vimana-framework

Este proyecto ahora está alojado aquí: https://github.com/s4dhulabs/vimana-framework...

ipv6tools

IPv6Tools IPv6Tools 框架是一套强大的模块和插件集合，允许用户审计支持 IPv6 的网络。内置模块支持枚举 IPv6 特性，如 ICMPv6 和组播监听发现 MLD。此外，该框架还支持上层协议 ULP 的枚举，例如组播 DNS mDNS 和链路本地组播名称解析 LLMNR。用户可以通过用 Python 语言创建插件和模块来轻松扩展框架的功能。 详细说明 要了解更多关于该项目如何实现以及如何使用相同技术构建应用程序的信息，请点击下面的链接！ There’s No Place Like ::1 — Enumerating Local IPv6 networks...

expliot

EXPLIoT Noun: /ɛkˈsplʌɪəti:/ A Framework for security testing and exploiting IoT products and IoT infrastructure. It provides a set of plugins test cases which are used to perform the assessment and can be extended easily with new ones. The name EXPLIoT pronounced expl-aa-yo-tee is a pun on the...

zeek-spicy-openvpn

zeek-spicy-openvpn 这是一个用于检测 OpenVPN 流量的协议分析器。 你必须安装 Spicy 才能使用此包。 介绍此协议分析器开发过程的博客和网络研讨会： https://zeek.org/2021/03/16/a-zeek-openvpn-protocol-analyzer/ https://zeek.org/2021/04/08/a-zeek-openvpn-protocol-analyzer-in-spicy/ https://event.webinarjam.com/replay/16/405xvaqawfzfqn...

Prismatica

Prismatica In Development Prismatica is a modular C2 Interface hooked into the Diagon Command and Control Toolkit. There are multiple tools and components of the Prismatica Marketplace. All Prism Apps are built around the Emergence Fabric. To get started begin with Emergence Prismatica Applicatio...

ReverseTCPShell

ReverseTCP Shell Framework root@kitploit: | \ | / | \ / | | | | | | | | | | | | | | | | | | | || | | | | | // \ \ / / \ '/ |/ \ | | | | / \ | |/ \ | | | | \ \ /\ V / / | \ \ / | | || | | | | | / | | || \| / || |/|| || |/|| ||||| - By: @ZHacker13 - | Modules | - Show C2-Server Modules. - |...

frida-ios-hook

Frida iOS hook 📍 一个帮助您轻松使用Frida的工具。它支持用于跟踪类、函数以及修改iOS平台方法返回值的脚本。 👉 对应Android平台：frida-android-hook 👉 用于拦截iOS应用中加密API：frida-ios-intercept-api 环境操作系统支持 操作系统| 支持情况| 备注 ---|---|--- MacOS| ✅| 稳定 Linux| ✅| 稳定 Windows| ✅| 不稳定 兼容性 iOS| Frida| Frida-tools| 支持情况| 稳定版本 ---|---|---|---|--- 16.7.11| 16.7.14|...

spring-rce-poc

spring-rce-poc Testing CVE-2022-22968 Simple app vulnerable to CVE-2022-22968 Dockerfile could be used to build it on vulnerable version of Tomcat 9.0.59 exploit.sh is a shell script which is trying to exploit this cve on 8080 port of localhost If attack with exploit.sh was succesfull, on context...

ZF3_CVE-2021-3007

ZF3CVE-2021-3007 ZendFrameworkCVE-2021-3007 PoC...

Spring0DayCoreExploit

Spring Core RCE - CVE-2022-22963 Following Spring Cloud, on March 29, another heavyweight vulnerability of Spring broke out on the Internet: Spring Core RCE The Circulating coding poc: The exploit has been uploaded asexp.py The official Spring patch is also in active production Patch Links in...

evilgrade

Faraday Security Research -- | ISR-evilgrade | www.faradaysec.com | -- .:: BRIEF OVERVIEW ::. Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates. It comes with pre-made binaries agents, a working default configuration...

evilgrade

Faraday Security Research -- | ISR-evilgrade | www.faradaysec.com | -- .:: 简要概述 ::. Evilgrade 是一个模块化框架，允许用户利用糟糕的升级实现，通过注入虚假更新来获利。 它附带预构建的二进制文件（代理）、用于快速渗透测试的默认配置，并拥有自己的 WebServer 和 DNSServer 模块。 易于设置新配置，并且在设置新二进制代理时具有自动配置功能。 什么时候应该使用 evilgrade？ 当攻击者能够进行主机名重定向（操纵受害者的 DNS...

morpheus

Morpheus - automated ettercap TCP/IP Hijacking tool root@kitploit: Version release: v2.2 - STABLE Author: pedro ubuntu r00t-3xp10it Codename: oneiroi phobetor The mithologic dream greek god Distros Supported: Linux Ubuntu, Kali, Debian, BackBox, Parrot OS Suspicious-Shell-Activity© SSA RedTeam...

pipe_finder

Pipe Finder 1.0 Automated script to search in SMB protocol for availables pipe names Screenshots Requirements metasploit-framework wget locate pipeauditv2.rb module https://github.com/peterpt/pipeauditorfb - It will be installed on first run Install Requirements apt-get install metasploit-framewo...

external_c2_framework

externalc2 framework Python framework for usage with Cobalt Strike's External C2 specification as described in the spec. The primary design goal is to be a very modular implementation of the external c2 spec that provides enough abstraction to easily implement C2 channels for Cobalt Strike...

karma_v2

⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ 𝚔𝚊𝚛𝚖𝚊 𝚟𝟸 es un marco de reconocimiento automatizado de Inteligencia de Fuentes Abiertas OSINT Pasivo 𝚔𝚊𝚛𝚖𝚊 𝚟𝟸 puede ser utilizado por investigadores de seguridad informática, testers de penetración, cazadores de bugs para encontrar información profunda, más activos, IPs que evitan...

ROS-20260923-73-0050

The vulnerability of the acmbind function in the drivers/usb/gadget/function/facm.c file of the Linux device driver framework is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

fakelogonscreen

FakeLogonScreen FakeLogonScreen is a utility to fake the Windows logon screen in order to obtain the user's password. The password entered is validated against the Active Directory or local machine to make sure it is correct and is then displayed to the console or saved to disk. It can either be...

osquery

osquery osquery 是一个基于 SQL 的操作系统检测、监控和分析框架。 支持 Linux、macOS 和 Windows。 信息和资源 主页：osquery.io 下载：osquery.io/downloads 文档：ReadTheDocs Stack Overflow：Stack Overflow 问题 表结构：osquery.io/schema Slack：浏览存档 或 加入对话 构建状态： CII 最佳实践： 什么是 osquery？ osquery 将操作系统暴露为一个高性能的关系型数据库。这允许你编写基于 SQL 的查询来探索操作系统数据。通过 osquery，S...

barq

barq barq: The AWS Cloud Post Exploitation framework! What is it? barq is a post-exploitation framework that allows you to easily perform attacks on a running AWS infrastructure. It allows you to attack running EC2 instances without having the original instance SSH keypairs. It also allows you to...