Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware

The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new, in attacks targeting organizations in Portuguese- and Spanish-speaking countries. The activity, observed by the Symantec and Carbon Black Threat...

rdpscan

rdpscan for CVE-2019-0708 bluekeep vuln This is a quick-and-dirty scanner for the CVE-2019-0708 vulnerability in Microsoft Remote Desktop. Right now, there are about 900,000 machines on the public Internet vulnerable to this vulnerability, so many are to expect a worm soon like WannaCry and...

SubOver

SubOver 참고 - 이 프로젝트는 중단되었습니다. 더 이상 업데이트가 제공되지 않습니다! 죄송합니다! 하지만 더 멋진 무언가가 곧 나올 예정입니다! Subover는 적대적 서브도메인 탈취Hostile Subdomain Takeover 도구로, 원래 Python으로 작성되었으나 Golang으로 처음부터 다시 작성되었습니다. 재설계 이후 속도와 효율성에 중점을 두었습니다. 현재까지 SubOver는 30개 이상의 서비스를 탐지하며, 이는 다른 어떤 도구보다 많은 수입니다. 이 도구는 Golang의 동시성을 활용하므로 매우 빠릅니...

httpgrep

Description A fast, asynchronous Python tool that scans HTTPS servers and greps for strings or regex patterns in HTTP response bodies and headers. It takes single hosts, URLs, CIDR ranges, IP ranges or files; scans multiple ports per target single, comma-lists or ranges, auto-detecting TLS vs pla...

no-gdid

no-gdid Read, understand, and silence the Windows Global Device Identifier GDID — the hidden per-account device ID that helped the FBI locate a suspect who was using a VPN. ⚠️ Honest disclaimer up front: this tool does not erase your GDID and does not make you anonymous. The GDID lives on...

maigret

Maigret English · 简体中文 · Français 📖 Documentation Maigret collects a dossier on a person by username only , checking for accounts on a huge number of sites and gathering all the available information from web pages. No API keys required. AI profiling demo. Sponsors Noimosiny is a comprehensive...

maigret

Maigret English · 简体中文 · Français 📖 Documentation Maigret collects a dossier on a person by username only , checking for accounts on a huge number of sites and gathering all the available information from web pages. No API keys required. AI profiling demo. Sponsors Noimosiny is a comprehensive...

analyzer

This project automates the daily tasks of Threat Intelligence Analyzer role internally without external resources' interaction. It analyzes, visualizes and structures sensitive files Malware or data by extracting features, artifacts and IoC using different modules. The output of those modules can...

mongoaudit

mongoaudit is a CLI tool for auditing MongoDB servers, detecting poor security settings and performing automated penetration testing. Installing Clone this repository and run the setup: git clone https://github.com/stampery/mongoaudit.git cd mongoaudit python setup.py install mongoaudit...

subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

subjack

subjack DNS 인수 스캐너 Subjack은 Go로 작성된 DNS 인수 스캐너로, 도메인 목록을 동시에 스캔하여 하이재킹이 가능한 도메인을 식별하도록 설계되었습니다. Go의 속도와 효율성 덕분에 이 도구는 대량 테스트에서 특히 두드러집니다. 가양성을 배제하기 위해 결과를 항상 수동으로 다시 확인하세요. Subjack이 감지하는 항목: CNAME 인수 — 청구되지 않은 타사 서비스를 가리키는 방치된 CNAME NS 위임 인수 — 만료된 네임서버 도메인 및 방치된 클라우드 DNS 영역 Route 53, Google Cloud...

proxychains-ng

ProxyChains-NG ver 4.17 README ProxyChains is a UNIX program, that hooks network-related libc functions in DYNAMICALLY LINKED programs via a preloaded DLL dlsym, LDPRELOAD and redirects the connections through SOCKS4a/5 or HTTP proxies. It supports TCP only no UDP/ICMP etc. The way it works is...

eaphammer

by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...

social-analyzer

Social Analyzer - API, CLI, and Web App for analyzing & finding a person's profile across +1000 social media \ websites. It includes different analysis and detection modules, and you can choose which modules to use during the investigation process. The detection modules utilize a rating mechanism...

social-analyzer

Social Analyzer는 1000개 이상의 소셜 미디어 \ 웹사이트에서 개인의 프로필을 분석하고 찾기 위한 API, CLI 및 웹 앱입니다. 다양한 분석 및 탐지 모듈을 포함하며, 조사 과정에서 사용할 모듈을 선택할 수 있습니다. 탐지 모듈은 다양한 탐지 기법을 기반으로 한 등급 메커니즘을 사용하며, 0에서 100No-Maybe-Yes 사이의 평가 값을 생성합니다. 이 모듈은 오탐false positive을 줄이기 위해 설계되었습니다. 이 OSINT 도구의 분석 및 공개적으로 추출된 정보는 사이버 괴롭힘, 사이버 그루밍,...

airgorah

Airgorah A WiFi security auditing software mainly based on aircrack-ng tools suite Installation | Usage | Credits Airgorah is a WiFi security auditing software that can capture nearby WiFi traffic, discover clients connected to access points, perform deauthentication attacks, capture handshakes,...

CVE-2026-0897

CVE-2026-0897 — Google Keras: 가중치 로딩 시 HDF5 Shape Bomb을 통한 서비스 거부Denial of Service -orange?style=for-the-badge -brightgreen?style=for-the-badge 개요 필드| 세부 정보 ---|--- CVE ID| CVE-2026-0897 패키지| keras Google Keras 레지스트리| PyPI 영향을 받는 버전| 3.0.0부터 3.13.0까지 포함 취약점 유형| CWE-770: 제한 또는 조절 없이 리소스 할당 CVSS 점수...

laravel-threat-detection

Laravel Threat Detection Security monitoring and attack logging for Laravel. Detect and log SQL injection, XSS, RCE, directory traversal, bot scanners and/wp-admin-style recon probes — every hostile request recorded to your database with full application context. It's an IDS, not a WAF: it never...

iocx

IOCX Deterministic, Zero‑Risk IOC Extraction for Modern Security Pipelines Static IOC extraction from a PE file using the IOCX CLI Official IOCX Project This is the original IOCX engine for deterministic static IOC extraction and PE analysis. Any other repositories using the name "iocx" are not...

raven

Raven - Advanced Cyber Threat Map Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, 100,000 cities, and can be used in an isolated environment without external lookups!. Structure Offline - Demo Firefox, Chrome or Safari Live - Regression 500 attacks at onc...