chronix

Chronix Self-hosted collaborative workspace for pentesters and red team operators. Captures notes, commands, outputs, and operational context during security engagements. Quick Start Install pipx install git+https://github.com/IceCubeSandwich/chronix Initialize creates account and session secret...

CVE-2023-34039

CVE-2023-34039 POC لـ CVE-2023-34039: VMWare Aria Operations for Networks vRealize Network Insight - تنفيذ أوامر عن بُعد RCE عبر مفتاح SSH ثابت التحليل الفني يمكن العثور على تحليل السبب الجذري للثغرة في مدونتي: https://summoning.team/blog/vmware-vrealize-network-insight-rce-cve-2023-34039/ الملخص...

bbrecon

This project is no longer maintained and I took the crawling infrastructure offline. The audience was not big enough to justify maintaining it. Bug Bounty Recon bbrecon is a free Recon-as-a-Service for bug bounty hunters and security researchers. The API aims to provide a continuously up-to-date...

bbrecon

لم يعد هذا المشروع قيد الصيانة وقد أزلت البنية التحتية للزحف عن الإنترنت. لم يكن الجمهور كبيرًا بما يكفي لتبرير صيانته. Bug Bounty Recon bbrecon هي خدمة استطلاع مجانية Recon-as-a-Service لصائدي الثغرات الأمنية والباحثين في الأمن السيبراني. تهدف واجهة API إلى توفير خريطة محدثة باستمرار لسطح الهجوم...

flatpak

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. See https://flatpak.org/ for more information. Flatpak is available in the package repositories of most Linux distributions and can be installed from there. See https://flatpak.org/setup/ for quic...

Auto_EAP

AutoEAP Introduction Published Sepetember 15, 2016 AutoEAP.py is a script designed to perform automated brute-force authentication attacks against various types of EAP networks. These types of wireless networks provide an interface to facilitate password guessing of domain credentials as radius...

Covenant

Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraft easier, and serve as a collaborative command and control platform for red teamers. Covenant is an ASP.NET Core, cross-platform application that includes a...

OneAlert

OneAlert AI Security OS Open-source autonomous cyber defense for industrial networks AI agents that detect, investigate, hunt, and respond to threats across your OT/ICS infrastructure — with human approval gates and full audit trails. Demo Setup · Features · Quick Start · Architecture Try It Now...

PrivKit

PrivKit A collection of Beacon Object Files BOFs for Windows Local Privilege Escalation Checks. Description PrivKit is an open-source tool that empowers red teamers and penetration testers to quickly identify common Windows local privilege escalation vectors using Cobalt Strike Beacon Object File...

Damn-Vulnerable-Android-Components

The Damne Vulnerable Android Components - DVAC The sieve reborn! Damn Vulnerable Android Components DVAC is an educational Android application intentionally designed to expose and demonstrate vulnerabilities related to various Android components such as Activities, Intents, Content Providers, and...

moniorg

moniorg Description By looking through CT logs an attacker can gather a lot of information about organization's infrastructure i.e. internal domains,email addresses in a completly passive manner. moniorg leverage certificate transparency logs to monitor for newly issued domains based on...

moniorg

moniorg الوصف من خلال النظر في سجلات الشهادات CT logs يمكن للمهاجم جمع الكثير من المعلومات حول البنية التحتية للمؤسسة مثل النطاقات الداخلية وعناوين البريد الإلكتروني بطريقة سلبية تمامًا. يستفيد moniorg من سجلات الشفافية Certificate Transparency logs لمراقبة النطاقات الصادرة حديثًا بناءً على حقل...

columbo

Columbo Columbo is a computer forensic analysis tool used to simplify and identify specific patterns in compromised datasets. It breaks down data to small sections and uses pattern recognition and machine learning models to identify adversaries behaviour and their possible locations in compromise...

spybrowse

BrowseSpy Be sure to change the ftp variables throughout the code, these variables contain the username, password, & IP address of the FTP server which receives the files. This code will do the following: 1. Copy itself into the %TMP% directory & name itself ursakta.exe 2. Add a registry entry to...

oproxy

oproxy oproxy is a local HTTP, HTTPS, HTTP/3, WebSocket, and SOCKS5 proxy for inspecting, replaying, and modifying traffic from browsers, CLIs, mobile apps, API clients, services, and test suites. It runs a web UI, API, and optional AI assistant on the same local listener, so you can capture...

power-pwn

Maintained by: Secure AI Agents Everywhere. Overview Power Pwn is an offensive and defensive security toolset for Microsoft 365 Power Platform and AI services. Key Features, among others: 💾 PowerDump : Comprehensive tenant scanning and data collection 🚪 BackDoor : Deploy backdoor flows for...

CVE-2025-59712_CVE-2025-59713

إثبات المفهوم لثغرتي CVE-2025-59712 و CVE-2025-59713 يوفر إثبات المفهوم هذا سكربتًا آليًا لاستغلال CVE-2025-59712 XSS في ترويسة User-Agent وCVE-2025-59713 إلغاء التسلسل غير الآمن. السياق تم اكتشاف هاتين الثغرتين بواسطة Synacktiv أثناء بحث في ثغرات برنامج Snipe-IT. Snipe-IT هو نظام مفتوح المصدر...

vault-conductor

🗝️ vault-conductor An SSH Agent that provides SSH keys stored in Bitwarden Secret Manager as secrets. Supports SSH authentication and Git commit signing. Demo Features It implements the SSH Agent Protocol as a Unix domain socket server, acting as a secure bridge between your SSH clients and...

harpoon

Harpoon OSINT / Threat Intel CLI tool. Install Requirements As a pre-requesite for Harpoon, you need to install lxml requirements, on Debian/Ubuntu : sudo apt-get install libxml2-dev libxslt-dev python3-dev. On Fedora: sudo dnf install sqlite-devel automake bzip2 bzip2-devel bzip2-lib cython g++...

CVE-2022-21907

CVE-2022-21907 الوصف 1. يكتشف هذا المستودع نظامًا معرضًا لـ CVE-2022-21907 CVSS:3.1 9.8 ويوفر الحماية ضد هذه الثغرة إذا رغبت. أقدم كودين باورشيل في سطر واحد. 2. أقترح نصوص بايثون وباورشيل وروبي النقية ووحدات metasploit وnmap لمهاجمة خادم ويب IIS ضعيف تنفيذ هجوم DOS لتعطيل الشاشة الزرقاء الخادم...