APT-Hunter

APT-Hunter Threat hunting for Windows event logs, built with a purple-team mindset. APT-Hunter is a threat hunting tool for Windows event logs. It uses pre-defined detection rules and log statistics to surface APT activity hidden in large volumes of events, cutting the time needed to uncover...

RogueAssemblyHunter

. . \ / \ | | | .. | // \ / | | / \ / / \ \ / // // \ / | | | // | /\ / / | \ \ \ /| Y Y \ \ \ | | || // /|/ | / || / // | / // / / / / / / / / / | \ / | / \ | / \ / \ Y / | / | \ | \ /| | / | /|/|| /| | / / / Rogue Assembly Hunter Rogue Assembly Hunter is a utility for discovering 'interesting'...

evtx

EVTX A cross-platform parser for the Windows XML EventLog format Features 🔒 Implemented using 100% safe rust - and works on all platforms supported by rust that have stdlib. ⚡ Fast - see benchmarks below. It's faster than any other implementation by orders of magnitude! 🚀 Multi-threaded. ✨ Suppor...

kit_hunter

Kit Hunter: A basic phishing kit detection tool Version 2.6.0 28 September 2021 Testing and development took place on Python 3.7.3 Linux What is Kit Hunter? Kit Hunter is a personal project to learn Python, and a basic scanning tool that will search directories and locate phishing kits based on...

Threat-Intelligence-Hunter

TIH is an intelligence tool that helps you in searching for IOCs across multiple openly available security feeds and some well known APIs. The idea behind the tool is to facilitate searching and storing of frequently added IOCs for creating your own set of indicators. Threat-Intelligence-Hunter...

WFH

Windows Feature Hunter WFH Windows Feature Hunter WFH is a proof of concept python script that uses Frida, a dynamic instrumentation toolkit, to assist in potentially identifying common “vulnerabilities” or “features” within Windows executables. WFH currently has the capability to automatically...

xsshunter

DEPRECATED - TRY THE NEW EXPRESS VERSION See here for more info: https://github.com/mandatoryprogrammer/xsshunter-express XSS Hunter Source Code This is a portable version of the source code running on https://xsshunter.com. It is designed to be easily-installable on any server for security...

ios-malicious-bithunter

iOS Malicious Bit Hunter Abstract iOS Malicious Bit Hunter is a malicious plug-in detection engine for iOS applications. It can analyze the head of the macho file of the injected dylib dynamic library based on runtime, and can perform behavior analysis through interface input characteristics to...

LDAP-Password-Hunter

LDAP Password Hunter It happens that due to legacy services requirements or just bad security practices password are world-readable in the LDAP database by any user who is able to authenticate. LDAP Password Hunter is a tool which wraps features of getTGT.py Impacket and ldapsearch in order to lo...

rpi-hunter

rpi-hunter Automate discovering and dropping payloads on LAN Raspberry Pi's via ssh Or, the honest title: Automating sshpass for command delivery. Rpi-hunter is useful when there are multiple Raspberry Pi's on your LAN with default or known credentials, in order to automate sending...

scarce-apache2

ScaRCE Framework - CVE-2021-41773 Hunter...

COM-Hunter

COM-Hunter COM 하이재킹 VOODOO 설명 COM-Hunter는 COM 하이재킹 지속성 도구입니다. .NET 버전과 Cobalt Strike와 완벽히 호환되는 BOF 변형으로 제공됩니다. 다음 목록은 사용 가능한 모드를 설명합니다: 검색 모드 : HKLM 및 HKCU의 LocalServer32, InprocServer32 및 레지스트리 항목을 기반으로 CLSID를 검색합니다. 클래식 지속 모드 : LocalServer32 또는 InprocServer32를 사용하여 클래식 COM 하이재킹 지속성을 수행합니다. 작업...

sticky_keys_hunter

Sticky Keys Hunter This POC bash script tests for sticky keys and utilman backdoors. The script will connect to an RDP server, send both the sticky keys and utilman triggers and screenshot the result. This script was written to prove a theory I had about detecting these backdoors in a blackbox...

udp-hunter

What is UDP Hunter? UDP Scanning has always been a slow and painful exercise, and if you add IPv6 on top of UDP, the tool choices get pretty limited. UDP Hunter is a python based open source network assessment tool focused on UDP Service Scanning. With UDP Hunter, we have focused on providing...

kube-hunter

공지 kube-hunter는 더 이상 활발히 개발되지 않습니다. Kubernetes 클러스터의 알려진 취약점을 스캔하는 데 관심이 있다면 Trivy를 권장합니다. 특히 Trivy의 Kubernetes 잘못된 구성 스캔 및 KBOM 취약점 스캔을 참조하세요. 자세한 내용은 Trivy 문서에서 확인하세요. kube-hunter는 Kubernetes 클러스터의 보안 취약점을 찾습니다. 이 도구는 Kubernetes 환경의 보안 문제에 대한 인식과 가시성을 높이기 위해 개발되었습니다. 소유하지 않은 Kubernetes 클러스터에서는...

mal_unpack

malunpack Dynamic unpacker based on PE-sieve 📖 Read more . It deploys a packed malware, waits for it to unpack the payload, dumps the payload, and kills the original process. !CAUTION This unpacker deploys the original malware. Use it only on a VirtualMachine. ⚙ Usage Basic usage: root@kitploit:...

MicroburstSecretsHunter

MicroBurst Secrets Hunter Azure 環境で暗号化されずに放置されるべきではない平文パスワード、キー、接続文字列、その他のシークレットを、MicroBurst の Get-AzDomainInfo 出力から探し出す PowerShell スキャナです。 読み取り専用の監査ワークフロー 向けに作られています: MicroBurst でドメインダンプを収集しGet-AzDomainInfo には Reader アクセスで十分です、このツールを出力フォルダに向けます。Azure 自体には一切触れません —...

glassworm-hunter

glassworm-hunter あなたのマシン上で GlassWorm サプライチェーン攻撃のペイロードを検出します。VS Code 拡張機能、npm パッケージ、Python パッケージ、git リポジトリをスキャンします。 このスキャナーは攻撃手法そのもの を検出します。すなわち、不可視の Unicode バリエーションセレクターペイロード、GlassWorm デコーダーパターン、C2 インジケーター、認証情報収集コードなどです。 インストール root@kitploit: pip install glassworm-hunter または pipx を使用:...

D4TA-HUNTER

ビデオデモ: https://darkhacking.es/d4ta-hunter-framework-osint-para-kali-linux マイウェブサイト: https://microjoan.com 私のブログ: https://darkhacking.es/ コーヒーをごちそうする: https://www.buymeacoffee.com/microjoan 免責事項...

supahunter

Supabase Hunter OPモード Supabase インスタンス向け高度な偵察・悪用ツール。 SupaHunter は、設定ミスのある Supabase プロジェクトを特定、分析、悪用するために設計された強力な Python ツールです。単純なテーブル列挙を超え、深い検査機能、Selenium ベースのキー抽出、高度な権限昇格チェックを提供します。 主な機能 高度な発見: OpenAPI 検査: /rest/v1/ を自動的に取得・解析し、データベース全体のスキーマをマッピングします。 RPC 列挙: 隠れた RPC 関数 getschema, execsql など...