8002 matches found
GraphStrike
GraphStrike ใชใชใผในใใญใฐ: GraphStrike: Microsoft Graph API ใไฝฟ็จใใฆ Beacon ใใฉใใฃใใฏใๆถๅคฑใใใ ้็บ่ ใใญใฐ: GraphStrike: ๆปๆ็ใใผใซ้็บใฎ่งฃๅ ใฏใใใซ GraphStrike ใฏใCobalt Strike ใฎ HTTPS Beacon ใ C2 ้ไฟกใซ Microsoft Graph API ใไฝฟ็จใงใใใใใซใใใใผใซในใคใผใใงใใใในใฆใฎ Beacon ใใฉใใฃใใฏใฏใๆปๆ่ ใฎ SharePoint ใตใคใใซไฝๆใใใ2ใคใฎใใกใคใซใไปใใฆ้ไฟกใใใBeacon ใใใฎใในใฆใฎ้ไฟกใฏ...
htrace.sh
Description htrace.sh is a shell script for http/https troubleshooting and profiling. It's also a simple wrapper around several open source security tools. For a more detailed understanding of htrace.sh, its parameters, functions and how it all works, run htrace.sh --examples or see the Wiki...
apk-mitm
apk-mitm A CLI application that automatically prepares Android APK files for HTTPS inspection Inspecting a mobile app's HTTPS traffic using a proxy is probably the easiest way to figure out how it works. However, with the Network Security Configuration introduced in Android 7 and app developers...
git-all-secrets
git-all-secrets About git-all-secrets is a tool that can: Clone multiple public/private github repositories of an organization and scan them, Clone multiple public/private github repositories of a user that belongs to an organization and scan them, Clone a single public/private repository of an...
cve-2021-38647
cve-2021-38647 OMI ใซใใใ CVE-2021-38647 RCE ใฎ PoC ใจใฏในใใญใคใใ ใใใฉใซใใฎ HTTPS ใใผใใง ExecuteShellCommand ใไฝฟ็จใใฆๅไธใฎใณใใณใใๅฎ่กใใพใ๏ผ root@kitploit: python cve-2021-38647.py -s 10.10.10.10 shell id ใใใฉใซใใฎ HTTP ใใผใใง ExecuteShellCommand ใไฝฟ็จใใฆๅไธใฎใณใใณใใๅฎ่กใใพใ๏ผ root@kitploit: python cve-2021-38647.py 10.10.10.10 -p 5985...
sniffly
Sniffly2 Sniffly2 is a variant of Sniffly which abuses HTTP Strict Transport Security headers and the Performance Timing API in order to sniff your browsing history in Chromium-based browsers. Demo Visit http://diracdeltas.github.io/sniffly in Chrome/Chromium/Brave/etc. with HTTPS Everywhere...
http-vuln-CVE-2022-41082
ๆดๆฐใใผใธใงใณใงใฏHTTPSใใงใใฏใๅฏ่ฝใซใชใใพใใ exchange-vuln-check.nse HTTPใฎๅ ดๅ: nmap -p80 --script exchange-vuln-check.nse HTTPSใฎๅ ดๅ: nmap -p443 --script exchange-vuln-check.nse ็ตๆใใใกใคใซใซไฟๅญ nmap -p80 --script exchange-vuln-check.nse -oN results.txt http-vuln-CVE-2022-41082 Microsoft Exchange Server ใฎใชใขใผใใณใผใๅฎ่ก่ๅผฑๆงใ nma...
mallory
mallory HTTP/HTTPS proxy over SSH. Installation Local machine: go install github.com/justmao945/mallory/cmd/mallory@latest Remote server: need our old friend sshd Configuration Config file Default path is $HOME/.config/mallory.json, can be set when start program root@kitploit: mallory -config...
