Mandiant-Azure-AD-Investigator

Mandiant Azure AD Investigator Focusing on UNC2452 TTPs Overview This repository contains a PowerShell module for detecting artifacts that may be indicators of UNC2452 and other threat actor activity. Some indicators are "high-fidelity" indicators of compromise, while other artifacts are so calle...

Dent

THIS REPOSITORY HAS BEEN ARCHIVED To view the latest version of Dent or to submit an issue, reference https://github.com/Tylous/Dent. Dent More Information If you want to learn more about the techniques utlized in this framework please take a look at this article. Description This framework...

Parrot-Security-Penetration-Testing-Lab

🔴 Parrot Security Penetration Testing Lab Overview This p...

CVE-2023-30258-Magnus-Billing-v7-Command-Injection-PoC

CVE-2023-30258 — Magnus Billing v7 명령 주입 PoC 인증되지 않은 명령 주입 취약점이 Magnus Billing v7.3.0에 존재합니다. icepay.php의 democ GET 매개변수가 삭제 없이 셸 함수에 직접 전달되어 웹 서버 사용자 권한으로 임의 명령 실행이 가능합니다. 주입은 블라인드입니다 — 출력이 HTTP 응답에 반영되지 않습니다 — 따라서 이 익스플로잇은 각 명령의 출력을 웹루트의 파일로 리다이렉트하고 HTTP를 통해 다시 가져옵니다. 작동 방식 1...

Codecepticon

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/Codecepticon for the latest version. Codecepticon Table of Contents Introduction Read This First Prerequisites Visual Studio Roslyn Compiler Check to see if it works Using Codecepticon C VBA/VB6 PowerShell Obfuscating Command Li...

authcov

AuthCov Web app authorisation coverage scanning. Introduction AuthCov crawls your web application using a Chrome headless browser while logged in as a pre-defined user. It intercepts and logs API requests as well as pages loaded during the crawling phase. In the next phase it logs in under a...

DomainDouche

DomainDouche Abusing SecurityTrails domain suggestion API to find potentially related domains by keyword and brute force. Use it while it still works 🙃 aaaand it's dead Also, hmu on Mastodon: @[email protected] Demo: Usage: root@kitploit: usage: domaindouche.py -h -n N -c COOKIE -a USERAGENT...

Spartacus

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/Spartacus for the latest version. Spartacus DLL/COM Hijacking Toolkit Why "Spartacus"? If you have seen the film Spartacus from 1960, you will remember the scene where the Romans are asking for Spartacus to give himself up. The...

Mangle

THIS REPOSITORY HAS BEEN ARCHIVED To view the latest version of Mangle or to submit an issue, reference https://github.com/Tylous/Mangle. Mangle Authored By Tyl0us Featured at Source Zero Con 2022 Mangle is a tool that manipulates aspects of compiled executables .exe or DLL. Mangle can remove kno...

fingerprintx

Возможности • Установка • Использование • Запуск fingerprintx • Использование в качестве библиотеки • Почему не nmap? • Примечания • Благодарности fingerprintx — это утилита, аналогичная httpx, которая также поддерживает снятие отпечатков таких сервисов, как RDP, SSH, MySQL, PostgreSQL, Kafka и...

fingerprintx

Features • Installation • Usage • Running fingerprintx • Using as a library • Why not nmap? • Notes • Acknowledgements fingerprintx is a utility similar to httpx that also supports fingerprinting services like as RDP, SSH, MySQL, PostgreSQL, Kafka, etc. fingerprintx can be used alongside port...

LambdaGuard

LambdaGuard AWS Lambda is an event-driven, serverless computing platform provided by Amazon Web Services. It is a computing service that runs code in response to events and automatically manages the computing resources required by that code. LambdaGuard is an AWS Lambda auditing tool designed to...

RedEye

RedEye : Red Team C2 Log Visualization ⚠️ This Repo Currently in Maintenance Mode ⚠️ This GitHub repository is no longer under active development. We'll review community issues and pull requests for bug fixes, but won't consider any new feature additions. RedEye is an open-source analytic tool...

WEASEL

WEASEL: A Stealthy DNS Beacon WEASEL is a small in-memory implant using Python 3 with no dependencies. The beacon client sends a small amount of identifying information about its host to a DNS zone you control. WEASEL server can task clients to execute pre-baked or arbitrary commands. WEASEL is a...

dumpscan

Публичная разработка этого инструмента приостановлена, но работа над ним продолжается в частном порядке. Ожидайте масштабного обновления в Q3/Q4 2024. Dumpscan — это инструмент командной строки, предназначенный для извлечения и дампа секретов из ядра и форматов Windows Minidump. Анализ дампов ядр...

dumpscan

Public development on this tool has been paused but is still being worked on privately. Expect a massive update Q3/Q4 2024. Dumpscan is a command-line tool designed to extract and dump secrets from kernel and Windows Minidump formats. Kernel-dump parsing is provided by volatility3. Features x509...

Havoc

Havoc Havoc is a modern and malleable post-exploitation command and control framework, created by@C5pider. Quick Start Please see the Wiki for complete documentation. Havoc works well on Debian 10/11, Ubuntu 20.04/22.04 and Kali Linux. It's recommended to use the latest versions possible to avoid...

kubeaudit

It is now a requirement for clusters to run Kubernetes =1.19. override labels with unregistered kubernetes.io annotations will be deprecated. It'll soon be a requirement to use kubeaudit.io instead. Refer to this discussion for additional context. 🚨 Deprecation Notice 🚨 Kubeaudit is planned for...

EAST

Extensible Azure Security Tool Extensible Azure Security Tool Later referred as E.A.S.T is tool for assessing Azure and to some extent Azure AD security controls. Primary use case of EAST is Security data collection for evaluation in Azure Assessments. This information JSON content can then be us...

unshackle

End of support ⚠ the project is now archived and will no longer be worked on because of the time that is needed to maintain this project and testing it on VMware in a not-so-good pc, Unshackle - Password Bypass Tool Unshackle is an open-source tool to bypass Windows and Linux user passwords from ...