Reverse_ip_Multithreading1

ReverseipMultithreading1 Donation : BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614...

research

Research — Bertoldi Cybersecurity Published security research by Alessandro Bertoldi and collaborators. Papers Title| Event| Year| Link ---|---|---|--- Infinity-Day at Scale: Hijacking Registrars, Defeating 2FA and Spoofing 17,000+ Domains| DeepSec Vienna 2025| 2025| PDF Authors Infinity-Day at...

ad-autopwn

AD AutoPwn Zero-Auth to Domain Admin — Automated Active Directory Attack Chain A fully automated penetration testing tool that chains 25+ attack techniques to compromise Active Directory environments. Designed for authorized security assessments. /\ | \ /\ | | | \ / | | | / \ || | / \ /\ V V / ' ...

mitaka

Mitaka Mitaka is a browser extension that makes your OSINT Open Source Intelligence search & scan easier. Key features: Auto IoC indicators of compromise selection with refanging. E.g. example.com to example.com, testatexample.com to [email protected], hxxp://example.com to http://example.co...

CVE-2020-1472

CVE-2020-1472 CVE-2020-1472 - Zero Logon vulnerability Python implementation Description A Python script which uses the Impacket library to test for CVE-2020-1472 - Zerologon vulnerability credits to Secura research. The flaw stems from the Netlogon Remote Protocol, available on Windows domain...

RAITrigger

RAITrigger The RPC-function RAiForceElevationPromptForCOM from the appinfo.dll library allows SYSTEM coercion. This only works on domain joined systems. It turns out, that this function can be called from any low privileged user not to spawn a process but to trigger SYSTEM authentication to an...

log4shelldetect

log4shelldetect Scans a file or folder recursively for Java programs that may be vulnerable to: CVE-2021-44228 Log4Shell v2.0.x - v2.14.x CVE-2021-45046 v2.15.x CVE-2021-45105 v2.16.x1 by inspecting the class paths inside files. If you only want possibly vulnerable files to be printed rather than...

Kerberos_CVE-2022-33679

KerberosCVE-2022-33679 REQUIREMENTS impacket==0.10.0 arc4==0.3.0 USE case: CVE-2022-33079.py -h -ts -debug -dc-ip ip address target serverName...

waymore

About - v8.9 The idea behind waymore is to find even more links from the Wayback Machine plus other sources than other existing tools. 👉 The biggest difference between waymore and other tools is that it can also download the archived responses for URLs on wayback machine and URLScan so that you c...

crypto-lab-merkle-proofs

crypto-lab-merkle-proofs What It Is This is an interactive demo of Merkle trees and Merkle inclusion proofs , built on SHA-256 via the browser's WebCrypto API. A Merkle tree hashes a set of data blocks into a single root hash that commits to all of them at once; an inclusion proof is the short li...

sharingan

Sharingan Sharingan is a recon multitool for offensive security / bug bounty WIP, will I ever finish? Who knows Cloning for development Outside of your gopath git clone https://github.com/leobeosab/sharingan Installing go get github.com/leobeosab/sharingan/cmd/sharingancli Dependencies NMap Go...

CVE-2022-26923_AD-Certificate-Services

CVE-2022-26923 AD Certificate Services Date of publication : 10/05/2022 Attack complexity: Low Privileges required: Low CVSS Score : 8.1 The vulnerability allowed a low-privileged user to escalate privileges to domain administrator in a default Active Directory environment with the Active Directo...

RepoReaper

RepoReaper Overview RepoReaper is a precision tool designed to automate the identification of exposed .git repositories across a list of domains and subdomains. By processing a user-provided text file with domain names, RepoReaper systematically checks each for publicly accessible .git files. Thi...

Creds

Creds Some usefull Scripts and Executables for Pentest & Forensics Most Scripts/Executables are Windows / Domain specific. Legal disclaimer: Usage of theese Scripts/Executables for attacking targets without prior mutual consent is illegal. It's the end user's responsibility to obey all applicable...

gau

getallurls gau getallurls gau fetches known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, Common Crawl, and URLScan for any given domain. Inspired by Tomnomnom's waybackurls. Resources Usage Installation ohmyzsh note Usage: Examples: $ printf example.com | gau $ cat domains.tx...

sss3

SSS3 Simple Storage Scanner SSS3 is a simple S3 Bucket testing software. It uses aws cli to search for public buckets in a list of domains/subdomains. Basic Requirements It requires aws cli installed and configured with a s3 policy defined You should have a list of previous enumerated...

device-modeling-language

Device Modeling Language The Device Modeling Language DML is a domain-specific language for writing fast functional or transaction-level device models for virtual platforms. DML provides high-level abstractions suitable for functional device models, including constructs like register banks,...

RDPassSpray

RDPassSpray RDPassSpary is a python tool to perform password spray attack in a Microsoft domain environment. ALWAYS VERIFY THE LOCKOUT POLICY TO PREVENT LOCKING USERS. How to use it First, install the needed dependencies: pip3 install -r requirements.txt Second, make sure you have xfreerdp: apt-g...

CVE-2019-1040-dcpwn

CVE-2019-1040-dcpwn Great writeup! Exploiting CVE-2019-1040 - Combining relay vulnerabilities for RCE and Domain Admin . So, I wrote dcpwn.py for easy to use. Requirements These tools require impacket. You can install it from pip pip install impacket Usage usage: dcpwn.py -h -u USERNAME -p PASSWO...

CVE-2026-41089-LongLogon

LongLogon · CVE-2026-41089 LongLogon is an unauthenticated, non-destructive precondition checker for CVE-2026-41089 , a pre-auth stack buffer overflow in the Windows Netlogon service. With no credentials, and without sending the overflow, it reports whether a domain controller's DNS domain name i...