Toolbox mit Forschungsnotizen und PoC-Code zur Waffnisierung der .NET-DLR Inhalt Skript| Beschreibung ---|--- Kukulkan| Eine abgespeckte Version von SILENTTRINITY, eine C-DLL und -EXE, die eine IPY-Engine einbetten. Die Kommunikation ist verschlüsselt und kann mit CobaltStrike...

raven

Raven - Mappa Avanzata delle Minacce Cyber Semplificata, personalizzabile e reattiva. Utilizza D3.js con TOPO JSON, ha 247 paesi, 100.000 città, e può essere utilizzata in ambiente isolato senza ricerche esterne!. Struttura Offline - Demo Firefox, Chrome o Safari Live - Regressione 500 attacchi i...

raven

Raven - Advanced Cyber Threat Map Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, 100,000 cities, and can be used in an isolated environment without external lookups!. Structure Offline - Demo Firefox, Chrome or Safari Live - Regression 500 attacks at onc...

FakeDataGen

FakeDataGen è un Generatore di Dati Falsi Completamente Validati. Questo strumento ti aiuta a creare account falsi in formato spagnolo con dati completamente validi. All'interno di queste informazioni, puoi trovare i nomi più comuni, email, dettagli bancari e altre informazioni utili. Requisiti...

go_parser

Yet Another Golang binary parser for IDAPro English |中文 NOTE : Now the latest master branch is the Python3 version. The old master branch has been changed to branch py2 , and temporarily not maintained. Instructions for Python3 branch This version is developed and tested on macOS/Windows, IDA7.4+...

fav-up

Fav-up Lookups for real IP starting from the favicon icon and using Shodan. Installation pip3 install -r requirements.txt Shodan API key not the free one Usage CLI First define how you pass the API key: -k or --key to pass the key to the stdin -kf or --key-file to pass the filename which get the...

femida

Femida-xss WIP An automated blind-xss search plugin for Burp Suite. Installation Git clone https://github.com/wish-i-was/femida.git Burp - Extender - Add - find and select blind-xss.py How to use Settings First of all you need to setup your callback URL in field called "Your url" and press Enter ...

uncaptcha

uncaptcha Defeating Google's audio reCaptcha system with 85% accuracy. Disclaimer unCaptcha is intended to be a proof of concept. As of the time of our paper, we found it to successfully solve reCaptcha's audio challenges with 85% success. Since that time, reCaptcha appears to include some...

awesome-soc-analyst

awesome-soc-analyst Wir haben gerade nützliche Ressourcen für SOC-Analysten und SOC-Analysten-Kandidaten gesammelt. Dieses Repository wird von LetsDefend gepflegt. Füge gerne neue Ressourcen hinzu. Inhaltsverzeichnis Bücher Malware-Analyse Übungslabore Phishing-Analyse Werkzeuge für Untersuchunge...

CVE-2020-14882

CVE-2020-14882: Deployare webshell in memoria di Behinder Come noto, CVE-2020-14882 è una vulnerabilità di autorizzazione non autenticata che consente a un attaccante di eseguire codice arbitrario su un server WebLogic vulnerabile. I PoC pubblici online sfruttano caratteri illegali per bypassare...

katana

Ein neuartiges Framework für Crawling und Spidering Funktionen • Installation • Nutzung • Geltungsbereich • Konfiguration • Filter • Discord beitreten Funktionen Schnelles und vollständig konfigurierbares Web-Crawling Standard - und Headless -Modus JavaScript -Analyse / -Crawling Anpassbares...

OSINT-Framework

OSINT Framework http://osintframework.com Notes OSINT framework focused on gathering information from free tools or resources. The intention is to help people find free OSINT resources. Some of the sites included might require registration or offer more data for $$$, but you should be able to get...

maldev-for-dummies

Malware Development for Dummies In the age of EDR, red team operators cannot get away with using pre-compiled payloads anymore. As such, malware development is becoming a vital skill for any operator. Getting started with maldev may seem daunting, but is actually very easy. This workshop will sho...

telegram-nearby-map

Telegram Nearby Map Telegram Nearby Map uses OpenStreetMap and the official Telegram library to find the position of nearby users. Please note: Telegram's API was updated a while ago to make nearby user distances less precise, preventing exact location calculations. Therefore, Telegram Nearby Map...

herpaderping

Process Herpaderping Process Herpaderping is a method of obscuring the intentions of a process by modifying the content on disk after the image has been mapped. This results in curious behavior by security products and the OS itself. Summary Generally, a security product takes action on process...

pig

Pig Pig which can be understood as Packet intruder generator is a Linux packet crafting tool. You can use Pig to test your IDS/IPS among other stuff. Pig brings a bunch of well-known attack signatures ready to be used and you can expand this collection with more specific things according to your...

CVE-2024-2876

CVE-2024-2876 - SQL-Injection-Schwachstelle in Email Subscribers von Icegram Express Übersicht CVE-2024-2876 ist eine kritische Sicherheitsschwachstelle, die im Plugin „Email Subscribers by Icegram Express" für WordPress gefunden wurde. Diese Schwachstelle betrifft Versionen bis einschließlich...