39002 matches found
Log4Shell-Scanner
Log4Shell-Scanner Python script to detect Log4Shell Vulnerability CVE-2021-44228...
Detecting-and-Analyzing-CVE-2024-24919-Exploitation
π Investigating a Zero-Day Attack Using Letβs Defend SIEM π A Walkthrough on Detecting and Analyzing CVE-2024-24919 Exploitation π― Purpose of the Investigation This project was conducted to investigate a potential exploitation attempt against a Check Point Security Gateway, specifically leveragin...
Abused-Legitimate-Services
Abused Legitimate Services Legitimate third-party Platform-as-a-Service PaaS providers are becoming increasingly leveraged by threat actors for phishing and malware deployment. PaaS providers such as cloud instances, marketing platforms, content delivery networks CDN, and dynamic DNS servers have...
cobaltstrike-sleepmask-yara
cobaltstrike-sleepmask-yara Just a git repo for the sleepmask detection rule i found in https://codex-7.gitbook.io/codexs-terminal-window/blue-team/detecting-cobalt-strike/sleep-mask-kit-iocs tl;dr The tl;dr of it is that these bytes are part of the sleep mask kit unobfuscated .text section itsel...
CVE-2020-1472-02-
ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when successfully performing the bypass, and not perform any...
git-vuln-finder
git-vuln-finder Trova potenziali vulnerabilitΓ software dai messaggi dei commit git. Il formato di output Γ¨ un JSON con il commit associato che potrebbe contenere una correzione relativa a una vulnerabilitΓ software. La ricerca si basa su un insieme di espressioni regolari esclusivamente sui...
CVE-2024-36416
CVE-2024-36416 Tool for validating CVE-2024-36416 Usage pip3 install -r requirements.txt python3 sukuna.py --help python3 sukuna.py --url http://./ --validate --payload-test Server-Side Log File Check Verify the server-side file, if the log file \service\example\proxy.log is =25MB, the server is...
AntiKernelDebug-POC
AntiKernelDebug-poc What's this? A POC about how to detect windows kernel debug by pool tag. How does this poc actually work? Query system pool tag information matches TagUlong == 'oIdK'. Tested in Win10 1809 Compile Visual Studio 2019 llvm-msvc link...
AntiDebug-AntiVM
AntiDebug/AntiVM Purpose This repository hosts the different debug/vm detection methods I have come across whilst looking through the WinAPI. This is not intended to be compiled and ran but rather to show examples of how to implement these different methods into your existing projects. Each file ...
citrixvulncheck
citrixvulncheck A script to look for CVE-2019-19781 Vulnerability within a domain and it's subdomains...
detect-log4j-exploitable
CVE-2021-44228 An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. This script will help to detect log4j exploit from the running process. It helps to find if any system is exploitable ...
CVE-2014-6271
CVE-2014-6271 Shellshock Vulnerability Scanner...
FuegoTest
FuegoTest FuegoTest is a Command Line Interface CLI tool designed to detect devices potentially vulnerable to CVE-2023-20048 in Cisco Firepower Management Center FMC. Utilizing the rich library, FuegoTest provides an enhanced user experience with progress bars and styled text for terminal output...
CVE-2009-0347
Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2009-0347 Run bellow command to check CVE-2009-0347 -h Configurations 2. We integrated with the Telegram API to receive...
Exploit-Win32.CVE-2012-0158.F.doc
Exploit-Win32.CVE-2012-0158.F.doc the name of virus is the detection of microsoft defender, is the tipic antivirus...
CVE-2023-38831-Exploit-and-Detection
CVE-2023-38831-Exploit-and-Detection This repository has both an attack detection tool and a Proof-of-Concept PoC Python script for the WinRAR CVE-2023-38831 vulnerability...
CVE-2023-23752
CVE-2023-23752 CVE-2023-23752 Joomla Unauthenticated Information Disclosure Description Supports high-concurrency detection Write url into urls.txt, only supports http://ip:port & https://ip:port format Use the -p parameter to add a proxy Just run Usage Help .\CVE-2023-23752.exe -h ββββββββββ...
wpbf
wpbf! wpbf Γ¨ uno strumento di brute force per testare da remoto la robustezza delle password, l'enumerazione degli utenti e il rilevamento dei plugin su un sito WordPress. Description ^^^^^^^^^^^ Lo script tenterΓ di accedere alla dashboard di WordPress tramite il modulo di login utilizzando una...
EmailXpose
EmailXpose Specification AI-Powered Email Clarity HTML Mirror: https://roxanneardary.com/emailxpose-specification/ Specification Overview EmailXpose is an open source, modular AI email security and intelligence system designed to analyze email content, sender identity, links, attachments, images,...
CVE-2024-0352
Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2024-0352 Run bellow command to check CVE-2024-0352 -h Configurations 2. We integrated with the Telegram API to receive...