threatcl

threatcl Modellazione delle minacce con HCL Cosa è successo a hcltm? hcltm è stato rinominato in threatcl. Benvenuti! Panoramica !TIP Vuoi leggere la nuova documentazione? Vai su threatcl.dev Ci sono molti modi diversi in cui un modello di minaccia può essere documentato. Da un semplice file di...

flashlight

Automated Information Gathering Tool for Penetration Testers Videos : https://www.youtube.com/watch?v=EUMKffaAxzs&list=PL1BVM6VWlmWZOv9Hv8TV2v-kAlUmvA5g7&index=4 https://www.youtube.com/watch?v=qCgW-SfYl1c&list=PL1BVM6VWlmWZOv9Hv8TV2v-kAlUmvA5g7&index=5...

inquisitor

Inquisitor Notice This project is only partially complete and I have yet to implement many of the features described in the following blog post I made: https://penafieljlm.com/2017/07/14/inquisitor/. Inquisitor is a simple tool for gathering information on companies and organizations through the...

M5PORKCHOP

root@kitploit: Volume Zero, Issue 3, Phile 1 of 1 M5PORKCHOP README v0.1.8b-PSTH ^^ oo\ \ /\ ||----w | || || yes that's a cow. the pig ate the pig art budget. the horse was unavailable for comment. 67% of skids skip READMEs. 100% of those skids report bugs we documented. the horse thinks this is...

rekono

Automate the recon, keep your time for the part that actually needs a hacker Think about how an assessment really starts. You gather public information about the target. You discover its hosts, enumerate their ports and identify the services behind them. Then you run a more specific tool against...

CVE-2024-32030-Nuclei-Template

CVE-2024-32030 Nuclei-Vorlage Beschreibung Dieses Repository enthält eine Nuclei-Vorlage zur Erkennung der Sicherheitslücke CVE-2024-32030. Diese Schwachstelle ermöglicht eine Remote-Code-Ausführung über JMX Metrics Collection JNDI Resolution. Details zur Sicherheitslücke ID: CVE-2024-32030 Name:...

CVE-2021-21300

CVE-2021-21300 In mehreren Git-Versionen wird die Verarbeitung von symbolischen Links Symlinks nicht streng gehandhabt. Wenn Dateien auf einem Dateisystem, das zwischen Groß- und Kleinschreibung unterscheidet z. B. Linux, in Git hochgeladen werden und dann ein Host mit einem Dateisystem, das nich...

CVE-2018-11776-Python-PoC

CVE-2018-11776-Python-PoC hook-s3c github.com/hook-s3c, @hooks3c su twitter Test funzionante in Python e PoC per CVE-2018-11776, originariamente apparso su; https://github.com/hook-s3c/CVE-2018-11776-Python-PoC Cosa sta succedendo? Man Yue Mo di Semmle ha divulgato una vulnerabilità RCE in Struts...

POC-ES-File-Explorer-CVE-2019-6447

PoC ES File Explorer 4.1.9.7.4 CVE-2019-6447 Dies ist eine sehr einfache Implementierung in bash des CVE-2019-6447 PoC. Es verwendet im Grunde curl, um die Anfragen mit den richtigen Parametern zu senden. Ich habe es erstellt, da ich während eines CTF nach einem ähnlichen Skript suchte und keins...

getaltname

GSAN - Get Subject Alternative Names GSAN is a tool that can extract Subject Alternative Names SAN found in SSL Certificates directly from https servers which can provide you with DNS names subdomains or virtual servers. It doesn't rely on Certificate Transparency logs, it connects directly to th...

CVE-2024-28995-Nuclei-Template

Шаблон Nuclei для CVE-2024-28995 Проверяет наличие уязвимости обхода каталога в Serv-U версии 15.4.2 и ниже, позволяющей читать чувствительные файлы, такие как /etc/passwd. Детали шаблона root@kitploit: id: CVE-2024-28995 info: name: Serv-U Directory Traversal Vulnerability author: Hüseyin TINTAŞ...

DSP

DockerSecurityPlayground Docker Security Playground è un'applicazione che ti permette di: Creare scenari di rete e di sicurezza di rete , per comprendere protocolli di rete, regole e problemi di sicurezza installando DSP sul tuo PC. Imparare tecniche di penetration testing simulando scenari di...

shodan

Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...

zeek-jetdirect

Zeek Package for zeek-jetdirect .. image::...

TLS-Attacker

TLS-Attacker TLS-Attacker è un framework basato su Java per analizzare librerie TLS. È in grado di inviare messaggi di protocollo arbitrari in un ordine arbitrario al peer TLS e di definire le loro modifiche tramite un'interfaccia fornita. Questo offre allo sviluppatore l'opportunità di definire...

ARTLAS

ARTLAS Sistema di Analisi dei Log di Apache in Tempo Reale Analizzatore di log Apache in tempo reale, basato sulle prime 10 vulnerabilità OWASP, identifica tentativi di esplorazione nella tua applicazione web e notifica te o il tuo team di incidenti su Telegram, Zabbix e Syslog/SIEM. ARTLAS...

CVE-2023-41425

Wonder CMS RCE | | विवरण : XSS से RCE, Wonder CMS 3.2.0 evil/evil.php EOF zip -r evil.zip evil/ JS payload that will install the new theme cat form+action=" EOF...

subdomain3

Subdomain3 README.md inChinese 中文 Description Subdomain3 is a new generation of tool , It helps penetration testers to discover more information in a shorter time than other tools.The information includes subdomains, IP, CDN, and so on. Please enjoy it. Screenshot medium pattern for speed Feature...

ldap_shell

LDAP shell Questo progetto è un fork di ldapshell da Impacket. Fornisce una shell interattiva per l'enumerazione e la manipolazione di Active Directory tramite i protocolli LDAP/LDAPS, risultando utile sia per amministratori di sistema che per professionisti della sicurezza. Installazione Questi...

bscan

:mag: an asynchronous target enumeration tool :magright: Synopsis bscan is a command-line utility to perform active information gathering and service enumeration. At its core, bscan asynchronously spawns processes of well-known scanning utilities, repurposing scan results into highlighted console...