850724 matches found
CVE-2020-11851
CVE-2020-11851 Remote Code Execution vulnerability on ArcSight Logger via ArcSight Management Center https://nvd.nist.gov/vuln/detail/CVE-2020-11851 Executive Summary Vulnerability Background ArcSight Logger is a comprehensive log management solution that eases compliance burdens and enables fast...
egressbuster
EgressBuster Copyright 2015 TrustedSec - EgressBuster Written by: David Kennedy ReL1K Company: TrustedSec DISCLAIMER: This is only for testing purposes and can only be used where strict consent has been given. Do not use this for illegal purposes period. Please read the LICENSE for the licensing ...
GyoiThon
GyoiThon : Next generation penetration test tool Japanese page is here. Presentation January 25th,2018:JANOG41 March 23th,2018:Black Hat ASIA 2018 Arsenal August 12th,2018:DEFCON26 DemoLabs October 24th,2018:OWS in CSS2018 November 3rd,2018:AV TOKYO 2018 HIVE December 22-23th,2018:SECCON YOROZU...
onionscan
ĀæQuĆ© es OnionScan? OnionScan es una herramienta gratuita y de cĆ³digo abierto para investigar la Dark Web. A pesar de todas las increĆbles innovaciones tecnolĆ³gicas en el Ć”mbito del anonimato y la privacidad, siempre existe una amenaza constante que no tiene un parche tecnolĆ³gico efectivo: el erro...
PiKarma
root@kitploit: āāāāāāā āāāāāā āāā āāāāāā āāāāāāā āāāā āāāā āāāāāā āāāāāāāāāāāāāā āāāāāāāāāāāāāāāāāāāāāāāāā āāāāāāāāāāāāā āāāāāāāāāāāāāāāāāā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā āāāāāāā āāāāāāāāāā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā āāā āāāāāā āāāāāā āāāāāā āāāāāā āāā āāāāāā āāā āāā āāāāāā āāāāāā...
Pentest-Tools-Collection
Pentest-Tools-Collection Active Directory AMSI https://amsi.fail/ Colecciones de herramientas WinPwn https://github.com/S3cur3Th1sSh1t/WinPwn Import-Module .\WinPwn.ps1 iexnew-object net.webclient.downloadstring'https://raw.githubusercontent.com/S3cur3Th1sSh1t/WinPwn/master/WinPwn.ps1' Ghostpack...
sj v2.8.2
sj Swagger Jacker sj is a command line tool designed to assist with auditing of exposed Swagger/OpenAPI definition files by checking the associated API endpoints for weak authentication. It also provides command templates for manual vulnerability testing. It does this by parsing the definition fi...
killchain
killchain āKill Chainā es una consola unificada con un anonimizador que realizarĆ” estas etapas de ataques: Reconnaissance Weaponization Delivery Exploit Installation Command & Control And Actions Los conjuntos de herramientas dependientes son:...
CVE-2022-22980
SpEL RCE Exploit - CVE-2022-22980 Exploit for remote code execution RCE on Spring Data via SpEL injection Spring Expression Language. Descriptions Vulnerability The box exposes an endpoint /search that accepts a trackingid parameter vulnerable to SpEL injection. This injection allows the executio...
cisco-rv-rce-poc
CVE-2023-20048 ā Cisco RV Series PoC & Exploit ā WARNING: For authorized testing only. Do not use against systems you do not own or have written permission to test. This is a Proof of Concept for authorized testing only. What this is Small repository with: CiscoPoc.py ā harmless PoC to check for...
go_parser
Otro analizador de binarios Golang para IDAPro InglĆ©s |äøę NOTA : Ahora la Ćŗltima rama master es la versiĆ³n de Python3. La rama master anterior se ha cambiado a la rama py2 , y temporalmente no se mantiene. Instrucciones para la rama Python3 Esta versiĆ³n se desarrolla y prueba en macOS/Windows,...
MITM_Intercept
MITMIntercept A little bit less hackish way to intercept and modify non-HTTP protocols through Burp and others with SSL and TLS interception support. This tool is for researchers and applicative penetration testers that perform thick clients security assesments. An improved version of the fantast...
PSPKIAudit
PSPKIAudit PowerShell toolkit for auditing Active Directory Certificate Services AD CS. It is built on top of PKISolution's PSPKI toolkit Microsoft Public License. This repo contains a newer version of PSPKI than what's available in the PSGallery see the PSPKI directory. Vadims Podans the creator...
RedPersist
RedPersist RedPersist is a Windows Persistence tool written in C Compiling Project Below 3rd party libraries are used in this project. TaskScheduler https://github.com/dahall/TaskScheduler Fody https://github.com/Fody/Fody Load the Visual Studio project up and go to "Tools" "NuGet Package Manager...
Merlion
Merlion: A Machine Learning Library for Time Series Table of Contents 1. Introduction 2. Comparison with Related Libraries 3. Installation 4. Documentation 5. Getting Started 1. Anomaly Detection 2. Forecasting 6. Evaluation and Benchmarking 7. Technical Report and Citing Merlion Introduction...
not-going-anywhere
Resumen Not Go-ing Anywhere es un conjunto de programas Golang vulnerables pensados para mostrar vulnerabilidades comunes y proporcionar un banco de pruebas para que los usuarios encuentren, corrijan y remedien vulnerabilidades de Golang. EstĆ” modelado a partir de nuestro repositorio not so smart...
not-going-anywhere
Overview Not Go-ing Anywhere is a set of vulnerable Golang programs meant to show common vulnerabilities and provide a test bed for users to find, fix, and remediate Golang vulnerabilities. It is modeled on our not so smart contracts repository, and includes a mix of two types of programs: a...
cacti-cve-2022-46169-exploit
CVE-2022-46169 PoC: Authentication Bypass and Remote Code Execution This repository contains a PoC for the CVE-2022-46169 vulnerability, which allows an attacker to bypass authentication and execute arbitrary code remotely on the affected system. This vulnerability affects Cacti, version 1.2.22,...
undetected-chromedriver
undetectedchromedriver https://github.com/ultrafunkamsterdam/undetected-chromedriver Optimized Selenium Chromedriver patch which does not trigger anti-bot services like Distill Network / Imperva / DataDome / Botprotect.io Automatically downloads the driver binary and patches it. Tested until...
rebrowser-patches
šŖ Patches for undetectable browser automation This repo contains patches to enhance popular web automation libraries. Specifically, it targets the puppeteer and playwright packages. Some aspects of automation libraries or browser behavior cannot be adjusted through settings or command-line...