proxy.py

!Python 3.xhttps://img.shields.io/static/v1?label=Python&message=3.6%20%7C%203.7%20%7C%203.8%20%7C%203.9%20%...

CVE-2022-32932

CVE-2022-32932 : ZinComputeProgramUpdateMutables OOB write due to double fetch issue 저자 commnet CVE-2022-32932 is another vulnerability I discovered in the ANE kernel interface; this is a double fetch issue that resulted in an interesting OOB write. Analysis: H11ANEIn::patchMutableSurface reachab...

Bella

Bella Bella is a pure python post-exploitation data mining tool & remote administration tool for macOS. 🍎 💻 What is it? Bella is a robust, pure python, post-exploitation and remote administration tool for macOS. Bella a.k.a. the server is an SSL/TLS encrypted reverse shell that can be dropped on...

C2-detection-manjusaka

Detecting the "Manjusaka" C2 framework Detecting the C2 framework Manjusaka: "A Chinese sibling of Sliver and Cobalt Strike" References: Detection logic details: https://corelight.com/blog/detecting-manjusaka-c2-framework Writeup by Talos:...

android712-blueborne

android712-blueborne Android Blueborne RCE CVE-2017-0781 2017年11月、Armis社はBluetoothを介したAndroidのリモートコード実行脆弱性（CVE-2017-0781）の概念実証（PoC）を公開しました。これはBlueBorneとして知られています。BlueBorneは8つの脆弱性のセットを指しますが、この記事のPoCではそのうちの2つだけを使用して目的を達成しています。...

whitesource__curekit_CVE-2022-23082_1-1-3

CureKit - WhiteSource Cure Encoding Package CureKit is a security library mostly used by the WhiteSource Cure self-fixing product. WhiteSource Cure is an innovative solution that automatically generates remediation suggestions for vulnerabilities identified by detection tools in proprietary code...

CVE-2020-15999

CVE-2020-15999 CVE-2020-15999 Added font with SBIX table based on Arial - https://docs.microsoft.com/en-us/typography/opentype/spec/sbix Crashes in ftview asan.png but somehow cannot bring Chrome to crash Flags are also not correctly set so loadsbitimage is also not called. Weird. Calling it like...

violent-python3

Python 3 "Violent Python" Source Code Source code for the book "Violent Python" by TJ O'Connor. The code has been fully converted to Python 3, reformatted to comply with PEP8 standards and refactored to eliminate dependency issues involving the implementation of deprecated libraries. A conversion...

CobaltStrike-BOF

CobaltStrike BOF Beacon BOFのコレクション。 1 DCOM Lateral Movement Beaconオブジェクトファイルを介してDCOM（ShellWindows）を使用したラテラルムーブメントの簡易PoCです。資格情報を指定するか、現在のユーザーを使用できます。現在のユーザーを使用するには、ドメイン、ユーザー名、パスワードを空のままにします。CでのCOMオブジェクトの使用に関する短い記事はこちらにあります。 2 WMI Lateral Movement - Win32Process Create...

SSHBuster

SSHBuster SSHBuster is a powerful command-line SSH brute-forcing tool designed for ethical hacking and penetration testing. It performs dictionary-based attacks to find valid SSH login credentials efficiently. Features Brute-force SSH servers using different username and password combinations...

GWTMap

Description GWTMap is a tool to help map the attack surface of Google Web Toolkit GWT based applications. The purpose of this tool is to facilitate the extraction of any service method endpoints buried within a modern GWT application's obfuscated client-side code, and attempt to generate example...

browser-backdoor

BrowserBackdoor BrowserBackdoorは、JavaScript WebSocket Backdoorを使用してリスナーに接続するElectronアプリケーションです。 BrowserBackdoorServerは、着信WebSocket接続をリッスンし、リモートシステムにコマンドを送信するためのコマンドラインインターフェースを作成するWebSocketサーバーです。 BrowserBackdoor内のJavaScriptバックドアは、WebSocketをサポートするすべてのブラウザで使用できます。BrowserBackdoor...

hashdeep

This is md5deep, a set of cross-platform tools to compute hashes, or message digests, for any number of files while optionally recursively digging through the directory structure. It can also take a list of known hashes and display the filenames of input files whose hashes either do or do not mat...

go-zeek-broker-ws

Zeek Broker websocket interface library for Golang This library implements the Zeek Broker websocket interface. Helper functions are provided with reasonable mappings between Zeek and Go types. Usage The library contains two packages: encoding encoding models the recursive JSON-based data structu...

CVE-2022-44149

CVE-2022-44149 This tool helps identify the CVE-2022-44149 vulnerability in routers, allowing researchers and security professionals to test their systems. It includes authentication header generation, payload delivery, and detailed logging for analysis. EN This tool is designed to test the...

CVE-2025-63945-Tencent-iOA-EoP

CVE-2025-63945 Tencent iOA EoP Version : before 210.9.28693.62001 Summary: I discovered a vulnerability in Tencent PC Manager where files and directories under C:\Windows\Temp are insecurely handled. An attacker can leverage symbolic link symlink attacks to coerce a SYSTEM-privileged process into...

electronegativity

Electronegativity ⚠️ 我们已不再积极维护此项目 ⚠️ 什么是 Electronegativity？ Electronegativity 是一个用于识别基于 Electron 的应用中的配置错误和安全反模式的工具。 它利用 AST 和 DOM 解析来查找与安全相关的配置，如白皮书《Electron 安全清单——开发者和审计者指南》中所述。 软件开发者和安全审计员可使用此工具来检测和减轻使用 Electron 开发应用时潜在的弱点及实现漏洞。使用 Electronegativity 仍需对 Electron（不）安全性有良好理解，因为该工具检测到的某些潜在问题需要手动调查。...

CVE-2019-5700

CVE-2019-5700 Unfortunately, I don't have a trendy and clever name for this vulnerability. This bug is fairly simple to exploit. I actually sat on it for quite a while until I realized this might affect more devices than I initially thought. Scope: This bug affects Nvidia Tegra t114-t210 SoCs tha...

linux-root-kit

About This Project This project was developed as part of the Digitale Forensik course at the Technische Hochschule Deggendorf. It demonstrates a full forensic investigation and attack simulation involving: A Python dependency confusion attack using a malicious PyPI package Privilege escalation vi...

ABL_ROP

ABLシリアルをROPで更新する: このノートブックを実行すると、ABLをロードし、ROPチェーンを介してmemmoveを呼び出し、デバイスのシリアル番号を更新しようとします。eShardの https://github.com/eshard/pixel6-boot/blob/main/runablpublic.ipynb を元に、 https://eshard.com/posts/pixel6bootloader に沿って作成されています。 出力 root@kitploit: partition misc not found failed to read miscvendor...