SharpBlock

SharpBlock A method of bypassing EDR's active projection DLL's by preventing entry point execution. Features Blocks EDR DLL entry point execution, which prevents EDR hooks from being placed. Patchless AMSI bypass that is undetectable from scanners looking for Amsi.dll code patches at runtime. Hos...

flowinspect

flowinspect 网络流量检查工具 描述： 它使用 libnids（通过 Jon Oberheide 的 Python 绑定：pynids）对 IP 进行去碎片化并重组 TCP 数据包（UDP 按数据包逐一检查），以生成网络流。然后使用以下四种检查模式之一对这些流进行检查： 正则表达式（re2 - Python 绑定：pyre2） 模糊字符串匹配（fuzzywuzzy） libemu（Python 绑定：pylibemu） yara（Python 绑定：yara-python） 正则匹配使用 re2 库及其 Python 绑定 pyre2 执行，支持...

appshark

Document Index 1.overview 2.startup 3.how to write rules 4.how to find compliance problems use appshark 5.a path traversal game 6.argument 7.engine config 8.result 9.faq AppShark Appshark is a static taint analysis platform to scan vulnerabilities in an Android app. Prerequisites Appshark require...

appshark

Document Index 1.overview 2.startup 3.how to write rules 4.how to find compliance problems use appshark 5.a path traversal game 6.argument 7.engine config 8.result 9.faq AppShark Appshark is a static taint analysis platform to scan vulnerabilities in an Android app. Prerequisites Appshark require...

I-See-You

I-See-You ISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location coordinates an attacker can perform preliminary reconnaissance which will help them in performing further targeted attacks. Note: This to...

sagex3-cve-2020-7388-poc

sagex3-cve-2020-7388-poc Proof of concept exploit code for CVE-2020-7388, an unauthenticated RCE as SYSTEM on Sage X3's AdxDSrv Service Overview Sage X3 exposes an administrative service on port TCP/1818 default, but changeable under the process "AdxDSrv.exe," part of the AdxAdmin component. This...

goodoldsearch-oss

Good Old Search Build precise search queries with exact phrases, site filters, exclusions, date ranges, filetypes, and one-click links across search engines and vertical search targets. This is not a search engine, metasearch aggregator, scraper, or API proxy. It is a local static query builder...

crestron_getsudopwd

crestrongetsudopwd Based on Ricky Lawshae discovery on Crestron TSW-X60 and MC3 devices, this tool aims to exploit the CVE-2018-13341. Using the MAC address of the targeted device, you can recover the password of the "crengsuperuser" hidden account which has elevated privileges and allow you to r...

claude-code-backdoor

Claude Code Backdoor PoC A Proof of Concept demonstrating how Claude Code Anthropic's CLI AI agent hooks can be leveraged for Initial Access and Persistence. ⚠️ Disclaimer This project is for educational and ethical security testing purposes only. Unauthorized access to computer systems is illegal...

IntRec-Pack

IntRec-Pack Intelligence and Reconnaissance Package/Bundle installer. IntRec-Pack is a Bash script designed to download, install and deploy several quality OSINT, Recon and Threat Intelligence tools. Due to the fact it manages the installation of the various dependencies related to these programs...

xwf-yara-scanner

Overview This X-Ways Forensics X-Tension allows the use of YARA within X-Ways natively. It uses both the X-Ways Forensics API and the YARA API to achieve this. Note: This is an open source project, not a formal CrowdStrike product. There are many benefits to running YARA within X-Ways, versus...

worldmonitor

World Monitor 简体中文 | 日本語 Real-time global intelligence dashboard — AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational awareness interface. !Commodity...

wsb-detect

⏳ wsb-detect wsb-detect enables you to detect if you are running in Windows Sandbox "WSB". The sandbox is used by Windows Defender for dynamic analysis, and commonly manually by security analysts and alike. At the tail end of 2019, Microsoft introduced a new feature named Windows Sandbox WSB for...

GhostKatz

GhostKatz Extract LSASS credentials directly from physical memory by abusing signed vulnerable drivers with physical memory read primitives via MmMapIoSpace, bypassing traditional user-mode detection capabilities. This tool was developed in collaboration between Julian Peña and Eric Esquivel. Thi...

Crucix

Crucix 属于你自己的情报终端。27 个数据源。一条命令。零云端。 访问在线站点：crucix.live -orange 进入信号网络 更多截图 启动序列| 世界地图 ---|--- | 在线网站： https://www.crucix.live/ 先体验公共演示，然后克隆仓库即可在本地运行 Crucix。 Crucix 从 27 个开源情报数据源并行拉取卫星火情探测、航班追踪、辐射监测、卫星星座追踪、经济指标、实时市场价格、冲突数据、制裁清单和社交情绪——每 15 分钟更...

shodscript

ShodScript Automate exploit and PoC execution against Shodan search results. Query Shodan, filter targets, and run your scripts against every match - concurrently, with structured output and export. Why You have a PoC script that takes an IP and port. You want to run it against every host matchin...

SparkAltBatteryBoard

SparkAltBatteryBoard A custom research-oriented battery interface and telemetry board for the DJI Spark platform, built around a standard 3S LiPo battery pack instead of the discontinued, hard-to-find OEM Smart Battery. This project documents a reverse-engineered I2C/SMBus smart-battery...

CVE-2023-27524-Apache-Superset-Auth-Bypass-and-RCE

CVE-2023-27524: Apache Superset 認証バイパスとRCE Apache Supersetは、データの可視化と探索に広く使われているオープンソースツールですが、認証バイパスやリモートコード実行（RCE）につながる可能性のあるセキュリティ上の脆弱性が確認されています。これらの脆弱性により、悪意のある攻撃者が標的のサーバー上で管理者権限を取得し、ユーザー認証情報を収集し、データを侵害する可能性があります。 問題となっている具体的なセキュリティ問題は、CVE-2023-27524として参照される安全でないデフォルト設定の脆弱性です。...

ngrev

ngrev Graphical tool for reverse engineering of Angular projects. It allows you to navigate in the structure of your application and observe the relationship between the different modules, providers, and directives. The tool performs static code analysis which means that you don't have to run you...

ngrev

ngrev Angularプロジェクトをリバースエンジニアリングするためのグラフィカルツールです。アプリケーションの構造内をナビゲートし、異なるモジュール、プロバイダー、ディレクティブ間の関係を観察できます。このツールは静的コード解析 を実行するため、使用するためにアプリケーションを実行する必要はありません 。 ngrevはAngularチームによってメンテナンスされているわけではありません。オープンソースコミュニティによって開発されたサイドプロジェクトです。 使用方法 macOS 1. リリースページに移動します。 2. 最新の.dmgファイルをダウンロードします。 3...