scrying

NCC Group Scrying A new tool for collecting RDP, web and VNC screenshots all in one place This tool is still a work-in-progress and should be mostly usable but is not yet complete. Please file any bugs or feature requests as GitHub issues Motivation Since Eyewitness recently dropped support for R...

dissect

dissect Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT part of NCC Group. This project is a meta package, it will install all other Dissect modules wi...

setup-ipsec-vpn

English | 简体中文 | 繁體中文 | 日本語 | Русский Scripts de instalación automática de servidor VPN IPsec Configura tu propio servidor VPN IPsec en solo unos minutos, con IPsec/L2TP, Cisco IPsec e IKEv2. Una VPN IPsec cifra tu tráfico de red, de modo que nadie entre tú y el servidor VPN pueda espiar tus dato...

CVE-2023-38545-sample

Quick description This showcases the cURL CVE-2023-38545. It is as lightweight as I could make it. Setup First, build the Docker Image: docker build . -t cveimage Next, we can simply run the image file, creating a temporary Docker Container which will get deleted once the container is stopped:...

Exploit for CVE-2026-71294

Cotonti CommentsWidget PHP Object Injection PoC Safe local pr...

slsa

SLSA "salsa" is Supply-chain Levels for Software Artifacts SLSA pronounced "salsa" is a security framework from source to service, giving anyone working with software a common language for increasing levels of software security and supply chain integrity. It’s how you get from safe enough to bein...

beef

=============================================================================== root@kitploit: Copyright c 2006-2026 Wade Alcorn - [email protected] Browser Exploitation Framework BeEF - https://beefproject.com See the file 'doc/COPYING' for copying permission...

flightsim

Simulador de Vuelo de Red flightsim es una utilidad ligera utilizada para generar tráfico de red malicioso y ayudar a los equipos de seguridad a evaluar controles de seguridad y visibilidad de red. La herramienta realiza pruebas para simular tunelización DNS, tráfico DGA, solicitudes a destinos C...

flightsim

Network Flight Simulator flightsim is a lightweight utility used to generate malicious network traffic and help security teams to evaluate security controls and network visibility. The tool performs tests to simulate DNS tunneling, DGA traffic, requests to known active C2 destinations, and other...

awesome

Check out my macOS app Supercharge Elevate your Mac experience My open source work is supported by the community Special thanks to: Fast remote container builds and GitHub Actions runners. Get the most out of every conversation. AI-powered meeting notes, automations, and search. Give AI agents th...

CVE-2017-2370

0x00. Introducción Esta escalada de privilegios explota una vulnerabilidad en machvoucherextractattrrecipetrap, y el núcleo del método de explotación consiste en usar mensajes MACHMSGOOLPORTSDESCRIPTOR. Respecto a machmsg ool, en términos simples, cuando se envía un msg que contiene un ool...

fi6s

fi6s: Fast IPv6 scanner fi6s is an IPv6 port scanner designed to be fast, aimed at Internet scanning and discovery. This is achieved by sending and processing raw packets asynchronously. The design and goal is pretty similar to Masscan, though it is not as full-featured. Please take note of the...

Active-Directory-Exploitation-Cheat-Sheet

Hoja de referencia de explotación de Active Directory Esta hoja de referencia contiene métodos comunes de enumeración y ataque para Active Directory de Windows. ℹ️ Este repositorio fue creado por Nikos Katsiopis y Nikos Vourdas. Esta hoja de referencia está inspirada en el repositorio...

xcrawl3r

xcrawl3r xcrawl3r is a command-line utility designed to recursively spider webpages for URLs. It works by actively traversing websites - following links embedded in webpages, and parsing files including sitemaps & robots.txt - to uncover every URL. Unlike xurlfind3r that doesn't interact directly...

mkPIVM

Read the research paper written for 1.0.0. mkPIVM is a polymorphic position-independent shellcode virtualizer for Windows x86 and x64 Linux soon. Feed it raw shellcode. It emits another raw blob: a small virtual machine that interprets a lifted, encrypted-at-rest version of your original...

WeBaCoo

| | | | | \ / \ | | | | | | / / | / / | |/| |/ \ / | | / \ / \ \ /\ / / | / / | | /\ | | / / / ,| // / root@kitploit: Script-Kit de Cookie Backdoor Web @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ Escrito por: Anestis Bechtsoudis @ bechtsoudis.com Copyright C 2011-2012 Anestis Bechtsoudis Descargo...

fibratus

Fibratus Security sensor for realtime threat detection and protection Get Started » Docs • Rules • Filaments • Download • Discussions Fibratus detects and eradicates advanced attacker tradecraft, malware, and emerging threats by scrutinizing and asserting a wide spectrum of system events against ...

StandIn

StandIn StandIn es un pequeño conjunto de herramientas para la post-explotación de AD. StandIn surgió porque recientemente en xforcered necesitábamos una solución nativa .NET para realizar delegación restringida basada en recursos. Sin embargo, StandIn se expandió rápidamente para incluir varias...

GoEnumerator

ACERCA DE GoEnumerator GoEnumerator es una herramienta que estoy escribiendo por diversión pero también para usar en mi propia enumeración, por lo que seguiré añadiendo más funciones para intentar acelerar los primeros pasos en cualquier enumeración de CTF o prueba de penetración profesional, e i...

CVE-2023-38646

CVE-2023-38646 Script en Python para explotar CVE-2023-38646 Metabase Pre-Auth RCE mediante inyección SQL El script realizará una solicitud GET a /api/session/properties para obtener el token de configuración y evaluar la explotabilidad del objetivo. Si es vulnerable, imprimirá el token de...