mallory
mallory SSH็ต็ฑใฎHTTP/HTTPSใใญใญใทใ ใคใณในใใผใซ ใญใผใซใซใใทใณ: go install github.com/justmao945/mallory/cmd/mallory@latest ใชใขใผใใตใผใใผ: ๆงๅใฎsshdใๅฟ ่ฆใงใ ่จญๅฎ ่จญๅฎใใกใคใซ ใใใฉใซใใฎใในใฏ$HOME/.config/mallory.jsonใงใใใญใฐใฉใ ่ตทๅๆใซ่จญๅฎใงใใพใ root@kitploit: mallory -config path/to/config.json ๅ ๅฎน: idrsa ใฏ็งๅฏ้ตใใกใคใซใธใฎใในใงใใssh-keygenใง็ๆใงใใพใใ localsmart...
Invoke-SelfSignedWebRequest
Invoke-SelfSignedWebRequest ๆ ๅ ฑใปใญใฅใชใใฃๆฅญๅใงใฏใHTTPS ใ C2 ใๆจ็ใใใใฏใผใฏๅ ใงใฎ็งปๅๆๆฎตใจใใฆๅฉ็จใใใใจใฏ้ๅธธใซไพฟๅฉใชใกใซใใบใ ใงใใใใใซ PowerShell ใฏใใชใใฌใผใฟใผใๅ็ใช็ตๆใ้ๆใใใฎใซๅฝน็ซใค้ฉใในใ็็ฃๆงใใผใซใงใใๅฝ็ถใฎๆฌกใฎ็ต่ซใฏใC2 ใใฃใใซ HTTPS ใจใจใใงใฏใใธใงใใฌใผใฟใผ PowerShell ใ็ตใฟๅใใใใใจใงใใ่ชๅทฑ็ฝฒๅ่จผๆๆธใใใใซ็ๆใใใฐใใในใฆ้ ่ชฟใซ้ฒใใฏใใงใใใญ๏ผ ๆฎๅฟตใชใใใMicrosoft ใใใฆๆกๅผต็ใซใฏ PowerShell ใฏใๆค่จผใงใใชใ่จผๆๆธใงไฟ่ญทใใใ SSL...
wafpass
WAFPASS root@kitploit: โโโ โโโ โโโโโโ โโโโโโโโโโโโโโโ โโโโโโ โโโโโโโโโโโโโโโโ โโโ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โโโ โโ โโโโโโโโโโโโโโโโโ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โโโโโโโโโโโโโโโโโโโโโโโโ โโโโโโโ โโโโโโโโโโโโโโโโโโโโโโโโ โโโโโโโโโโโโโ โโโโโโ โโโ โโโ โโโโโโโโโโโโโโโโโโ...
wafpass
WAFPASS root@kitploit: โโโ โโโ โโโโโโ โโโโโโโโโโโโโโโ โโโโโโ โโโโโโโโโโโโโโโโ โโโ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โโโ โโ โโโโโโโโโโโโโโโโโ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โโโโโโโโโโโโโโโโโโโโโโโโ โโโโโโโ โโโโโโโโโโโโโโโโโโโโโโโโ โโโโโโโโโโโโโ โโโโโโ โโโ โโโ โโโโโโโโโโโโโโโโโโ...
shad0w
SHAD0W SHAD0W ใฏใๆ็ใใ็ฐๅขใงๆญฃๅธธใซๅไฝใใใใใซ่จญ่จใใใใขใธใฅใผใซๅผ C2 ใใฌใผใ ใฏใผใฏใงใใ EDR ใ AV ใๅ้ฟใใใใใฎใใพใใพใชๆๆณใไฝฟ็จใใใชใใฌใผใฟใผใฏไฝฟใๆ ฃใใใใผใซใใใฌใผใใฏใฉใใใๅผใ็ถใไฝฟ็จใงใใพใใPython 3.8 ใจ C ใงๅไฝใใใใคใญใผใ็ๆใซใฏ Donut ใไฝฟ็จใใพใใDonut ใจ SHAD0W ใฎใใญใปในใคใณใธใงใฏใทใงใณๆฉ่ฝใ็ตใฟๅใใใใใจใงใใชใใฌใผใฟใผใฏ .NET ใขใปใณใใชใDLLใEXEใJSใVBSใXSL ใๅฎๅ จใซใกใขใชๅ ใงๅฎ่กใงใใพใใใฆใผใถใผใฉใณใ API ใใใญใณใฐใๅ้ฟใใใใใซๅ็ใซ่งฃๆฑบใใใ...
