CVE-2022-29885

CVE-2022-29885 by 1vere$k Apache Tomcat DoS CVE-2022-29885 Exploit. Denial of Service in EncryptInterceptor Tomcat Cluster. The target machine needs to start the Cluster Nio Receiver. Sending a special TCP packet will cause a Denial of Service to the target. Whether EncryptInterceptor is used or...

WHP

M$ Windows Hacking Pack ここに含まれるツールは様々なソースからのものです。このリポジトリは基本的にWTFPLライセンスですが、一部のコンテンツ（例：sysinternals）は異なる場合があります。 "pes"は"PE Scambled"を意味します。時々役立ちます。 リモートエクスプロイト Windows 2000 / XP SP1 MS05-039 Microsoft Plug and Play サービス オーバーフロー、SSDPでも動作 http://www.rapid7.com/db/modules/exploit/windows/smb/ms05039p...

cheetah

English description | 中文说明 0x00 介绍 Cheetah是一款基于字典的webshell密码爆破工具，Cheetah的工作原理是能根据自动探测出的web服务设置相关参数一次性提交大量的探测密码进行爆破，爆破效率是其他普通webshell密码暴力破解工具上千倍。 本版本可能以后会很少进行更新，请使用Cheetah图形用户界面版本！ 0x01 特点 速度极快 支持批量爆破 自动伪造请求 自动探测web服务设置相关参数 支持读取和去重超大密码字典文件 支持python 2.x和3.x 目前支持php、jsp、asp、aspx webshell 0x02 参数说明...

RTLSDR-Scanner

RTLSDR Scanner 版权所有 2012-2015 Al Brown al at eartoearoak.com 一个跨平台的 Python 频率扫描 GUI，用于 OsmoSDR rtl-sdr 库。 更多详情请参见这里。 还提供一份基本的用户手册。 已在以下系统上测试： Windows 7（x86 和 x64） Windows 8.1（x64） Ubuntu 12.04（x86） Ubuntu 12.10（x64） Ubuntu 13.04（x64） Ubuntu 14.04（x64） OS X Snow Leopard OS X Mountain Lion 安装...

altdns

Altdns - Subdomain discovery through alterations and permutations Altdns is a DNS recon tool that allows for the discovery of subdomains that conform to patterns. Altdns takes in words that could be present in subdomains under a domain such as test, dev, staging as well as takes in a list of...

awesome-rat

所有收集类项目 RAT 250+ 开源远控/C&C工具，1200+ RAT分析报告\C&C相关文章等。 English Version 目录 开源工具 pupy - 1工具 6文章 Covenant - 3工具 18文章 Slackor - 1工具 3文章 QuasarRAT - 1工具 9文章 EvilOSX - 1工具 9文章 Merlin - 1工具 3文章 商业软件 Team Viewer - 7工具 34文章 恶意软件部分 Gh0st - 5工具 23文章 NanoCore - 1工具 32文章 NjRat - 4工具 20文章 Revenge RAT - 1工具 9文章...

PersistAssist

PersistAssist PersistAssist is a fully modular persistence framework written in C. All persistence techniques contain a cleanup method which will server to remove the persistence aside from the persistence code. This is a WIP so there are many empty classes, the main object of this project...

SharpEventPersist

SharpEventPersist Persistencia mediante escritura/lectura de shellcode desde el Registro de Eventos. Uso La herramienta SharpEventPersist acepta 4 parámetros sensibles a mayúsculas: -file "C:\path\to\shellcode.bin" -instanceid 1337 -source Persistence -eventlog "Key Management Service". El...

goscan

GoScan is an interactive network scanner client, featuring auto-completion, which provides abstraction and automation over nmap. Although it started as a small side-project I developed in order to learn @golang, GoScan can now be used to perform host discovery, port scanning, and service...

geacon

Geacon Using Go to implement CobaltStrike's Beacon This project is for learning protocol analysis and reverse engineering only, if someone's rights have been violated, please contact me to remove the project, and the last DO NOT USE IT ILLEGALLY How to play 1. Setup the teamserver and start a htt...

