CVE-2019-11043

CVE-2019-11043 php-fpm+Nginx RCE 0x01 instalar phuip-fpizdam-Mac go get github.com/neex/phuip-fpizdam go install github.com/neex/phuip-fpizdam root@kitploit: ale@Pentest /go go get github.com/neex/phuip-fpizdam ale@Pentest /go go install github.com/neex/phuip-fpizdam ale@Pentest /go ls bin src...

Octopus

Was ist Octopus ? Octopus ist ein Open-Source C2-Server für die Vorbereitungsphase, der auf Python basiert und einen Octopus PowerShell-Agenten über HTTP/S steuern kann. Der Hauptzweck von Octopus ist der Einsatz vor einer Red-Team-Operation. Anstatt die eigentliche Operation mit dem gesamten...

SharpGPOAbuse

SharpGPOAbuse SharpGPOAbuse é uma aplicação .NET escrita em C que pode ser usada para tirar proveito dos direitos de edição de um usuário em um Objeto de Política de Grupo GPO para comprometer os objetos controlados por esse GPO. Mais detalhes podem ser encontrados no seguinte post do blog:...

certbot

.. This file contains a series of comments that are used to include sections of this README in other files. Do not modify these comments unless you know what you are doing. tag:intro-begin |build-status| .. |build-status| image::...

macstealer

MacStealer: Wi-Fi Client Isolation Bypass 1. Introduction This repo contains MacStealer. It can test Wi-Fi networks for client isolation bypasses CVE-2022-47522. Our attack can intercept steal traffic toward other clients at the MAC layer, even if clients are prevented from communicating with eac...

headscale

An open source, self-hosted implementation of the Tailscale control server. Join our Discord server for a chat. Note: Always select the same GitHub tag as the released version you use to ensure you have the correct example configuration. The main branch might contain unreleased changes. The...

telegram-osint-lib

Telegram OSINT Szenarien-Bibliothek Beschreibung Es gibt viele Telegram-API-Bibliotheken, aber keine von ihnen zeigt, wie man komplexe Szenarien ausführt, wie das Herunterladen aller Fotos aus Kanälen, die Überwachung der Anwesenheit von Benutzern oder die Registrierung eines neuen Kontos. Dieses...

ntlm-scanner

Neu! Exploit-Scan für CVE-2020-1472 ZeroLogon Scannen Sie DCs in Ihrem Netzwerk, um tatsächliche Ausnutzung von CVE-2020-1472 zu erkennen Beispiele: root@kitploit: python scan.py -vuln CVE-2020-1472 -target-file targets.txt python scan.py -vuln CVE-2020-1472 -target Das Tool funktioniert, indem e...

wmiexec-Pro

wmiexec-Pro Nova geração do wmiexec.py. Índice 1. Informações 2. Agradecimentos especiais 3. Funcionalidades 4. Começando Instalação 5. Uso 6. Capturas de tela 7. Como funciona? 8. Aviso legal 9. Referências Informações A nova geração do wmiexec.py, com mais novas funcionalidades. Todas as...

openvpn-install

openvpn-install Instalador OpenVPN para Debian, Ubuntu, Fedora, openSUSE, CentOS, Amazon Linux, Arch Linux, Oracle Linux, Rocky Linux e AlmaLinux. Este script permitirá configurar e gerenciar seu próprio servidor VPN seguro em apenas alguns segundos. O que é isto? Este script deve ser executado n...

feroxbuster

!WARNING Security Notice – Domain Impersonation The domain feroxbuster.com is NOT affiliated with this project, its maintainers, or any official feroxbuster releases. Official feroxbuster downloads are distributed ONLY through: https://github.com/epi052/feroxbuster open source...

cheetah

Descrição em inglês | 中文说明 0x00 cheetah Cheetah é uma ferramenta de shell web com força bruta baseada em dicionário, correndo tão rápido quanto um guepardo caçando sua presa. O princípio de funcionamento do Cheetah é que ele pode enviar um grande número de senhas de detecção baseadas em diferente...

unicorn

Unicorn Engine LOOKING FOR CONTRIBUTORS! See this. Unicorn is a lightweight, multi-platform, multi-architecture CPU emulator framework, based on QEMU. Unicorn offers some unparalleled features: Multi-architecture: ARM, ARM64 ARMv8, M68K, MIPS, PowerPC, RISCV, SPARC, S390X, TriCore and X86 16, 32,...

engine

Droidefense Engine Advance Android Malware Analysis Framework Latest release Download What Droidefense is Droidefense originally named atom: a nalysis t hrough o bservation m achine is the codename for android apps/malware analysis/reversing tool. It was built focused on security issues and trick...

detux

Detux: The Multiplatform Linux Sandbox Introduction: Detux is a sandbox developed to do traffic analysis of the Linux malwares and capture the IOCs by doing so. QEMU hypervisor is used to emulate Linux Debian for various CPU architectures. The following CPUs are currently supported: x86 x86-64 AR...

spawn

SPAWN - Cobalt Strike BOF Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks by spawning sacrificial process with Arbitrary Code Guard ACG, BlockDll, and PPID spoofing. Due to ACG, this does not support shellcode...

adfsbrute

adfsbrute A script to test credentials against Active Directory Federation Services ADFS, calculating the ADFS url of an organization and allowing password spraying or bruteforce attacks. The main idea is carrying out password spraying attacks with a random and high delay between each test and...

dp_crypto

dpcrypto Base64-based encryption oracle exploit for CVE-2017-9248 Telerik UI for ASP.NET AJAX dialog handler Published on exploit-db Update 2020 - Please note that the version on exploit-db is now very out of date compared to the latest version here on GitHub...

HostHunter

HostHunter v2.0 Uma ferramenta para descobrir e extrair nomes de host de forma eficiente a partir de um grande conjunto de endereços IPv4 ou IPv6 alvo. O HostHunter utiliza técnicas simples de OSINT e reconhecimento ativo para mapear IPs alvo com nomes de host virtuais. Isso é especialmente útil...

msmailprobe

msmailprobe Office 365 and Exchange Enumeration It is widely known that OWA Outlook Webapp is vulnerable to time-based user enumeration attacks. This tool leverages all known, and even some lesser-known services exposed by default Exchange installations to enumerate users. It also targets Office...