vScalation-CVE-2021-22015

vScalation CVE-2021-22015 Escalada de Privilegios Local en VMWare vCenter El grupo de investigación de Pentera descubrió una vulnerabilidad en el programa vCenter Server de VMWare que afecta al software de VMWare instalado en 500,000 organizaciones en todo el mundo, responsables de gestionar sus...

Untrue

Untrue Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Richard Turnbull, richard dot turnbull at nccgroup dot com http://www.github.com/nccgroup/untrue Released under AGPL, see LICENSE for more information Description Untrue is a tool for checking passwords agains...

inside-pegasus

Inside Pegasus: key documents from WhatsApp v. NSO Group A curated set of NSO Group internal documents, product materials and sworn testimony that entered the public record in WhatsApp Inc. and Meta Platforms, Inc. v. NSO Group Technologies Limited and Q Cyber Technologies Limited , Case No...

zaproxy

The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...

NoEyes

NoEyes 🔒 Secure Terminal Chat End-to-end encrypted group chat, private messages, and file transfer in your terminal. The server is a blind forwarder: it cannot read your messages, does not know your username, does not know the room you are in, and cannot link any two messages to the same person,...

scrying

NCC Group Scrying Una nueva herramienta para recopilar capturas de pantalla de RDP, web y VNC en un solo lugar Esta herramienta aún está en desarrollo y debería ser mayormente utilizable, pero aún no está completa. Por favor, reporta cualquier error o solicitud de funcionalidad como issues de...

slsa

SLSA "salsa" is Supply-chain Levels for Software Artifacts SLSA pronounced "salsa" is a security framework from source to service, giving anyone working with software a common language for increasing levels of software security and supply chain integrity. It’s how you get from safe enough to bein...

jarm

JARM Please read the initial JARM blog post for more information. JARM is an active Transport Layer Security TLS server fingerprinting tool. JARM fingerprints can be used to: Quickly verify that all servers in a group have the same TLS configuration. Group disparate servers on the internet by...

FrisbeeLite

Frisbee Lite A GUI-based USB device fuzzer Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Andy Davis, andy dot davis at nccgroup dot com https://www.github.com/nccgroup/FrisbeeLite Released under AGPL see LICENSE for more information Documentation In order to get...

Cartographer

Cartographer Mapping Out Code Coverage Developed by Austin Peavy - https://github.com/aus10pv Released as open source by NCC Group Plc - https://www.nccgroup.com/ Released under the Apache 2.0 license see LICENSE for more information...

CVE-2024-10915

CVE-2024-10915 - Exploit de Inyección de Comandos en D-Link NAS Este exploit basado en Python aprovecha una vulnerabilidad de inyección de comandos en varios productos D-Link NAS a través del endpoint /cgi-bin/accountmgr.cgi?cmd=cgiuseradd. La vulnerabilidad permite a atacantes no autenticados...

ransomware-simulator

Ransomware Simulator NCC Ransomware Simulator Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Donato Ferrante, donato dot ferrante at nccgroup dot trust https://www.github.com/nccgroup/ransomware-simulator Released under AGPL see LICENSE for more information To...

SharpGPOAbuse

SharpGPOAbuse SharpGPOAbuse es una aplicación .NET escrita en C que puede utilizarse para aprovechar los derechos de edición de un usuario sobre un Objeto de Directiva de Grupo GPO con el fin de comprometer los objetos controlados por ese GPO. Se pueden encontrar más detalles en la siguiente...

duf

duf Disk Usage/Free Utility Linux, BSD, macOS & Windows Features User-friendly, colorful output Adjusts to your terminal's theme & width Sort the results according to your needs Groups & filters devices...

GPOHound

GPOHound GPOHound es una herramienta para volcar y analizar Objetos de directiva de grupo GPO extraídos del recurso compartido SYSVOL. Proporciona un formato estructurado y formalizado para ayudar a descubrir configuraciones incorrectas, ajustes inseguros y rutas de escalada de privilegios en...

demiguise

Demiguise - Herramienta de cifrado HTA Publicado como código abierto por NCC Group Plc - http://www.nccgroup.trust/ Desarrollado por Richard Warren, richard punto warren arroba nccgroup punto trust http://www.github.com/nccgroup/demiguise Publicado bajo AGPL, consulte LICENSE para más información...

CVE-2019-16172

CVE-2019-16172 The CVE-2019-16172 Scanner is designed to check LimeSurvey instances for the stored XSS vulnerability. CVE Descriptions CVE-2019-16172 Description: CVE-2019-16172 is a stored XSS vulnerability found in LimeSurvey versions prior to 3.17. The vulnerability arises due to improper...

CVE-2025-24118

TRAVERTINE CVE-2025-24118 Informe: https://jprx.io/cve-2025-24118 Uso root@kitploit: gcc TRAVERTINE.c -o travertine chgrp everyone travertine chmod g+s travertine ./travertine...

gpblib

GPBLib GPBLib contains the common code used by the GroupPolicyBackdoor, OUned and GPOddity projects for GPO manipulations. The migration of the tools to the use of the present library is still in progress...

GPOddity

GPOddity El proyecto GPOddity, cuyo objetivo es automatizar los vectores de ataque a GPO mediante NTLM relaying y más. Para más detalles sobre el ataque y una demostración de cómo usar la herramienta, consulte el artículo asociado disponible en:...