attifyos

AttifyOS v3.0 AttifyOS is a distro intended to help you perform security assessment and penetration testing of Internet of Things IoT devices. It saves you a lot of time by providing a pre-configured environment with all the necessary tools loaded. The new version is based on Ubuntu 18.04 64-Bit ...

blackbox-fuzzing

Фаззинг IoT-устройств методом чёрного ящика на примере роутера TL-WR902AC Это HTML-версия моей курсовой работы, которую можно скачать в формате PDF здесь. Введение Фаззинг стал «одним из наиболее эффективных способов» поиска ошибок в программном обеспечении. С этого или подобных утверждений...

process-enumeration-stealth

🚴 process-enumeration-stealth ما هذا؟ هذا إثبات مفهوم PoC بسيط يسمح لك بإرجاع قائمة من معرّفات العمليات PIDs التي تستخدم حاليًا NTFS، من خلال الاستعلام عن الجهاز الأساسي \ntfs\ الكائن الأساسي لنظام ملفات ويندوز. تلغي هذه الطريقة الحاجة إلى استخدام واجهات برمجة التطبيقات النموذجية، مثل...

usbrip

usbrip inherited from "USB Ripper", not "USB R.I.P." is a simple forensics tool with command line interface that lets you keep track of USB device artifacts i.e., USB event history on Linux machines. Table of Contents: Description Quick Start Showcase System Log Structure Dependencies deb pip...

usbrip

usbrip موروث من "USB Ripper"، وليس "USB R.I.P." هو أداة بسيطة للأدلة الجنائية بواجهة سطر أوامر تتيح لك تتبع أثر أجهزة USB أي سجل أحداث USB على أجهزة لينكس. جدول المحتويات: الوصف البدء السريع العرض التوضيحي هيكل سجل النظام التبعيات deb pip التثبيت اليدوي Git Clone install.sh المسارات Cron...

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

urh

The Universal Radio Hacker URH is a complete suite for wireless protocol investigation with native support for many common Software Defined Radios. URH allows easy demodulation of signals combined with an automatic detection of modulation parameters making it a breeze to identify the bits and byt...

knxmap

KNXmap A tool for scanning and auditing KNXnet/IP gateways on IP driven networks. KNXnet/IP defines Ethernet as physical communication media for KNX EN 50090, ISO/IEC 14543. KNXmap also allows to scan for devices on the KNX bus via KNXnet/IP gateways. In addition to scanning, KNXmap supports othe...

bleah

This repository is DEPRECATED, please usebettercap as this tool has been ported to its BLE modules...

trommel

TROMMEL TROMMEL sifts through embedded device files to identify potential vulnerable indicators. TROMMEL identifies the following indicators related to: Secure Shell SSH key files Secure Socket Layer SSL key files Internet Protocol IP addresses Uniform Resource Locator URL email addresses shell...

lockphish

Lockphish v2.0 Lockphish it's the first tool 07/04/2020 for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone Passcode using a https link. LockPhish Tutorial: https://www.kalilinux.in/2020/05/lockphish.html Author: The Linux Choice Who deleted his...

lockphish

Lockphish v2.0 Lockphish est le premier outil 07/04/2020 pour les attaques de phishing sur l'écran de verrouillage, conçu pour obtenir les identifiants Windows, le code PIN Android et le code d'accès iPhone via un lien https. Tutoriel LockPhish : https://www.kalilinux.in/2020/05/lockphish.html...

adbsploit

ADBSploit एक पायथन-आधारित टूल जो ADB के माध्यम से एंड्रॉइड डिवाइसों का शोषण और प्रबंधन करने के लिए है वर्तमान में विकासाधीन Screenrecord Stream Screenrecord Extract Contacts Extract SMS Extract Messasing App Chats WhatsApp/Telegram/Line Install Backdoor और भी... इंस्टॉलेशन root@kitploit: First...

adbsploit

ADBSploit A python based tool for exploiting and managing Android devices via ADB Currently on development Screenrecord Stream Screenrecord Extract Contacts Extract SMS Extract Messasing App Chats WhatsApp/Telegram/Line Install Backdoor And more... Installation root@kitploit: First Download or...

kernel: ALSA: virtio: Validate control metadata from the device

A flaw was found in the Linux kernel's ALSA virtio sound driver. A malicious or buggy virtio device can provide invalid control metadata, such as an unknown control type or an oversized value count. The driver's control handling trusts this unvalidated metadata, leading to out-of-bounds access wh...

CVE-2024-23700

CVE-2024-23700 - إثبات المفهوم PoC لتصعيد الامتيازات في Android Companion Device هذا المشروع يوضح CVE-2024-23700، وهي ثغرة تصعيد امتيازات تتعلق بآلية Companion Device في Android. يُظهر إثبات المفهوم PoC كيف يمكن لتطبيق استغلال تدفق ربط الجهاز المصاحب Companion Device للحصول على أذونات حساسة دون...

CVE-2026-0092

CVE-2026-0092 في Package Manager، يوجد احتمال لتجاوز وحدة تحكم قفل الجهاز بسبب عدم إجراء فحص الأذونات. قد يؤدي هذا إلى تصعيد محلي للامتيازات دون الحاجة إلى امتيازات تنفيذ إضافية. لا يلزم تفاعل المستخدم للاستغلال. NVD - CVE-2026-0092 نشرة أمان Android - Android 17...

eBPF-hid_guard

eBPF-hidguard See Why This Was Archived below. A Linux kernel-space security monitor for detecting and blocking HID injection attacks Rubber Ducky, O.MG Cable, ESP32-based keyboard emulators using eBPF HID-BPF structops. What This Does Malicious HID devices emulate keyboards and inject keystrokes...

twiga

Twiga A tool that enumerates Android devices for information useful in understanding its internals and for exploit development. It supports android 4.2 to android 7.1.1 Requirements The most current ADB must be in your path and fully functional The report name must not have any whitespace...

CVE-2020-9332

CVE-2020-9332 Description A vulnerable bus driver in FabulaTech “USB for Remote Desktop” and “USB over Network” allows low privileged users to add a fully controlled software USB device, which could be used by an attacker to elevate privileges under certain common circumstances Vulnerability Type...