Auto_EAP

AutoEAP はじめに 2016年9月15日公開 AutoEAP.pyは、様々な種類のEAPネットワークに対して自動化されたブルートフォース認証攻撃を実行するように設計されたスクリプトです。これらの種類の無線ネットワークは、RADIUSサーバーがActive Directoryに対して認証をチェックする際に、ドメイン認証情報のパスワード推測を容易にするインターフェースを提供します。Jouni Malinen [email protected]...

spybrowse

BrowseSpy Be sure to change the ftp variables throughout the code, these variables contain the username, password, & IP address of the FTP server which receives the files. This code will do the following: 1. Copy itself into the %TMP% directory & name itself ursakta.exe 2. Add a registry entry to...

PrivescCheck

PrivescCheck 快速识别常见 Windows 漏洞 和配置问题 ，这些问题不一定在公共安全标准中被涵盖，并收集用于利用和后渗透任务的有用信息。 !重要 使用此工具时需要注意的一个主要方面是，所有访问控制检查都是在当前用户的上下文中完成的。因此，如果以管理员权限运行，为了避免产生错误的发现，会跳过许多漏洞检查。 🚀 快速开始 在此处下载脚本：PrivescCheck.ps1 !提示 上面的链接也可以直接在 PowerShell 终端中使用 New-Object Net.WebClient.DownloadString... 直接使用。 用例 1（渗透测试）：仅运行基本检查...

fhex

Fhex - A Full-Featured HexEditor This project is born with the aim to develop a lightweight, but useful tool. The reason is that the existing hex editors have some different limitations e.g. too many dependencies, missing hex coloring features, etc.. This project is based on qhexedit2 , capstone...

log4j-finder

log4j-finder A Python3 script to scan the filesystem to find Log4j2 that is vulnerable to Log4Shell CVE-2021-44228 & CVE-2021-45046 & CVE-2021-45105. It scans recursively both on disk and inside nested Java Archive files JARs. How it works log4j-finder identifies log4j2 libraries on your filesyst...

log4j-finder

log4j-finder 一个Python3脚本，用于扫描文件系统以查找易受Log4Shell（CVE-2021-44228、CVE-2021-45046和CVE-2021-45105）影响的Log4j2。它会递归扫描磁盘和（嵌套的）Java归档文件（JAR）内部。 工作原理 log4j-finder 使用特定文件（目前仅限 JndiManager.class）的 已知有害 和 已知安全 MD5 哈希列表，识别文件系统中的 log4j2 库，这些文件存在于 log4j2-core- 包中；这是受 log4shell 影响的主要包。它会在 Java...

bad_io_uring

Bad IOuring https://www.blackhat.com/us-23/briefings/schedule/index.htmlbad-iouring-a-new-era-of-rooting-for-android-32243 Build the exploit Make sure the Android NDK is installed. For pixel 6, root@kitploit: make pixel For samsung s22, root@kitploit: make s22 How to use the exploit The exploit i...

WinFiHack

WinFiHack root@kitploit: \ \ / | | | | | | \ \ /\ / /| | ' | | | | || |/ |/ | |/ / \ V V / | | | | | | | | | | | | Tool: Provide interface default: Wi-Fi Tool-Interface: Disconnect all active network connections Interface-Network: Search for all available networks User-Tool: Set target network...

slicer

Slicer A tool to automate the recon process on an APK file. Slicer accepts a path to an extracted APK file and then returns all the activities, receivers, and services which are exported and have null permissions and can be externally provoked. Note : The APK has to be extracted via jadx or...

ffuf

ffuf - Fuzz Faster U Fool A fast web fuzzer written in Go. Installation Example usage Content discovery Vhost discovery Parameter fuzzing POST data fuzzing Using external mutator Configuration files Help Interactive mode Installation Download a prebuilt binary from releases page, unpack and run! ...