hatiyar

Hatiyar 침투 테스트, 취약점 평가 및 보안 연구를 위한 현대적인 보안 도구 키트입니다. ⚠️ 중요: Hatiyar는 교육, 연구 및 방어적 보안 용도 로만 사용하도록 설계되었습니다. 소유하지 않았거나 명시적인 서면 허가를 받지 않은 시스템에서 이 소프트웨어를 사용하지 마십시오. 오용 시 민사 또는 형사 책임이 발생할 수 있습니다. 빠른 데모 개요 Hatiyar 는 침투 테스트, 취약점 평가 및 보안 연구를 위해 설계된 보안 도구 키트입니다. 다음 기능을 제공합니다: 대화형 CLI REPL - Metasploit과 유사한...

cve-2015-1592

이 파일들은 "Weaponizing Perl Serialization Flaws With MetaSploit"에 관한 제 Houston Perl Mongers 발표에서 논의되었습니다. 이 파일들을 설명하는 발표 영상은 여기에서 볼 수 있습니다: https://youtu.be/Gzx6KlqiIZE storable-.pl 파일들은 metasploit 모듈에서 사용되는 'config' 파라미터 값을 생성하는 데 사용됩니다...

EaST

«EAST» – «익스플로잇 및 보안 도구» 침투 테스트 프레임워크. 1. 개요 침투 테스트 프레임워크 환경은 IT 보안 전문가의 도구 키트의 기초입니다. 이 소프트웨어는 IT 시스템 공격에 대한 지식을 학습하고 향상시키는 데, 그리고 검사 및 사전 보호에 필수적입니다. 높은 수준의 신뢰성을 가진 네이티브 종합 오픈 소스 침투 테스트 프레임워크의 필요성이 오랫동안 존재해 왔습니다. 이것이 EAST 프레임워크가 네이티브 및 네이티브 친화적 IT 보안 시장을 위해 만들어진 이유입니다. EAST는 웹부터 버퍼 오버런까지 다양한...

MetasploitMCP

Metasploit MCP 서버 Metasploit Framework 통합을 위한 Model Context ProtocolMCP 서버입니다. https://github.com/user-attachments/assets/39b19fb5-8397-4ccd-b896-d1797ec185e1 설명 이 MCP 서버는 Claude와 같은 대규모 언어 모델과 Metasploit Framework 침투 테스트 플랫폼 간의 브리지를 제공합니다. AI 어시스턴트가 표준화된 도구를 통해 Metasploit 기능에 동적으로 접근하고 제어할 수 있게...

Metasploit Wrap Up: This One Goes to Sixteen!

This One Goes to Sixteen! Another banger from Metasploit with sixteen new modules, including ten exploit modules, with five on the CISA KEV list. Cisco, Papercut, Sonicwall, Jetbrains, and Langflow all have exploit modules, and not to be outdone, we even have a Metasploit scanner to watch the...

Exploit for CVE-2014-8361

Vuln Scanner - Advanced Network Security Scanner !Licenseht...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Google Android

Khora Exploit Framework v2.0 ============================ Mod...

metasploit-framework

This is the Metasploit Framework repository, a comprehensive collection of tools and resources for penetration testing and vulnerability assessment. The repository contains a wide range of modules, including exploits, payloads, and auxiliary tools, which can be used to test and exploit...

Exploit for CVE-2017-0144

Metasploit Framework Cheatsheet Introduction Metasploit i...

Metasploit Weekly Wrap-Up

PowershellPoint This week’s new features and improvements start with two new exploit modules leveraging CVE-2023-34960 Chamilo versions 1.11.18 and below and CVE-2023-26469 in Jorani 1.0.0. Like CVE-2023-34960, I too, feel attacked by PowerPoint sometimes. We also have several improvements,...

Fetch Payloads: A Shorter Path from Command Injection to Metasploit Session

Over the last year, two-thirds of the exploit modules added to Metasploit Framework have targeted command injection vulnerabilities CWE-94: Improper Control of Generation of Code. In the process of helping new and existing open-source contributors learn how to use Metasploit’s command stager...

shadowbroker

This repository, zhangyouren/shadowbroker, contains a collection of exploits and tools leaked by the Shadow Brokers, a group known for releasing sensitive information. The repository includes a README file that lists the contents of the repository, which includes various exploit modules, payloads...

vulhub

This repository is an offensive tool for vulnerability research and exploitation, specifically targeting various web applications and services. It contains a collection of exploits and tools for identifying and exploiting vulnerabilities in software and systems. The primary vulnerability targeted...

Exploit for SQL Injection in Zabbix

This repository is an offensive tool for vulnerability research and exploitation. It contains a collection of vulnerable applications and services, along with exploit modules and tools for testing and demonstrating vulnerabilities. The primary vulnerability being targeted is not explicitly stated...

metasploit-framework

This repository is an offensive tool for Metasploit Framework. The Metasploit Framework is a powerful tool for penetration testing and vulnerability assessment. It provides a comprehensive platform for identifying and exploiting vulnerabilities in various systems and applications. The framework...

Metasploit Wrap-Up

Operations shell Operations and management software make popular targets due to their users typically having elevated privileges across a network. Our own wvu contributed the VMware vRealize Operations vROps Manager SSRF RCE exploit module for the vulnerabilities discovered by security researcher...

hackingtool

This repository is an offensive tool for a comprehensive hacking toolkit. The primary vulnerability class targeted is not explicitly stated, but the tool includes various modules for exploitation, reverse engineering, and post-exploitation. The probable entry points for this tool are scripts and...

Exploit for Incorrect Authorization in Theforeman Smart_Proxy_Salt

This is the Metasploit Framework repository, a widely used penetration testing tool. It is an offensive tool for penetration testing and vulnerability assessment. The repository contains various modules for exploiting vulnerabilities in different software and systems, including Windows, Linux, an...

vulhub2

It is an offensive tool for web application security training. The primary vulnerability targeted by this tool is not explicitly stated, but based on the provided code and metadata, it appears to be a web application vulnerability. The tool is designed to test the security of web applications, an...

isf

This repository is an Industrial Exploitation Framework ISF for testing and exploiting industrial control systems ICS. It is a Python-based framework similar to Metasploit. The framework is based on the open-source project routersploit and includes various clients and modules for different ICS...