keeweb

Password Manager KeeWeb Password Manager🔑 KeeWeb is a browser and desktop password manager which is capable of opening up existing KeePass database kdbx files, or creating new vaults to store your important credentials in...

BruteShark

About What it can do Download Examples Usage BruteSharkDesktop BruteSharkCli Modules Architecture Contributing About BruteShark is a Network Forensic Analysis Tool NFAT that performs deep processing and inspection of network traffic mainly PCAP files, but it also capable of directly live capturin...

arp-validator

arp-validator Security Tool to detect arp poisoning attacks Features Uses a faster approach in detection of arp poisoning attacks compared to passive approaches Detects not only presence of ARP Poisoning but also valid IP-MAC mapping when LAN hosts are using non-customized network stack Stores...

Remote-Desktop-Caching-

Remote-Desktop-Caching- This tool allows one to recover old RDP mstsc session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG...

redsnarf

root@kitploit: . \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf is a pen-testing / red-teaming tool by Ed Williams for retrieving hashes and credentials from Windows workstations, servers and...

pycdc-studio

pycdc-studio English README 一个基于 Qt Widgets 的桌面图形界面，用来配合 pycdc / pycdas 浏览 Python 字节码、查看原生反编译结果、导入 Pyarmor oneshot 输出，并在遇到不支持的 code object 时使用 AI 做兜底重建。 当前支持 Windows 和 Linux 桌面环境。 界面预览 主工作区 设置页 AI 重建 功能 直接打开 .pyc / .pyo 支持把文件夹拖进窗口，递归扫描其中的字节码文件 支持通过 oneshot 流程导入 Pyarmor 混淆项目 多文件会一起显示在左侧树里...

flatpak

Flatpak es un sistema para construir, distribuir y ejecutar aplicaciones de escritorio en espacios aislados sandbox en Linux. Consulta https://flatpak.org/ para obtener más información. Flatpak está disponible en los repositorios de paquetes de la mayoría de las distribuciones de Linux y se puede...

OnionHop

OnionHop V3 OnionHop V3 是一款现代化的跨平台 桌面应用（支持 Windows、macOS 和 Linux），它能够通过 Tor 路由你的网络流量。它可以作为本地 SOCKS 代理或系统级隧道运行 Tor，通过 Smart Connect 自动为你的网络选择可行的连接策略，扫描并应用适用于受限网络的各类传输协议的桥梁，甚至允许你志愿成为 Snowflake 代理。 免责声明 OnionHop 按“原样”提供。在某些地区，使用 Tor 可能是违法或受限制的。你需自行遵守当地法律法规。 V3 的新特性（自 v2.7 以来） V3 是在全新跨平台 UI...

Wincrash

Wincrash root@kitploit: I'm not responsible for what you use this to accomplish and should only be used for education purposes. CVE-2019-0708 - when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code...

TCASVS

OWASP 富客户端应用安全验证标准 TCASVS 简介 OWASP 富客户端应用安全验证标准（TCASVS）提供了全面的安全要求，用于设计、构建和测试富客户端应用程序——包括桌面软件、原生应用程序，以及在浏览器沙箱之外本地执行的其他程序。 TCASVS 填补了面向 Web 应用的 OWASP 应用安全验证标准 ASVS 与 移动应用安全验证标准 MASVS 之间的空白。虽然 MASVS 也可用于富客户端测试，但并非理想之选。TCASVS 为富客户端场景专门打造了一套标准。 最新稳定版本 — 5.0.0 该标准的源文件位于 文件夹中。包含 6 个章节，涵盖 130...

Oracle Secure Global Desktop Administration Console 4.4 - Cross-Site Scripting

Oracle Secure Global Desktop Administration Console 4.4 contains a reflected cross-site scripting vulnerability in helpwindow.jsp via all parameters, as demonstrated by the sgdadmin/faces/comsunwebui/help/helpwindow.jsp windowTitle parameter. id: CVE-2018-19439 info: name: Oracle Secure Global...

BetterRAT

Información BetterRAT es un RAT de próxima generación basado en InfinityRAT DiamondRAT Todas las responsabilidades son bajo su propio riesgo. Por favor, úselo solo con fines de investigación. Características Escritorio remoto Controlador de conexión remota Keylogger remoto Administrador de archiv...

parallels-file-move-privesc

parallels-file-move-privesc 此仓库包含一个针对CVE-2023-50226 / ZDI-CAN-21227的利用程序，可用于在18.3.2之前的Parallels Desktop版本上将权限提升至root。...

BlueKeep

用于 CVE-2019-0708 BlueKeep 漏洞的 rdpscan 这是一个用于检测 Microsoft 远程桌面中 CVE-2019-0708 漏洞的快速但粗糙的扫描器。 目前，公共互联网上约有 70 万台机器受此漏洞影响， 而约有 200 万台机器暴露了远程桌面，但已修补/可安全抵御利用。许多人预计在 未来几个月内将出现类似 WannaCry 和 notPetya 的毁灭性互联网蠕虫。 因此，请扫描你的网络并修补你的系统。此工具可让你轻松扫描网络 以发现易受攻击的机器。 要使用此工具，你可以下载一个“二进制”文件从命令行运行，也可以下载 源代码并自行编译。对于...

AppArmor.d

apparmor.d Full set of AppArmor profiles !WARNING This project is still in its early development. Help is very welcome; see the documentation website including its development section. Description AppArmor.d is a set of over 1500 AppArmor profiles whose aim is to confine most Linux based...

retoolkit

Reverse Engineer's Toolkit What? This is a collection of tools you may like if you are interested in reverse engineering and/or malware analysis on x86 and x64 Windows systems. After installing this program, you'll have two ways to access the tools: Double-click the retoolkit icon in the Desktop...

nebula

Nebula AI Powered Pentesting The Zero Layer workbench Acknowledgement First, I would like to thank Almighty God, who is the source of all knowledge. Without Him, this would not be possible. Nebula brings the working parts of a security engagement into one desktop surface: terminal, code, browser,...

CVE-2024-23746

CVE-2024-23746 macOS 上的 Miro Desktop 0.8.18 存在 Electron 代码注入漏洞。 PoC 签名和版本： 用于探索漏洞的工具： https://github.com/r3ggi/electroniz3r 验证是否存在漏洞： 注入盲壳： 参考 https://book.hacktricks.xyz/macos-hardening/macos-security-and-privilege-escalation/macos-proces-abuse/macos-dirty-nib https://www.notion.so/web-clipper...

PipeViewer

A GUI tool for viewing Windows Named Pipes and searching for insecure permissions. The tool was published as part of a research about Docker named pipes: "Breaking Docker Named Pipes SYSTEMatically: Docker Desktop Privilege Escalation – Part 1" "Breaking Docker Named Pipes SYSTEMatically: Docker...

rustdesk

Build • Docker • Structure • Snapshot Українська | česky | 中文 | Magyar | Español | فارسی | Français | Deutsch | Polski | Indonesian | Suomi | മലയാളം | 日本語 | Nederlands | Italiano | Русский | Português Brasil | Esperanto | 한국어 | العربي | Tiếng Việt | Dansk | Ελληνικά | Türkçe | Norsk | Română We...