CAPEv2

CAPE: Malware Configuration And Payload Extraction - Documentation CAPE is a malware sandbox. A sandbox is used to execute malicious files in an isolated environment whilst instrumenting their dynamic behaviour and collecting forensic artefacts. CAPE was derived from Cuckoo v1 which features the...

letsdefend-cve-2024-49138-investigation

LetsDefend Investigation: CVE-2024-49138 🔍 Overview Hands-on SOC investigation and incident response simulation using LetsDefend, focused on a real-world exploitation of CVE-2024-49138 — a privilege escalation vulnerability in Windows CLFS driver. 📅 Event Details Event ID : 313 Incident Type :...

shannon

!NOTE Cyber verification for Anthropic and OpenAI models: complete your provider's cyber verification program to prevent model failures and refusals during cyber workloads. Shannon is an autonomous, AI pentester for web applications and APIs. It analyzes your source code, identifies attack paths,...

Spartacus

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/Spartacus for the latest version. Spartacus DLL/COM Hijacking Toolkit Why "Spartacus"? If you have seen the film Spartacus from 1960, you will remember the scene where the Romans are asking for Spartacus to give himself up. The...

Mangle

THIS REPOSITORY HAS BEEN ARCHIVED To view the latest version of Mangle or to submit an issue, reference https://github.com/Tylous/Mangle. Mangle Authored By Tyl0us Featured at Source Zero Con 2022 Mangle is a tool that manipulates aspects of compiled executables .exe or DLL. Mangle can remove kno...

CVE-2019-12384

CVE-2019-12384 Jackson RCE And SSRF 0x01 python -m SimpleHTTPServer python -m SimpleHTTPServer Serving HTTP on 0.0.0.0 port 8000 ... 127.0.0.1 - - 24/Jul/2019 03:06:32 "GET /inject.sql HTTP/1.1" 200 - inject.sql CREATE ALIAS SHELLEXEC AS $$ String shellexecString cmd throws java.io.IOException...

quasibot

quasiBot quasiBot 0.3 - Read Me 07.08.14 Agenda QuasiBot is a complex webshell manager written in PHP, which operate on web-based backdoors implemented by user himself. Using prepared php backdoors, quasiBot will work as C&C trying to communicate with each backdoor. Tool goes beyond average...

URS

/\ /\ /'/',\ \ \ \ \ \ //, \ \ /\ \// // // // U niversal R eddit S craper - A comprehensive Reddit scraping command-line tool written in Python. codecov releases Sponsors If this project has saved you time, consider sponsoring its development. | MangoProxy provides residential, ISP,...

fingerprintx

Features • Installation • Usage • Running fingerprintx • Using as a library • Why not nmap? • Notes • Acknowledgements fingerprintx is a utility similar to httpx that also supports fingerprinting services like as RDP, SSH, MySQL, PostgreSQL, Kafka, etc. fingerprintx can be used alongside port...

makes

⚠️ Deprecation notice ⚠️ After a thorough review of Makes and other build system alternatives, Fluid Attacks has decided to transition fully to Nix Flakes for all our builds. This decision brings significant benefits, including the opportunity to rely on and contribute to the incredible Nix...

LambdaGuard

LambdaGuard AWS Lambda is an event-driven, serverless computing platform provided by Amazon Web Services. It is a computing service that runs code in response to events and automatically manages the computing resources required by that code. LambdaGuard is an AWS Lambda auditing tool designed to...

needrestart

needrestart About needrestart checks which daemons need to be restarted after library upgrades. It is inspired by checkrestart from the debian-goodies package. There are some hook scripts in the ex/ directory to be used with apt and dpkg. The scripts will call needrestart after any package...

cook

COOK An overpowered wordlist generator, splitter, merger, finder, saver, create words permutation and combinations, apply different encoding/decoding and everything you need. Frustration killer! & Customizable! Index Installation Configuration Basic Ranges Param Approach COOK's Ingredients...

PrintNightmare

PrintNightmare Python implementation for PrintNightmare CVE-2021-1675 / CVE-2021-34527 using standard Impacket. Installtion $ pip3 install impacket Usage Impacket v0.9.23 - Copyright 2021 SecureAuth Corporation usage: printnightmare.py -h -debug -port destination port -target-ip ip address -hashe...

jboss-_CVE-2017-12149

jboss-CVE-2017-12149 verifyCVE-2017-12149.jar provides a command-line mode to verify the vulnerability. If the vulnerability exists, it returns a characteristic string. Simply execute the command: $ java -jar verifyCVE-2017-12149.jar http://xxx:8080 成功返回: vuln6581362514513155613jboss...

ForgeCert

ForgeCert ForgeCert uses the BouncyCastle C API and a stolen Certificate Authority CA certificate + private key to forge certificates for arbitrary users capable of authentication to Active Directory. This attack is codified as DPERSIST1 in our "Certified Pre-Owned" whitepaper. This code base was...

TriforceAFL

New: For those looking to play with TriforceAFL and TLSF, Richard Johnson created a Dockerfile which installs both and even builds a Linux kernel for you. It's available here https://hub.docker.com/r/moflow/afl-triforce/tags/. Also new: afl-tmin now works with the forkserver!...

blutter

Blutter Flutter Mobile Application Reverse Engineering Tool by Compiling Dart AOT Runtime Currently the application supports only Android libapp.so arm64 only. Also the application is currently work only against recent Dart versions. For high priority missing features, see TODO Environment Setup...

aura

This repository has moved to a new location: https://github.com/SourceCode-AI/aura Security Auditing and code introspection About the problem The current trend in the development is to use a lot of packages in the development phase, even if they provide only trivial functionality and consist of 1...

RedditC2

RedditC2 Abusing Reddit API to host the C2 traffic, since most of the blue-team members use Reddit, it might be a great way to make the traffic look legit. 🚫 Disclaimer: Use of this project is for Educational/ Testing purposes only. Using it on unauthorised machines is strictly forbidden. If...