3008871 matches found
CVE-2020-35682
CVE-2020-35682 SD-91948: CVE-2020-35682: Authentication Bypass Vulnerability during SAML login in ServiceDesk Plus. As described by ManageEngine. If the target ServiceDesk Plus 11134 installation has SAML login enabled and you have credentials to a low privilege user then you can escalate to...
CVE-2025-53770-Exploit
π SharePoint WebPart Injection Exploit Toolkit π Exploit tool for SharePoint WebPart Injection via ToolPane.aspx, leading to .NET deserialization and potential remote code execution RCE. Developed by: @GOTOCVE π Overview This tool exploits a vulnerability in Microsoft SharePoint on-premises that...
CVE-2023-4863
CVE-2023-4863 checkout webp git clone https://chromium.googlesource.com/webm/libwebp/ webptest cd webptest/ checkout vulnerable version git checkout 7ba44f80f3b94fc0138db159afea770ef06532a0 enable AddressSanitizer sed -i 's/^EXTRAFLAGS=./& -fsanitize=address/' makefile.unix build webp make -f...
amd-ryzen-master-driver-v17-exploit
Cobalt Strike Beacon Object File for kernel exploitation using AMD's Ryzen Master Driver version 17. Built by Tijme. Credits to Alex for teaching me! Made possible by Northwave Security Description This is a Cobalt Strike CS Beacon Object File BOF and executable which exploits AMD's Ryzen Master...
Red-Team
Project Introduction This project is used to collect and summarize the following aspects of Red Team: Red Team attack mindset Red Team attack tools Red Team attack methods Highlights https://mitre-attack.github.io/ MITRE's wiki summarizing attack techniques https://huntingday.github.io MITRE |...
PatchlessCLRLoader
PatchlessCLRLoader PatchlessCLRLoader is a fork of InlineExecute-Assembly to load .NET assembly and direct the output to mailslot. I rewrites it to a standalone loader with the following implementation: AES encryption payload Fileless payload support Patchless AMSI and ETW bypass using hardware...
param-miner
param-miner This extension identifies hidden, unlinked parameters. It's particularly useful for finding web cache poisoning vulnerabilities. It combines advanced diffing logic from Backslash Powered Scanner with a binary search technique to guess up to 65,000 param names per request. Param names...
go-http-proxy-to-socks
GoHPTS - HTTPS and TCP/UDP transparent proxy to SOCKS4/SOCKS5 proxy chain written in Go Table of contents Introduction Features Installation Usage Configuration via CLI flags Configuration via YAML file Transparent proxy redirect via NAT and SOORIGINALDST Auto configuration for redirect mode tpro...
CVE-2021-1675-PrintNightmare-Analysis
Vulnerability Research: Local Privilege Escalation and RCE via Windows Print Spooler PrintNightmare / CVE-2021-1675 The repository contains a detailed technical report write-up and an analysis of the exploit concept for a critical vulnerability in the Windows Print Spooler service, which allows a...
CVE-2021-42574
CVE-2021-42574 - Code generator // Update: 05.11.2021 It's now possible to not only encode, but also decode files. Means that now files containing supported bidi chars can be translated to template files with bidi placeholders LRO, .... Generate malicious files using recently published bidi-attac...
mwemu
MWEmu Official documentation mwemu.github.io What is this? It's a hardware emulator + OS process simulator implemented in pure rust. This approach is very convenient to malware analysis and other stuff PE, shellcode etc Supports x86 32/64-bit and AArch64 architectures. The primary target OS is...
Openssl_G2.5_CVE-2014-3570_01
OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...
bluebox
Note; this repository makes references to external repositories known as Git submodules. After cloning this repository, please make sure to run the following commands to clone those submodules: git submodule init git submodule update BlueBox BlueBox is a collection of scripts and configurations f...
xeca
xeca xeca is a project that creates encrypted PowerShell payloads for offensive purposes. Creating position independent shellcode from DLL files is also possible. Note: Please place your custom AMSI bypass in src/assets/amsi-bypass.ps1. Table of Contents xeca Install How It Works Mitigations...
javascript-obfuscator
JavaScript obfuscator π Obfuscator.io with VM Obfuscation Obfuscator.io adds VM-based bytecode obfuscation to this package - your JavaScript functions are compiled to custom bytecode that runs on an embedded virtual machine. Each build produces unique opcodes and VM structure, making reverse...
autoSource
AutoSource AutoSource is an automated source code review framework integrated with SonarQube which is capable of performing static code analysis/reviews. It can be used for effectively finding the vulnerabilities at very early stage of the SDLCSoftware Development Life Cycle. The user can scan th...
teller
:computer: Never leave your terminal for secrets :pager: Create easy and clean workflows for working with cloud environments :magright: Scan for secrets and fight secret sprawl Teller - the open-source universal secret manager for developers Never leave your terminal to use secrets while...
recon-skills
π‘οΈ Recon & Pentest Skill Pack 169 offensive security skills for recon and pentest. Field-validated techniques from 600+ company targets across 45+ sectors. Updated with browser fingerprint evasion, anti-bot bypass, hardcoded credential hunting, SCADA/ICS enumeration. π Blog & research: hiago.sh β...
AutoRecon
It's like bowling with bumpers. - @ippsec AutoRecon AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services. It is intended as a time-saving tool for use in CTFs and other penetration testing environments e.g. OSCP. It may also be useful in...