2114028 matches found
LetsDefend-CVE-2022-41082-Exploitation-Attempt
LetsDefend-CVE-2022-41082-Exploitation-Attempt π‘οΈ Incident Report: CVE-2022-41082 Exploitation Attempt π Date: Sep 30, 2022 π Time: 07:19 AM π¨ Severity: High π Incident ID: 125 π Details Key Attribute| Value ---|--- Event ID| 125 Event Time| Sep 30, 2022, 07:19 AM Rule| SOC175 - PowerShell Found i...
BruteLoops
BruteLoops A dead simple library providing the foundational logic for efficient password brute force attacks against authentication interfaces. Documentation Documentation can be found here. If you're looking for the old example modules... See BFG. The examples have been offloaded to a distinct...
cve-mcp-server
π‘οΈ CVE MCP Server AI-powered security intelligence at your fingertips β 28 tools + a one-calltriagecve orchestrator, 24 data sources, one protocol. A production-grade Model Context Protocol MCP server that turns Claude into a full-spectrum security analyst. Instead of juggling 15+ browser tabs...
age
-man%20page-lightgrey%3E age is a simple, modern and secure file encryption tool, format, and Go library. It features small explicit keys, post-quantum support, no config options, and UNIX-style composability. root@kitploit: $ age-keygen -o key.txt Public key:...
dredge-cargo
This is NOT a password manager. NOT a notes app. And definetely NOT a deep-sea benthic abberant specimen taxonomic provenance registry. But it does the first two better than either. Just kidding not really. Install β’ Quick Start β’ Features β’ The Link Command β’ Commands β’ How It Works β’ Security β’...
AutoProber
AutoProber AutoProber is the hardware hacker's flying probe automation stack for giving your agent everything it needs to go from "there's a new target on the plate" to probing individual pins in a safe way. Demo video: https://gainsec.com/autoprober-demo-mp4/ Flow 1. Tell the agent to ingest the...
Brida
Brida Brida is a Burp Suite Extension that, working as a bridge between Burp Suite and Frida, lets you use and manipulate applicationsβ own methods while tampering the traffic exchanged between the applications and their back-end services/servers. It supports all platforms supported by Frida...
gtfobins-cli
π GTFOBins CLI DescripciΓ³n general GTFOBins CLI es una interfaz de lΓnea de comandos para GTFOBins, que proporciona acceso instantΓ‘neo a tΓ©cnicas de explotaciΓ³n de binarios Unix. Esta herramienta ayuda a profesionales de seguridad y administradores de sistemas a identificar y comprender cΓ³mo se...
evilrdp
π© Sponsors If you like this project, consider sponsoring it on GitHub! Sponsors EVILRDP - More control over RDP Th evil twin of aardwolfgui using the aardwolf RDP client library that gives you extended control over the target and additional scripting capabilities from the command line. Features...
Invoke-TheHash
Invoke-TheHash Invoke-TheHash contains PowerShell functions for performing pass the hash WMI and SMB tasks. WMI and SMB connections are accessed through the .NET TCPClient. Authentication is performed by passing an NTLM hash into the NTLMv2 authentication protocol. Local administrator privilege i...
ProcDump-for-Linux
ProcDump ProcDump is a Linux and Mac reimagining of the classic ProcDump tool from the Sysinternals suite of tools for Windows. ProcDump provides a convenient way for Linux and Mac developers to create core dumps of their application based on performance triggers. ProcDump for Linux and Mac is pa...
CVE-2024-38526
CVE-2024-38526 - Polyfill Scanner: x Mass Urls Scanner The polyfill.io CDN, previously compromised to serve malicious code, has now been secured with the latest fix in pdoc 14.5.1. Overview Detect potential issues Automate repetitive tasks with ease Features High Confidence Alerts : Detects scrip...
CVE-2022-20866
RSA Key Checker for CVE-2022-20866 A vulnerability in the handling of RSA keys on devices running the Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software could allow an unauthenticated, remote attacker to retrieve the RSA private key. This vulnerability is due to a...
VMPacker
π‘οΈ VMPacker ARM64 ELF Virtual Machine Protection System Translate ARM64 native instructions into custom VM bytecode for function-level code protection π¨π³ δΈζζζ‘£ β’ Features β’ Architecture β’ Quick Start β’ Usage β’ License Overview VMPacker is a Virtual Machine Protection VMP system for ARM64 AArch64...
beef
=============================================================================== root@kitploit: Copyright c 2006-2026 Wade Alcorn - [email protected] Browser Exploitation Framework BeEF - https://beefproject.com See the file 'doc/COPYING' for copying permission...
CVE-2024-10449-patch
Patch for CVE-2024-10449 https://nvd.nist.gov/vuln/detail/CVE-2024-10449 Steps: Download the patched loginAction.php file from this repository https://raw.githubusercontent.com/g-u-i-d/CVE-2024-10449-patch/refs/heads/main/loginAction.php and replace the vulnerable version with this one. Edit the...
CVE-2019-1315
Windows Error Reporting Manager arbitrary file move Elevation of Privilege Details: https://offsec.almond.consulting/windows-error-reporting-arbitrary-file-move-eop.html You will need the NtApiDotNet library to run it, as well as a valid Report.wer file, both to be placed in the same directory as...
modelscan
ModelScan: Protection Against Model Serialization Attacks Machine Learning ML models are shared publicly over the internet, within teams and across teams. The rise of Foundation Models have resulted in public ML models being increasingly consumed for further training/fine tuning. ML Models are...
C2-Tool-Collection
Outflank - C2 Tool Collection This repository contains a collection of tools which integrate with Cobalt Strike and possibly other C2 frameworks through BOF and reflective DLL loading techniques. These tools are not part of our commercial OST product and are written with the goal of contributing ...
bulk_extractor
bulkextractor is a high-performance digital forensics exploitation tool. It is a "get evidence" button that rapidly scans any kind of input disk images, files, directories of files, etc and extracts structured information such as email addresses, credit card numbers, JPEGs and JSON snippets witho...