31449 matches found
heappy
๐ Heappy: a happy heap editor Heappy is an editor based on gdb/gef that helps you to handle the heap during your exploitation development. The project should be considered a didactic tool useful to understand the evolution of the heap during the process life cycle. It has been created to simplify...
gitbleed_tools
GitBleed Tools - for extracting data from mirrorred git repositories About This repo contains shell scripts that can be used to download and analyze differences between cloned and mirror Git repositories. For more information about the underlying quirk in Git behavior, please visit read our blog...
CVE-2017-18345-COM_JOOMANAGER-ARBITRARY-FILE-DOWNLOAD
COMJOOMANAGER 2.0 - DESCARGA ARBITRARIA DE ARCHIVOS Recolectando bases de datos en masa con el plugin: COMJOOMANAGER, del CMS: Joomla. Proyecto desarrollado en python 2.x. Para mรกs informaciรณn, accede al video de YouTube. CVE: 2017-18345 Riesgo : Alto riesgo de seguridad 0day.Today-ID: 29950...
pipe_finder
Pipe Finder 1.0 Automated script to search in SMB protocol for availables pipe names Screenshots Requirements metasploit-framework wget locate pipeauditv2.rb module https://github.com/peterpt/pipeauditorfb - It will be installed on first run Install Requirements apt-get install metasploit-framewo...
w3af
w3af - Web Application Attack and Audit Framework w3af is an open source web application security scanner which helps developers and penetration testers identify and exploit vulnerabilities in their web applications. The scanner is able to identify 200+ vulnerabilities, including Cross-Site...
ngrev
ngrev Graphical tool for reverse engineering of Angular projects. It allows you to navigate in the structure of your application and observe the relationship between the different modules, providers, and directives. The tool performs static code analysis which means that you don't have to run you...
auto_re
AutoRE Features 1. Auto-renaming dummy-named functions, which have one API call or jump to the imported API Before After 2. Assigning TAGS to functions accordingly to called API-indicators inside Sets tags as repeatable function comments and displays TAG tree in the separate view Some screenshots...
heartbleedscanner
Heartbleed Scanner Network Scanner for OpenSSL Memory Leak CVE-2014-0160 -t parameter to optimize the timeout in seconds. -f parameter to log the memleak of vulnerable systems. -n parameter to scan entire network. -i parameter to scan from a list file. Useful if you already have targets. -r...
httpstat
httpstat httpstat visualizes curl1 statistics in a way of beauty and clarity. It is a single file๐ Python script that has no dependency๐ and is compatible with Python 3๐ป. Features Beautiful terminal output โ timing breakdown of DNS, TCP, TLS, server processing, and content transfer Structured JSO...
mimikatz
mimikatz mimikatz is a tool I've made to learn C and make somes experiments with Windows security. It's now well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. .. mimikatz 2....
CVE-2017-8759-exploits
CVE-2017-8759-exploits CVE-2017-8759 ๆผๆดๅฉ็จ็ไธคไธช็ๆฌ ็คบไพ 1 - ไป่ฟ็จไฝ็ฝฎไธ่ฝฝ .Net dll๏ผไธๆฅ่งฆ็ฃ็๏ผ๏ผๅ ่ฝฝๅนถๆง่ก ็คบไพ 2 - ๅ ่ฝฝๅตๅ ฅๅผ .Net dll ๅนถๆง่ก...
fortiscan
Fortiscan CVE-2018-13379 FG-IR-18-384 Exploitation Tool, You can use this tool to check the vulnerability in your FortiGate SSL-VPN. This vulnerability affects the following versions: โข FortiOS 6.0 - 6.0.0 to 6.0.4 โข FortiOS 5.6 - 5.6.3 to 5.6.7 โข FortiOS 5.4 - 5.4.6 to 5.4.12...
metta
Metta Metta is an information security preparedness tool. This project uses Redis/Celery, python, and vagrant with virtualbox to do adversarial simulation. This allows you to test mostly your host based instrumentation but may also allow you to test any network based detection and controls...
shepard
SHEPARD BITS This is a persistance tool using Windows Background Intelligent Transfer Service BITS. Functionality File Download, File Exfiltration, File Download + Persistent Execution Usage Run shepard.exe as Administrator with the following command line arguments: -d : regular file download to ...
CVE-mitre
CVE-Mitre Exposiciรณn Comรบn de Vulnerabilidades Descargar un solo CVE La variable es solo un ejemplo ; puedes crear tu propio script SVN para descargar una sola carpeta = CVE = Saludos @nu11secur1ty $CVE = CVE-2020-13935 svn checkout https://github.com/nu11secur1ty/CVE-mitre/trunk/$CVE Tabla de...
xcat
XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...
longtongue
Generate customized Password/Passphrase wordlist based on target information Coded with ๐ by edoardottt Share on Twitter! Installation โฌ๏ธ pipx pipx install longtongue Source git clone https://github.com/edoardottt/longtongue.git cd longtongue pip install -r requirements.txt python3 longtongue.py...
censys-python
Censys Python Library !WARNING DEPRECATION NOTICE : The Censys Search v1 and v2 APIs will be deprecated soon. Please migrate to the new Censys Platform. ๐ New API Documentation : https://docs.censys.com/reference/get-started ๐ฆ New Python SDK : censys/censys-sdk-python ๐ฅ๏ธ New CLI Tool cencli:...
semgrep-rules
semgrep-rules "The attack surface is the vulnerability. Finding a bug there is just a detail." -- Mark Dowd "Some details are more important than others." -- Fedor G. Pikus A collection of my Semgrep rules to facilitate vulnerability research. Blog posts...
pyradm
๐ฎ pyradm Remote administration crossplatfrom tool via telegram Coded with โค๏ธ python3 + aiogram3 https://t.me/whlab Screenshots Disclaimer All information contained in this repository is provided for educational and research purposes only The author is not responsible for any illegal use of this...