cert-pinning-flaw-poc
่จผๆๆธใใณใใณใฐ่ๅผฑๆง POC CVE-2016-2402ใใใณ้กไผผใฎ่ๅผฑๆงใใในใใใใใใฎใทใณใใซใชPOCในใฏใชใใใงใใ่ฉณ็ดฐใฏ็งใฎใใญใฐ่จไบใใ่ฆงใใ ใใใ ใใฎใฆใผใใฃใชใใฃใฏใ็นๅฎใฎใใกใคใณใซๅฏพใใฆใฏใฉใคใขใณใใซๆชๆใฎใใ่จผๆๆธใใงใผใณใๆไพใใHTTPSใตใผใใผใใปใใใขใใใใพใใ ่ๅผฑใช่จผๆๆธใใณใใณใฐๅฎ่ฃ ใๆใคใขใใชใใใฎใใฉใใฃใใฏใใใฎใตใผใใผใซใชใใคใฌใฏใใใใๅ ดๅใใใณใใณใฐๅถๅพกใใใคใในใใใใตใผใใผใณใณใฝใผใซใซGETใพใใฏPOSTใชใฏใจในใใ่กจ็คบใใใใฏใใงใใ...
chameleon
19 Customizable honeypots for monitoring network traffic, bots activities, and username\password credentials DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap If you want to implement the honeypots in your project,...
nginxconfig.io
โ๏ธ NGINX configuration generator on steroids ๐ The only tool you'll ever need to configure your NGINX server. do.co/nginxconfig ยป Report a bug ยท Request a feature โจ NGINX Config NGINX is so much more than just a webserver. You already knew that, probably. We love NGINX, because: Low memory usage...
CVE-2020-0601-EXP
CVE-2020-0601-EXP ใใฎใชใฝใผในใฏใ่่ ใMicrosoftใฎ็ฝฒๅ่จผๆๆธใฎ่ๅผฑๆงCVE-2020-0601ใๅ็พใใ้ข้ฃใใใชใฝใผในใ่จไบใ็ตใฟๅใใใฆๅฎ่ฃ ใใใใฎใงใใ่่ ใฎใใญใฐใจๅใใใฆใECCใขใซใดใชใบใ ใจWindowsใฎๆค่จผใกใซใใบใ ใ็่งฃใใ่ชๅใงๅฎ่กๅฏ่ฝใใกใคใซใฎ็ฝฒๅ่จผๆๆธใHTTPSใใคใธใฃใใฏใฎไพใๅ็พใใฆใฟใใใจใใๅงใใใพใใใใใใฏใผใฏใปใญใฅใชใใฃใฎๅๅฟ่ ใจใใฆใ่ชๅใฏ็ขบใใซๆช็ใงใใใ็ถใใฆใใใใใจๆใใพใใ้ ๅผตใใพใ๏ผ...
poc-CVE-2020-5902
CVE-2020-5902 ใฎ PoC ใใใฏๅ้กใ็คบใใใใฎใตใณใใซPoCใงใใ ๅถ้ไบ้ ็พๆ็นใงใฏHTTPSใฎใฟในใญใฃใณใใพใใใHTTPใไปปๆใฎใซในใฟใ ใใผใใในใญใฃใณใใใใใซ่จญๅฎๅฏ่ฝใงใใ ไฝฟ็จๆนๆณ ่จผๆ...
endsfuzzer
endsfuzzer endsfuzzer is a simple tool used to fuzz a list of domains for specific endpoints. It will check all the domains in a list for a single endpoint, then moves on to the next endpoint to check for. Features Fast. Makes use of go routines. Gentler to servers. Fuzzes all hosts for one...