Phishruffus

Phishruffus - बुद्धिमान खतरा शिकारी और फिशिंग सर्वर Phishruffus एक उपकरण है जो DNS सर्वरों और इंटरनेट खतरों की पहचान के लिए डिज़ाइन किया गया है जिनका उपयोग फिशिंग की अवैध प्रथा के लिए किया जाता है। https://lab.insightsecurity.com.br/phishruffus-intelligent-threat-hunter-and-phishing-servers/...

h8mail

h8mail is an email OSINT and breach hunting tool using different breach and reconnaissance services, or local breaches such as Troy Hunt's "Collection1" and the infamous "Breach Compilation" torrent. 📖 Table of Content Table of Content Features APIs Usage Usage examples Thanks & Credits Related...

norimaci

Norimaci "Norimaci" is a simple and lightweight malware analysis sandbox for macOS. This tool was inspired by "Noriben". Norimaci uses the features of OpenBSM or Monitor.app to monitor macOS system activity instead of Sysinternals Process Monitor procmon. Norimaci consists of 3 Python scripts...

aiodnsbrute

Async DNS Brute A Python 3.5+ tool that uses asyncio to brute force domain names asynchronously. Speed It's fast. Benchmarks on small VPS hosts put around 100k DNS resoultions at 1.5-2mins. An amazon M3 box was used to make 1 mil requests in just over 3 minutes. Your mileage may vary. It's probab...

aiodnsbrute

Async DNS Brute أداة تعمل على بايثون 3.5+ تستخدم asyncio لتخمين أسماء النطاقات DNS brute force بشكل غير متزامن. السرعة إنها سريعة. المعايير على خوادم VPS صغيرة تضع حوالي 100 ألف عملية حل DNS في 1.5-2 دقيقتين. تم استخدام جهاز Amazon M3 لإجراء مليون طلب في ما يزيد قليلاً عن 3 دقائق. قد تختلف النتائ...

fierce

Fierce Fierce is a DNS reconnaissance tool for locating non-contiguous IP space. Useful links: Domain Name System DNS Domain Names - Concepts and Facilities Domain Names - Implementation and Specification Threat Analysis of the Domain Name System DNS Name Servers NS State of Authority Record SOA...

CVE-2023-43323

mooSocial: बाहरी HTTP और DNS सेवा इंटरैक्शन CVE-2023-43323 mooSocial v3.1.8 पोस्ट फ़ंक्शन पर बाहरी सेवा इंटरैक्शन के प्रति असुरक्षित है। निष्पादित होने पर, सर्वर बाहरी सर्वर को HTTP और DNS अनुरोध भेजता है। असुरक्षित पैरामीटर: messageText , datawallphoto , datauserShareVideo और datauserShareLink...

pentesting-multitool

أدوات الاختراق المتعددة Pentesting-Multitool مقدمة مشروع أدوات الاختراق المتعددة Pentesting-Multitool ينشأ من الحاجة إلى جمع بعض أدوات الاختراق في أداة واحدة. سيتم تطويره باستخدام بايثون 3 مع إضافة بعض المكتبات الخارجية مثل DNSPython و pythonwhois أو scapy. الوظائف الرئيسية للبرنامج النصي هي جمع...

log4j-detect

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading The script "log4j-detect.py" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228. To do so, it sends a G...

Crips

أدوات Crips IP هذه الأداة عبارة عن مجموعة من أدوات IP عبر الإنترنت التي يمكن استخدامها للحصول بسرعة على معلومات حول عناوين IP وصفحات الويب وسجلات DNS. القائمة بحث Whois تتبع المسار Traceroute بحث DNS بحث DNS عكسي بحث GeoIP فحص المنافذ Port Scan بحث IP عكسي التثبيت والتحديث خروج بحث Whois تحديد...

pwndrop

pwndrop is a self-deployable file hosting service for sending out red teaming payloads or securely sharing your private files over HTTP and WebDAV. If you've ever needed to quickly set up an nginx/apache web server to host your files and you were never happy with the limitations of python -m...

spacesiren

SpaceSiren SpaceSiren is a honey token manager and alert system for AWS. With this fully serverless application, you can create and manage honey tokens at scale -- up to 10,000 per SpaceSiren instance -- at close to no cost.1 How It Works SpaceSiren provides an API to create no-permission AWS IAM...

dnspeep

dnspeep dnspeep lets you spy on the DNS queries your computer is making. Here's some example output: root@kitploit: $ sudo dnspeep query name server IP response A incoming.telemetry.mozilla.org 192.168.1.1 CNAME: telemetry-incoming.r53-2.services.mozilla.com, CNAME:...

dnspeep

dnspeep dnspeep आपको आपके कंप्यूटर द्वारा किए जा रहे DNS प्रश्नों की जासूसी करने देता है। यहाँ कुछ उदाहरण आउटपुट है: root@kitploit: $ sudo dnspeep query name server IP response A incoming.telemetry.mozilla.org 192.168.1.1 CNAME: telemetry-incoming.r53-2.services.mozilla.com, CNAME:...

PT-2026-81516

Name of the Vulnerable Software and Affected Versions NVIDIA NemoClaw affected versions not specified Description NVIDIA NemoClaw for Linux contains a flaw in its inference server setup that allows a remote attacker to access the inference service without authentication. The issue occurs when the...

CVE-2020-1350_HoneyPoC

यह एक शैक्षिक अभ्यास है। अपने जोखिम पर उपयोग करें। CVE-2020-1350 एक्सप्लॉइट उर्फ SIGRED यह एक सबक है कि आपको इंटरनेट पर बाइनरी पर भरोसा क्यों नहीं करना चाहिए।, वर्कअराउंड फिक्स वास्तविक है। वर्कअराउंड फिक्स root@kitploit: reg add "HKEYLOCALMACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters"...

log4j-urlscanner

log4j-detect نص برمجي بسيط بلغة Python 3 لكشف ثغرة مكتبة جافا "Log4j" CVE-2021-44228 لقائمة من عناوين URL مع تعدد الخيوط النص البرمجي "log4j-detect.py" المطوَّر بلغة Python 3 مسؤول عن كشف ما إذا كانت قائمة عناوين URL معرّضة للثغرة CVE-2021-44228. للقيام بذلك، يرسل طلب GET باستخدام الخيوط أداء أعل...

dnsteal

dnsteal v 2.0 This is a fake DNS server that allows you to stealthily extract files from a victim machine through DNS requests. Below are a couple of different images showing examples of multiple file transfer and single verbose file transfer: Support for multiple files Gzip compression supported...

dnsobserver

DNSObserver A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends notifications with the received request's details via Slack. DNSObserver can help you find bugs such as blin...

penta

penta PENTest + semi-Automation tool Penta is is Pentest semi-automation tool using Python3. It provides advanced features to extract vuln info found on specific servers. I'm now developing a scanning system using vuln-db. Installation...