mimikatz

mimikatz mimikatz is a tool I've made to learn C and make somes experiments with Windows security. It's now well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. .. mimikatz 2....

gha-lab-6c3094af9e

Автоматизированный исследовательский артефакт — не вышестоящий проект. Этот репозиторий — одноразовая лаборатория, созданная автоматизированным конвейером для магистерской диссертации в Université Laval по воспроизведению опубликованных уязвимостей рабочих процессов GitHub Actions. Это дословный...

Argus

Argus Ce dépôt contient le code de notre article USENIX Security '23 "ARGUS: A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions". Argus est un outil d'analyse de sécurité complet spécialement conçu pour GitHub Actions. Construit dans le but d'améliorer la sécurité des...

octohook

octohook Tunnel de webhook Git pour C2 Installation apt-get update && apt-get upgrade -y apt-get install python3-pip git -y pip install --upgrade pip pip install virtualenv virtualenv -p python venv . venv/bin/activate git clone https://github.com/dsnezhkov/octohook pip install prompttoolkit...

gha-lab-ed7a1740c4

Автоматизированный исследовательский артефакт — не вышестоящий проект. Этот репозиторий — одноразовая лаборатория, созданная автоматизированной системой для магистерской диссертации в Université Laval по воспроизведению опубликованных уязвимостей рабочих процессов GitHub Actions. Это точный снимо...

unicode-control-characters-action

Action pour caractères de contrôle Unicode Une GitHub Action pour détecter les caractères de contrôle Unicode à l'aide de l'outil de diagnostic Red Hat https://access.redhat.com/security/vulnerabilities/RHSB-2021-007 afin de détecter les attaques de type Trojan Source RHSB-2021-007...

libperf_event_exploit

Ce dépôt a été déplacé vers https://github.com/android-rooting-tools/libperfeventexploit...

gh-dork

gh-dork Supply a list of dorks and, optionally, one of the following: a user -u a file with a list of users -uf an organization -org a file with a list of organizations -of a repo -r You can also pass: an output directory to store results -o a filename to store valid items, if your users or org...

gh-dork

gh-dork Fournissez une liste de dorks et, optionnellement, l'un des éléments suivants : un utilisateur -u un fichier contenant une liste d'utilisateurs -uf une organisation -org un fichier contenant une liste d'organisations -of un dépôt -r Vous pouvez également passer : un dossier de sortie pour...

threat-research

Ce dépôt contient des IoC et des règles YARA liés à la recherche sur les menaces de Threatray, qui peuvent être trouvés ici : https://www.threatray.com/blog Pour les mises à jour, les points forts de la recherche et les analyses, suivez-nous sur X Twitter : https://x.com/ThreatrayLabs Le dépôt es...

jsql-injection

Description jSQL Injection is a lightweight application used to find database information from a server. It's free , open source and cross-platform for Windows, Linux and Mac, and it works with Java from version 21 to 25. jSQL Injection is also part of the official penetration testing distributio...

deepsecrets

DeepSecrets - a better tool for secret scanning !WARNING Active development was switched to the creator's fork at https://github.com/ntoskernel/deepsecrets. This repository will not receive any updates...

git-all-secrets

git-all-secrets About git-all-secrets is a tool that can: Clone multiple public/private github repositories of an organization and scan them, Clone multiple public/private github repositories of a user that belongs to an organization and scan them, Clone a single public/private repository of an...

git-all-secrets

git-all-secrets À propos git-all-secrets est un outil qui peut : Cloner plusieurs dépôts GitHub publics/privés d'une organisation et les scanner, Cloner plusieurs dépôts GitHub publics/privés d'un utilisateur appartenant à une organisation et les scanner, Cloner un seul dépôt public/privé d'une...

CandidATS 3.0.0 - Cross-Site Scripting

CandidATS 3.0.0 contains a cross-site scripting vulnerability via the page parameter of the ajax.php resource. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

Tiki Wiki CMS Groupware 7.0 Cross-Site Scripting

Tiki Wiki CMS Groupware 7.0 is vulnerable to cross-site scripting via the GET "ajax" parameter to snarfajax.php. id: CVE-2011-4336 info: name: Tiki Wiki CMS Groupware 7.0 Cross-Site Scripting author: pikpikcu severity: medium description: Tiki Wiki CMS Groupware 7.0 is vulnerable to cross-site...

Froxlor < 0.10.38.2. - HTML Injection

HTML Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2. id: CVE-2022-3869 info: name: Froxlor TEST" matchers-condition: and matchers: - type: word part: body words: - 'The message to ""TEST" failed' - type: word part: header words: - "text/html" - type: status status: - 200 d...

Mastodon Prototype Pollution Vulnerability

The GitHub repository mastodon/mastodon prior to 3.5.0 contains a Prototype Pollution vulnerability. id: CVE-2022-0432 info: name: Mastodon Prototype Pollution Vulnerability author: pikpikcu severity: medium description: The GitHub repository mastodon/mastodon prior to 3.5.0 contains a Prototype...

nitely/spirit 0.12.3 - Open Redirect

Multiple Open Redirect in GitHub repository nitely/spirit prior to 0.12.3. id: CVE-2022-0869 info: name: nitely/spirit 0.12.3 - Open Redirect author: ctflearner severity: medium description: | Multiple Open Redirect in GitHub repository nitely/spirit prior to 0.12.3. impact: | An attacker can...

OpenEMR < 7.0.1 - Cross-site Scripting

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.1. id: CVE-2023-2949 info: name: OpenEMR 7.0.1 - Cross-site Scripting author: ritikchaddha,princechaddha severity: medium description: | Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr...