domato

Domato 🍅 A DOM fuzzer Written and maintained by Ivan Fratric, [email protected] Copyright 2017 Google Inc. All Rights Reserved. Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License ...

oletools

python-oletools oletools is a package of python tools to analyze Microsoft OLE2 files also called Structured Storage, Compound File Binary Format or Compound Document File Format, such as Microsoft Office 97-2003 documents, MSI files or Outlook messages, mainly for malware analysis, forensics and...

exploit_cve-2021-29447

exploitcve-2021-29447 À des fins éducatives uniquement. Cet exploit est censé être un outil vraiment pratique pour obtenir n'importe quel fichier d'un serveur exécutant WordPress 5.6.2 et php8. voir https://wpscan.com/vulnerability/cbbe6c17-b24e-4be4-8937-c78472a138b5 Tout ce dont vous avez besoi...

gitbleed_tools

GitBleed Tools - for extracting data from mirrorred git repositories About This repo contains shell scripts that can be used to download and analyze differences between cloned and mirror Git repositories. For more information about the underlying quirk in Git behavior, please visit read our blog...

WSuspicious

WSuspicious ملخص هذا برنامج إثبات مفهوم لتصعيد الامتيازات على مضيف ويندوز عن طريق استغلال WSUS. التفاصيل في منشور المدونة: https://www.gosecure.net/blog/2020/09/08/wsus-attacks-part-2-cve-2020-1013-a-windows-10-local-privilege-escalation-1-day/ استلهمت فكرته من مشروع وكيل WSuspect:...

imR0T

imR0T cryp·tog·ra·phie imR0T: Envoyez un message rapide avec un chiffrement de texte simple à votre contact WhatsApp et, essentiellement en ROT13 avec un nouvel algorithme de multi-chiffrement basé sur la substitution ASCII et de symboles Faire un don Si ce projet vous est très utile pour vos tes...

CVE-2017-4878-Samples

Échantillons CVE-2017-4878 CVE-2017-4878 Samples - http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html Exploits Flash fec71b8479f3a416fa58580ae76a8c731c2294c24663c601a1267e0e5c2678a0 -...

ghostbuster

Table of Contents Table of Contents Ghostbuster The problem Project Features Installing Ghostbuster Using Ghostbuster Example Output Setting up your AWS accounts Setting up Cloudflare Optional Authors License Ghostbuster Eliminate dangling elastic IPs by performing analysis on your resources with...

gosec

gosec - Go Security Checker Inspects source code for security problems by scanning the Go AST and SSA code representation. Quick links GitHub Action Local installation Quick start Common usage patterns Selecting rules Output formats Features Pattern-based rules for detecting common security issue...

mwebfp

LNHG - Massive Web Fingerprinter mwebfp Introduction The "LowNoiseHG LNHG Massive Web Fingerprinter " "mwebfp " from now on was conceived in July 2013 after realizing the usefulness of webserver screenshots to pentesters, during an engagement with large external or internal IP address ranges, as ...

mwebfp

LNHG - أداة بصمة الويب الضخمة mwebfp مقدمة تم تصميم أداة "LowNoiseHG LNHG Massive Web Fingerprinter " "mwebfp " من الآن فصاعدًا في يوليو 2013 بعد إدراك فائدة لقطات شاشة خادم الويب لمختبري الاختراق، أثناء مشاركة في نطاقات كبيرة من عناوين IP الخارجية أو الداخلية، كوسيلة سريعة لتحديد الأصول الحيوية...

CVE-2024-21626

Preuve de concept de CVE-2024-21626 Lisez mon article complet pour une explication détaillée ici. Article connexe En enquêtant sur CVE-2024–21626 , j'ai découvert une vulnérabilité négligée dans les anciennes versions de Docker et runC. Pour en savoir plus sur ce que j'ai trouvé, lisez l'article...

CVE-2023-40028

CVE-2023-4002 Ghost-Arbitrary-File-Read : Le nom d'utilisateur/e-mail pour le Ghost CMS cible. --password : Le mot de passe pour le Ghost CMS cible. --url : L'URL du Ghost CMS cible ex. : http://website.com. 1. Connexion : Le script s'authentifie auprès de l'API d'administration de Ghost CMS et...

birdy-edwards

BIRDY-EDWARDS 2.0 Infiltrer & Exposer Outil automatisé d'intelligence Facebook propulsé par l'IA pour le profilage de cibles, l'analyse de réseaux et le reporting de menaces. Fonctionne entièrement sur l'appareil via Ollama. Plateforme SOCMINT Facebook propulsée par l'IA — 100 % locale, zéro...

ShellCodeEmulator

أداة محاكاة شيلكود ويندوز تعتمد على إطار يونيكورن. يقوم ShellcodeEmulator بمحاكاة شيلكود ويندوز بمساعدة تفريغات ذاكرة عملية WinDbg. يمكنك تقديم شيلكود لتحليله مع أي صورة تفريغ لعملية ويندوز. ستقوم الأداة بمحاكاة أكبر قدر ممكن من كود وضع المستخدم باستخدام بايتات الشيلكود وصورة التفريغ المقدمة. يمك...

words-scraper

Words Scraper Selenium based web scraper to generate passwords list. Installation root@kitploit: Download Firefox webdriver from https://github.com/mozilla/geckodriver/releases $ tar xzf geckodriver-vVERSION-HERE.tar.gz $ sudo mv geckodriver /usr/local/bin Make sure it is in your PATH $ geckodriv...

words-scraper

ماسح الكلمات ماسح ويب يعتمد على Selenium لإنشاء قائمة كلمات مرور. التثبيت root@kitploit: Download Firefox webdriver from https://github.com/mozilla/geckodriver/releases $ tar xzf geckodriver-vVERSION-HERE.tar.gz $ sudo mv geckodriver /usr/local/bin Make sure it is in your PATH $ geckodriver...

whoishere.py

whoishere.py WIFI Client Detection - Identify people by assigning a name to a device performing a wireless probe request...

nosqlpot

NoSQL-Honeypot-Framework NoPo NoSQL-Honeypot-Framework NoPo is an open source honeypot for nosql databases that automates the process of detecting attackers,logging attack incidents. The simulation engines are deployed using the twisted framework.Currently the framework holds support for redis. N...

wig

wig - WebApp Information Gatherer wig is a web application information gathering tool, which can identify numerous Content Management Systems and other administrative applications. The application fingerprinting is based on checksums and string matching of known files for different versions of...