Malicious code in moveworks-capi-starter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2cd8f99409a87f01743f65f381fefa800176a29d47d6119743ae2bd0ce1f7583 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

GhostInTheNet

GhostInTheNet Ultimate Network Stealther that makes Linux a Ghost In The Net and protects from MITM/DOS/scan Properties: Network Invisibility Network Anonymity Protects from MITM/DOS Transparent Cross-platform Minimalistic Dependencies: Linux 2.4.26+ - will work on any Linux-based OS, including...

SharpADWS

SharpADWS 中文文档 Active Directory reconnaissance and exploitation for Red Teams via the Active Directory Web Services ADWS. Overview SharpADWS is an Active Directory reconnaissance and exploitation tool for Red Teams that collects and modifies Active Directory data via the Active Directory Web...

COFFLoader

COFF Loader This is a quick and dirty COFF loader AKA Beacon Object Files. Currently can run un-modified BOF's so it can be used for testing without a CS agent running it. The only exception is that the injection related beacon compatibility functions are just empty. The main goal is to provide a...

libfido2

== libfido2 image:https://github.com/yubico/libfido2/workflows/linux/badge.svg"Linux Build Status github actions", link="https://github.com/Yubico/libfido2/actions" image:https://github.com/yubico/libfido2/workflows/macos/badge.svg"macOS Build Status github actions",...

vigolium

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision Vigolium provides two complementary scanning modes: Native Scan vigolium scan: Fast, powerful, and flexible. Deterministic, multi-phase scanning with 317 modules across content discovery,...

FakeDellOM

FakeDellOM A fake host that can be "managed" by Dell OMSA, getting you past the login screen, and possibly serving as a starting point for fuzzing or other testing. Backstory While researching potential vulnerabilities¹ in Dell's OpenManage Server Administrator, I was interested both in: 1. not...

ARTful

Description ARTful is a native Android library the allows developers to modify the Android Runtime ART on Android 13 + 14. With this tool, you can dynamically change the implementation of any static method within your application or the Android Framework to affect methods called from within your...

tamago

TamaGo - bare metal Go tamago | https://github.com/usbarmory/tamago Copyright c The TamaGo Authors. All Rights Reserved. Introduction TamaGo is a framework that enables compilation and execution of unencumbered Go applications on bare metal processors. The projects spawns from the desire of...

CVE-2022-28906-POC

CVE-2022-28906 PoC Python proof of concept for unauthenticated command injection in the TOTOLINK N600R. Vulnerability Product | TOTOLINK N600R ---|--- Firmware | V5.3c.7159B20190425 Type | OS command injection CWE-78 Parameter | langType Endpoint | /cgi-bin/cstecgi.cgi CVSS v3.1 | 9.8 Critical...

cats

CATS documentation is available at https://endava.github.io/cats/ REST API fuzzer and negative testing tool. Run thousands of self-healing API tests within minutes with no coding effort! Comprehensive : tests are generated automatically based on a large number scenarios and cover every field and...

fwknop

fwknop - Single Packet Authorization Introduction fwknop implements an authorization scheme known as Single Packet Authorization SPA for strong service concealment. SPA requires only a single packet which is encrypted, non-replayable, and authenticated via an HMAC in order to communicate desired...

f5-bigip-rce-cve-2020-5902

F5 BIG-IP RCE CVE-2020-5902 Vulnerability Detection Tool Summary On 20200706, the F5 BIG-IP TMUI RCE vulnerability was disclosed online. The TMUI component Traffic Management User Interface of F5 BIG-IP has an authentication bypass vulnerability. This vulnerability arises from a difference betwee...

AWS-Threat-Simulation-and-Detection

AWS Threat Detection with Stratus Red Team This repository is a documentation of my adventures with Stratus Red Team - a tool for adversary emulation for the cloud. Stratus Red Team is "Atomic Red Team for the cloud, allowing to emulate offensive attack techniques in a granular and self-contained...

macOSTools

macOSTools macOS Offensive Tools AUnit Example XCode project for Audio Unit Plugins MigrationToolPayload Migration tool plugin SpecialDelivery Installer plugin authplugin Authentication Plugin dylibinjection Source code for dylib injection. Based off of code from Jonathan Levin...

ProtectMyTooling

Don't Detect Tools - Detect Techniques Rationale behind releasing this software was outlined in an acompanying blog post: ProtectMyTooling - Don't detect tools, detect techniques Intro Script that wraps around multitude of packers, protectors, obfuscators, shellcode loaders, encoders, generators ...

sectemplates

Sectemplates I'd like to announce the creation of SecTemplates.com, a website where infosec professionals, and startup engineering teams lacking a security team, can find templates to help bootstrap their programs. The primary focus of this site will be to provide starting points for Preparation...

reaver-wps-fork-t6x

Overview Reaver implements a brute force attack against Wifi Protected Setup WPS registrar PINs in order to recover WPA/WPA2 passphrases , as described in Brute forcing Wi-Fi Protected Setup When poor design meets poor implementation. by Stefan Viehböck. Reaver has been designed to be a robust an...

pip-audit

pip-audit pip-audit is a tool for scanning Python environments for packages with known vulnerabilities. It uses the Python Packaging Advisory Database https://github.com/pypa/advisory-database via the PyPI JSON API as a source of vulnerability reports. This project is maintained in part by Trail ...

iptodomain

iptodomain V2 Update V2 :It was migrated from python 2.7 to 3.8.10. Now It supports an input file and csv output file. Description: This tool allows you to extract domains from a IP range, using the historic information archived in Virustotalusing API key. It is usefull if you want to know what...