go_parser

Otro analizador de binarios Golang para IDAPro Inglés |中文 NOTA : Ahora la última rama master es la versión de Python3. La rama master anterior se ha cambiado a la rama py2 , y temporalmente no se mantiene. Instrucciones para la rama Python3 Esta versión se desarrolla y prueba en macOS/Windows,...

Graffiti

NOTE : Never upload payloads to online checkers Graffiti is a tool to generate obfuscated oneliners to aid in penetration testing situations. Graffiti accepts the following languages for encoding: Python Perl Batch Powershell PHP Bash Graffiti will also accept a language that is not currently on...

PackMyPayload

PackMyPayload - Emerging Threat of Containerized Malware Jump to supported formats This tool takes a file or directory on input and embeds them into an output file acting as an archive/container. It can serve purpose for a Proof-of-Concept presenting emerging risk of container file formats with...

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

domainhunter

Domain Hunter Autores Joe Vest @joevest y Andrew Chiles @andrewchiles La selección de nombres de dominio es un aspecto importante en la preparación para pruebas de penetración y especialmente en compromisos de Red Team. Comúnmente, los dominios que se usaron anteriormente para fines benignos y qu...

HTTP3-attacks

HTTP3-attacks CVE-2022-30592 Based on the work: E. Chatzoglou, V. Kouliaridis, G. Kambourakis, G. Karopoulos, and S. Gritzalis,"A hands-on gaze on HTTP/3 security through the lens of HTTP/2 and a public dataset", Computers & Security, p. 103051, 2022. The current repository serves the purpose of...

CVE-2019-11932

CVE-2019-11932 How a double-free bug in WhatsApp turns to RCE I’m going to share about a double-free vulnerability that I discovered in WhatsApp for Android, and how I turned it into an RCE. I informed this to Facebook. Facebook acknowledged and patched it officially in WhatsApp version 2.19.244...

vinifera

Vinifera - Monitor Internal Leaks on Github Github Monitoring Tool 🤖 We have been using Vinifera in production since Dec 2019 and has helped us prevent security incidents. Vinifera started out as an internal project to ensure Security hygiene of our public contributions and monitor potential leak...

ike-scan

ike-scan Descubrir e identificar hosts IKE Servidores VPN IPsec Tabla de Contenidos Construcción e Instalación Resumen Uso Detalles de Implementación Entrada de Hosts y Requisitos de Memoria Limitación de Tasa Generación de Cookies e Identificación de Hosts Remotos Detalles de Paquetes IKE...

ike-scan

ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...

HIDEAGEM

root@kitploit: 888 888 8888888 8888888b. 8888888888 d8888 .d8888b. 8888888888 888b d888 888 888 888 888 "Y88b 888 d88888 d88P Y88b 888 8888b d8888 888 888 888 888 888 888 d88P888 888 888 888 88888b.d88888 8888888888 888 888 888 8888888 d88P 888 888 8888888 888Y88888P888 888 888 888 888 888 888 d8...

PE_CVE-CVE-2021-3156

PECVE-CVE-2021-3156 Exploit para Ubuntu 20.04 usando CVE-2021-3156, mejorado con scripts simples y automatizados de post-explotación Además de la shell root, puedes tener: -Un archivo .txt con todas las claves ssh idrsa configuradas en el servidor. Ver el script: getallsshkeys.sh -Un ejecutable...

azazel

Azazel V 0.1 Toda la tierra ha sido corrompida mediante las obras que fueron enseñadas por Azazel: a él atribuye todo pecado. -- 1 Enoc 2:8 Azazel es un rootkit de espacio de usuario basado en la técnica original LDPRELOAD del rootkit Jynx. Es más robusto y tiene características adicionales, y se...

azazel

Azazel V 0.1 The whole earth has been corrupted through the works that were taught by Azazel: to him ascribe all sin. -- 1 Enoch 2:8 Azazel is a userland rootkit based off of the original LDPRELOAD technique from Jynx rootkit. It is more robust and has additional features, and focuses heavily...

log4j2-bugmaker

Log4j2-BugMaker CVE-2021-44228 Log4Shell Vulnerability Demonstration Project This is a demonstration project for learning and researching the Log4j2 remote code execution vulnerability Log4Shell. ⚠️ Safety Warning This project is intended for security research and educational purposes only. Do not...

powershell-backdoor-generator

root@kitploit: / DISCLAIMER: This program is intended for educational purposes only. By using this program, you agree that you understand the potential risks associated with its use. - This program should not be used on any system or network without proper authorization. Unauthorized use is...

json-sanitizer

json-sanitizer Given JSON-like content, The JSON Sanitizer converts it to valid JSON. Getting Started - Contact This can be attached at either end of a data-pipeline to help satisfy Postel's principle: be conservative in what you do, be liberal in what you accept from others Applied to JSON-like...

CVE-2022-23222

CVE-2022-23222 Click here if you just wanna build and run the dang thing. What follows is more or less a translation of the Chinese writeup, available here. We'll use the mainline kernel code for version 5.13.0 as a reference. There is a mismatch in available pointer types and the function that...

payloadgenerator

PGen PGen is a tool written in Bash to generate the most common Meterpreter payloads via MSFvenom, part of the Metasploit framework. About PGen is a wrapper around MSFvenom that provides a more user friendly experience to generate multiple types of payloads. Our intent is to make the experience a...

jira-mobile-ssrf-exploit

CVE-2022-26135 - Server Side Request Forgery de Lectura Completa en el Plugin Móvil para Jira Data Center y Server Acerca de Assetnote Assetnote mapea automáticamente tus activos externos y los monitorea en busca de cambios y problemas de seguridad para ayudar a prevenir infracciones graves. Esta...