Priv2Admin

La idea es "traducir" los privilegios del sistema operativo Windows a una ruta que lleve a: 1. administrador, 2. amenaza de integridad y/o confidencialidad, 3. amenaza de disponibilidad, 4. solo un desastre. Los privilegios se enumeran y explican en:...

CVE-2007-1567

🐞 CVE-2007-1567: War FTP Daemon 1.65 - Stack-Based Buffer Overflow Classic stack-based buffer overflow in War FTP Daemon 1.65 demonstrating old-school remote code execution through malformed FTP commands. 📑 Table of Contents Why this repository exists Why this vulnerability is interesting Context...

pentest-a2p2v-core

README Automated Attack Path Planning and Validation A2P2V is a planning and cyber-attack tool that provides the capability for users to determine a set of ranked attack sequences given a specific attacker goal. The aim of the tool is to simplify process so that non-security experts can generate...

bettercap

Join the project community on our server!...

linux-basics-for-hackers-notes

Linux Basics for Hackers — Course A structured course built from personal study notes of the book Linux Basics for Hackers by OccupyTheWeb. Each module breaks down the core concepts, commands, and practical examples in plain English — straightforward enough for beginners, detailed enough to...

terra

Terra : Terra needs an Active Maintainer I'm searching for an active maintainer for Terra. I have some exciting ideas for new features and other things possible with Terra / OSINT. Would love to hear from interested folks. Mail me at [email protected] Terra : Recon tool on Social Media...

cypherhound

CypherHound A Python3 terminal application that contains Neo4j cyphers for BloodHound data sets with a script to automate importing them into BloodHound CE. Output Samples Terminal HTML Report HTML Report continued Why? BloodHound is a staple tool for every penetration tester. However, there are...

Shitrix-CVE-2019-19781

Shitrix-CVE-2019-19781 My working approach to exploiting Shitrix Updated 21st July, 2020 - now supports multi-worded commands and forward slashes You need curl = 7.42.0 Call it with, e.g.: ./shitrix.sh target port ls -al...

rakkess

rakkess Review Access - kubectl plugin to show an access matrix for server resources Intro Have you ever wondered what access rights you have on a provided kubernetes cluster? For single resources you can use kubectl auth can-i list deployments, but maybe you are looking for a complete overview?...

msfpc

MSFvenom Payload Creator MSFPC A quick way to generate various "basic" Meterpreter payloads via msfvenom part of the Metasploit framework. About MSFvenom Payload Creator MSFPC is a wrapper to generate multiple types of payloads, based on users choice. The idea is to be as simple as possible only...

ronin

ronin वेबसाइट स्रोत मुद्दे दस्तावेज़ीकरण डिस्कॉर्ड | मास्टोडॉन विवरण Ronin एक मुफ्त और ओपन सोर्स Ruby टूलकिट है जो सुरक्षा अनुसंधान और विकास के लिए है। Ronin में विभिन्न सुरक्षा कार्यों के लिए कई CLI कमांड और Ruby लाइब्रेरियाँ शामिल हैं, जैसे डेटा को एन्कोड/डिकोड करना, IP/होस्ट/URL को फ़िल्टर करन...

red-kube

Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...

punk.py

punk.py unix SSH post-exploitation 1337 tool how it works punk.py is a post-exploitation tool meant to help network pivoting from a compromised unix box. It collect usernames, ssh keys and known hosts from a unix system, then it tries to connect via ssh to all the combinations found. punk.py is...

CVE-2024-24576-PoC-BatBadBut

CVE-2024-24576-PoC-BatBadBut PoC لثغرة CVE-2024-24576 "BatBadBut" المعلومات بعد تشغيل السكربت، سيطلب منك إدخال وسيط argument، وسيتم تمرير هذا الوسيط إلى ملف البات. إذا أنهيت الوسيط بـ " وبعد ذلك & يمكنك تشغيل أي أمر في Windows. على سبيل المثال: root@kitploit: helloworld" & whoami ونتيجة لذلك، ستح...

magescan

Mage Scan The idea behind this is to evaluate the quality and security of a Magento site you don't have access to. The scenario when you're interviewing a potential developer or vetting a new client and want to have an idea of what you're getting into. Installation .phar Download the magescan.pha...

pict

PICT - Post-Infection Collection Toolkit This set of scripts is designed to collect a variety of data from an endpoint thought to be infected, to facilitate the incident response process. This data should not be considered to be a full forensic data collection, but does capture a lot of useful...

Analysis

Detection Engineering Notes and Analysis This repository documents hands on detection research based on lab testing, log analysis, and real SOC workflows. The focus is on how attacker techniques actually appear in logs, what detection logic works in practice, what fails, and where false positives...

metabigor

Metabigor - OSINT power without API key hassle What is Metabigor? Metabigor maps a target's infrastructure without asking you to register for a single API key. Network ranges, certificates, related domains, exposed ports, CDN vendors, and code leaks - all from free sources, all pipeable into each...

CVE-2024-34222

मानव संसाधन प्रबंधन प्रणाली 1.0 प्रस्तुतकर्ता: Kha Do भेद्यता SQL injection विवरण SQL injection भेद्यता /hrm/country.php में SourceCodester मानव संसाधन प्रबंधन प्रणाली 1.0 हमलावरों को searccountry पैरामीटर्स के माध्यम से मनमानी SQL कमांड निष्पादित करने की अनुमति देती है। प्रभावित घटक पथ URL:...

fawkes

Fawkes Mythic C2 Agent Fawkes is an entirely vibe-coded Mythic C2 agent. It started as an "I wonder" and has turned into a goal. My goal is to not write a single line of code for this agent, instead, exclusively producing it at a prompt. I originally attempted to write the agent myself, but after...