CVE-2020-28243

CVE-2020-28243 A command injection vulnerability in SaltStack's Salt allows for privilege escalation via specially crafted process names on a minion when the master calls restartcheck. For a full writeup please see this blog post Affected Versions: All versions between 2016.3.0rc2 and 3002.2 Link...

BlackHole

BlackHole C RAT Remote Adminitration Tool Educational purposes only Technologies protobuf-net : message serialization/deserialization in slavemaster protocol NetMQ : network library used for the slavemaster system clientserver Lz4.Net : compression library ILMerge : packaging assemblies into a...

rebindMultiA

rebindMultiA rebindMultiA is a tool to perform a Multiple A Record rebind attack. rebindmultia.com is a domain that I've set up to assist with these attacks. It makes every IP its own authoritative nameserver for the domain IP.ns.rebindmultia.com. For example, 13.33.33.37.ns.rebindmultia.com's...

njsscan

njsscan njsscan は、libsast のシンプルなパターンマッチャーと、構文を認識するセマンティックコードパターン検索ツール semgrep を使用して、Node.js アプリケーション内の安全でないコードパターンを検出できる静的アプリケーションテスト SAST ツールです。 インドで を込めて作成 njsscan を支援する Paypal で寄付: プロジェクトをスポンサー: eラーニングコース & 認定資格 OpSecX Node.js Security: Pentesting and Exploitation - NJS インストール pip install...

Pyramid

Pyramid What is it Pyramid is composed of: 1. a Python HTTP/S server that can deliver encrypted files chacha, xor 2. Python modules that can load in-memory dependencies of offensive tooling such as Bloodhound-py, secretsdump, LaZagne, Pythonnet, DonPAPI, pythonmemorymodule, paramiko, pproxy. 3...

smtpshell

smtpshell A simple Reverse Shell that can communicate through Gmail SMTP or any other SMTP to evade network restrictions Note: This reverse shell communicates Via Gmail SMTP or u can use any other smtps as well but Gmail SMTP is valid because most of the companies block unknown traffic so gmail...

CVE-2022-22057_SM-F926U

Fork My adaptation for the SM-F926U from the original exploit here HUGE thanks to m-y-mo for discovering the exploit and his extreme patience with all my questions to port this to SM-F926U and make it useable I've added a startup daemon libtimeline.so based on code from Shizuku Added a dirty tric...

CVE-2019-10869

CVE-2019-10869 Wordpress Ninja Forms File Uploads Extension -----------------------------16345274557837-- Response: HTTP/1.1 200 OK Server: nginx/1.14.0 "data": "files": "name":"test.png.doc", "type":"application/msword", "tmpname":"nftmp-14FpD-test.png.doc", "erro...

CVE-2021-36396-Moodle-Time-Based-SQLi-Exploit

CVE-2021-36396 Exploit Description This repository holds a Python-based exploit targeting CVE-2021-36393, a severe vulnerability found within Moodle's recent courses feature. The flaw resides in the 'sort' parameter, enabling SQL injection attacks that can lead to unauthorized database access...

packetsifterTool

PacketSifter What is PacketSifter? PacketSifter is a tool to perform batch processing of PCAP data to uncover potential IOCs. Simply initializePacketSifter with your desired integrations VirusTotal, AbuseIPDB and pass PacketSifter a pcap and the desired switches and PacketSifter will sift through...

pyxamstore

Xamarin AssemblyStore Explorer pyxamstore This is an alpha release of an assemblies.blob AssemblyStore parser written in Python. The tool is capable of unpack and repackaging assemblies.blob and assemblies.manifest Xamarin files from an APK. Installing Run the installer script: python setup.py...

PyStat

PyStat - Advanced Netstat For Windows Compatible with Python Version 2.7 Features Know remote address of process Know remote ports of process Know which user using process along with title & PID Changelogs: Auto Install python modules support added in install.py Installation Guide: Download the...

powerob

Powerob An on-the-fly Powershell script obfuscator meant for red team engagements. Built out of necessity. This only obfuscates functions and removes found in PowerShell scripts. Roadmap includes bfuscating variables. Pull requests and collaborative welcomed. About This was built out of the need ...

fireprox

FireProx 概要 利点 免責事項 メンテナー クレジット 基本的な使い方 インストール スクリーンショット 貢献 概要 Web呼び出しの送信元IPアドレスを隠したり継続的にローテーションすることは、難しくてコストがかかる場合があります。これまでにもいくつかのツールが存在しましたが、IPアドレスの数が限られていたり、高価だったり、多数のVPSをデプロイする必要がありました。FireProxはAWS API...

GoTEE-example

Introduction The GoTEE framework implements concurrent instantiation of TamaGo based unikernels in privileged and unprivileged modes, interacting with each other through monitor mode and custom system calls. With these capabilities GoTEE implements a TamaGo based Trusted Execution Environments TE...

cve-2020-5902-ioc-bigip-checker

CVE-2020-5902 IoC Detection Tool This script is intended to be executed locally on an F5 BIG-IP in Advanced Shell bash by a user with root privileges; it is not intended to be run in any other setting. Note: Appliance Mode does not allow access to Advanced Shell, and therefore this tool cannot be...

roca

ROCA detection tool This tool is related to ACM CCS 2017 conference paper 124 Return of the Coppersmith’s Attack: Practical Factorization of Widely Used RSA Moduli. It enables you to test public RSA keys for a presence of the described vulnerability. Update 4.11.2017 : Python 2.7, 3.4+ supported...

binwalk

Binwalk Binwalk is a fast, easy to use tool for analyzing, reverse engineering, and extracting firmware images. EOL notice This fork was born to fix some outsanding issues with binwalk v2 and generally to keep it in good shape. It served his purpose helping users and distro packagers alike...

ngrev

ngrev Graphical tool for reverse engineering of Angular projects. It allows you to navigate in the structure of your application and observe the relationship between the different modules, providers, and directives. The tool performs static code analysis which means that you don't have to run you...

ngrev

ngrev Angularプロジェクトをリバースエンジニアリングするためのグラフィカルツールです。アプリケーションの構造内をナビゲートし、異なるモジュール、プロバイダー、ディレクティブ間の関係を観察できます。このツールは静的コード解析 を実行するため、使用するためにアプリケーションを実行する必要はありません 。 ngrevはAngularチームによってメンテナンスされているわけではありません。オープンソースコミュニティによって開発されたサイドプロジェクトです。 使用方法 macOS 1. リリースページに移動します。 2. 最新の.dmgファイルをダウンロードします。 3...