CVE-2016-3088

CVE-2016-3088 Exploit d'exécution de code à distance dans Apache ActiveMQ Description L'application web Fileserver dans Apache ActiveMQ 5.x avant 5.14.0 permet à des attaquants distants de télécharger et exécuter des fichiers arbitraires via une requête HTTP PUT suivie d'une requête HTTP MOVE...

msploitego

msploitego - The Pentesting suite for Maltego THIS IS A BETA RELEASE, please be nice and report any issues Whats New New Features Now supporting multiple workspaces for Metasploit via Postgres queries A bash script that runs tons of auxiliary modules against targets. Really 'fattens' up the...

nmap-vulners

nmap-vulners Turn an nmap service scan into a ranked list of CVEs, exploits and what is being attacked in the wild. One NSE script that takes the software nmap already identified, asks the Vulners database what is known about it, and prints the answer inside the scan report - worst first, by what...

patchy

Patchy Automated lateral movement and persistence by abusing GCP OS patch management based on my blog post. Patchy is made up of two main modes, lateral movement, and persistence. Persistence uses valid service account credentials to create a patch job or deployment. Lateral movement attempts to...

4CAN

what is this thing? The 4CAN is a Raspberry Pi HAT which provides 4 CAN interfaces. The 4CAN is 100% compattible with socketcan and can-utils, and is very easy to get up and running. A microUSB-UART serial adaptor is included to make troubleshooting the pi easier, and there are 4 LEDs on board, 2...

CVE-2021-39408

CVE-2021-39408 Online Student Rate System 애플리케이션의 여러 버전 1.0에서 반사형 XSSCross Site Scripting 취약점이 존재하며, 이로 인해 임의의 JavaScript 명령이 실행될 수 있습니다. 취약한 페이지 index.php에서 page 매개변수가 취약하여, 공격자가 스크립트 태그 내에 임의의 자바스크립트를 포함할 수 있습니다: http://localhost/index.php?page=alert'test'; 발견자: Stefan Dorresteijn, 2021년 8월...

thief_raccoon

Thief Raccoon - Login Phishing Tool Thief Raccoon is a tool designed for educational purposes to demonstrate how phishing attacks can be conducted on various operating systems. This tool is intended to raise awareness about cybersecurity threats and help users understand the importance of securit...

thief_raccoon

Thief Raccoon - Outil de Phishing de Connexion Thief Raccoon est un outil conçu à des fins éducatives pour démontrer comment les attaques de phishing peuvent être menées sur divers systèmes d'exploitation. Cet outil vise à sensibiliser aux menaces de cybersécurité et à aider les utilisateurs à...

AdvPhishing

Check For Mp4: https://www.instagram.com/tukbuck/reel/DTBBBknj-nd/ Note: If you want to activate this tool or want same project with working condition then first pay: ETHERC20 wallet address: 0xe48df3c0e1713518096c7d2d0a2dce70aa85cd33 Follow on Social Media Platforms Contribute us Want to Learn t...

IPED

IPED Digital Forensic Tool IPED is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners. History IPED - Digital Evidence Processor and Indexer translated from Portugue...

Serious-Sam---CVE-2021-36934-Mitigation-for-Datto-RMM

Aperçu Ceci est un composant Datto RMM pour atténuer CVE-2021-36934, également connu sous le nom de Serious SAM. Il suit les mesures d'atténuation décrites sur : https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36934 https://kb.cert.org/vuls/id/506989 À UTILISER À VOS PROPRES RISQUE...

https-nj.gov---CVE-2018-14042

https-nj.gov---CVE-2018-14042 Отчет об уязвимости официального сайта Нью-Джерси В Bootstrap до версии 4.1.2 возможен XSS в атрибуте данных «collapse». Атрибуты data-target, data-parent и data-container уязвимы к межсайтовому скриптингу. Test РЕКОМЕНДАЦИЯ Исправление для данной конкретной проблемы...

SecGen

Security Scenario Generator SecGen Summary SecGen creates vulnerable virtual machines, lab environments, and hacking challenges, so students can learn security penetration testing techniques. Boxes like Metasploitable2 are always the same, this project uses Vagrant, Puppet, and Ruby to create...

odin

Odin Odin is a central IoC scanner based on Loki Table of Contents General Info Requirements Fetching Deploying Loki Collecting Parsing General Info This application Loki latest version and download it on all machines using a powershell script and run it then this app receives the respose from al...

Seatbelt

Seatbelt Seatbelt is a C project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives. @andrewchiles' HostEnum.ps1 script and @tifkin's Get-HostProfile.ps1 provided inspiration for many of the artifacts to collect...

MSOLSpray

MSOLSpray A password spraying tool for Microsoft Online accounts Azure/O365. The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled. BE VERY CAREFUL NOT TO LOCKOUT...

OffensiveDLR

OffensiveDLR Набор инструментов с исследовательскими заметками и PoC-кодом для вооружения DLR в .NET Contents Script| Description ---|--- Kukulkan| Урезанная версия SILENTTRINITY, C DLL и EXE со встроенным движком IPY. Канал связи зашифрован и может использоваться с CobaltStrike...

CVE-2023-20209

Я начал изучать Cisco Expressway после того, как заметил довольно много таких устройств в интернете во время Red Team-заданий, но у меня не было времени в рабочее время, чтобы исследовать продукт дальше. Изначально я искал обход аутентификации, чтобы сцепить его с RCE, но время вышло, и я...

WPForce

WPForce - Suite d'attaque WordPress À PROPOS : WPForce est une suite d'outils d'attaque WordPress. Actuellement, elle contient 2 scripts - WPForce, qui force les connexions via l'API, et Yertle, qui téléverse des shells une fois les identifiants administrateur trouvés. Yertle contient également u...

Oralyzer

Introduction Oralyzer, a simple python script that probes for Open Redirection vulnerability in a website. It does that by fuzzing the URL that is provided in the input. Features Oralyzer can identify following types of Open Redirect Vulnerabilities: Header Based Javascript Based Meta Tag Based...