fence

Fence envuelve comandos en un entorno aislado que bloquea el acceso a la red por defecto y restringe las operaciones del sistema de archivos según reglas configurables. Es muy útil para ejecutar código semiconfiable instalaciones de paquetes, scripts de compilación, trabajos de CI, repositorios...

boundary

Boundary What is Boundary: https://developer.hashicorp.com/boundary/docs/what-is-boundary Website: https://www.developer.hashicorp.com/boundary/ Forums: HashiCorp Discuss Documentation: https://developer.hashicorp.com/boundary/docs Tutorials: HashiCorp's Learn Platform Boundary is an identity-awa...

BOF_RunPe

BOFRunPE BOF RunPE is a Beacon Object File for Cobalt Strike that executes PE files entirely in-memory within the beacon process. Unlike traditional fork&run, no child process is spawned, no console is created, and no pipe is used - all output is captured via IAT hooking and redirected to the...

amber

Inroduction Amber is a position-independentreflective PE loader that enables in-memory execution of native PE filesEXE, DLL, SYS.... It enables stealthy in-memory payload deployment that can be used to bypass anti-virus, firewall, IDS, IPS products, and application white-listing mitigations...

sqlwinds

SQLWinds SQL Security Assessment & Post-Exploitation Toolkit SQLWinds is a command-line tool for security testing and exploiting Microsoft SQL Server. It provides an interactive environment to deeply analyze servers, escalate privileges, execute attacks, and pivot through networks all with...

PersistBOF

PersistBOF Una herramienta para ayudar a automatizar mecanismos de persistencia comunes. Actualmente soporta Monitor de Impresión SYSTEM, Proveedor de Tiempo Network Service, Secuestro de acceso directo de carpeta de inicio User, Carpeta de Unión User, Complemento Xll User. Uso Clona, ejecuta mak...

CVE-2017-8759-exploits

CVE-2017-8759-exploits Two versions of CVE-2017-8759 exploits Example 1 - Downloads a .Net dll from a remote location without touching disk, loads and executes Example 2 - Loads an embedded .Net dll and executes...

pybof

PyBOF Run Beacon Object files through python in-memory loading and execution of BOFs PyBOF enables Python3 to load Beacon Object Files via bytes and execute a target BOF function in a Python interpreter Basic Usage Run a simple BOF with no required arguments data = openr'c:\path\to\example.o',...

SlackShell

SlackShell Description & Changelog v1.0 This PowerShell module includes various functions that utilize the Slack API to create a command and control channel. The main function, Start-Shell, will connect to a user-specified Slack channel and authenticate using a supplied API authentication token f...

CnC-Botnet-in-Python

CnC-Botnet-in-Python C&C Botnet written in Python Description Simple botnet written in Python using fabric. The author is not responsible for the use of this code. Hosts It is possible to load hosts from a file hosts.txt included in the main directory of the project. The default format for this...

chalumeau

Chalumeau Chalumeau is automated,extendable and customizable credential dumping tool based on powershell and python. Main Features Write your own Payloads In-Memory execution Extract Password List Dashboard reporting / Web Interface Parsing Mimikatz Dumping Tickets Screenshots Known Issues Parsin...

toothpicker

ToothPicker ToothPicker is an in-process, coverage-guided fuzzer for iOS. It was developed to specifically targets iOS's Bluetooth daemon bluetoothd and to analyze various Bluetooth protocols on iOS. As it is built using FRIDA, it can be adapted to target any platform that runs FRIDA. This...

Chisel-Strike

Chisel-Strike Una implementación agresora de Cobalt Strike en .NET cifrada con XOR para chisel, destinada a utilizar un proxy más rápido y capacidades avanzadas de socks5. ¿Por qué escribir esto? En mi experiencia, encontré que los proxies socks4/socks4a son bastante lentos en comparación con sus...

cve-2023-5217-poc

CVE-2023-5217: Desbordamiento de Montón en Codificación VP8 de libvpx PoC CVE-2023-5217 es una vulnerabilidad de libvpx explotada in-the-wild que fue encontrada por Clément Lecigne del Grupo de Análisis de Amenazas de Google para estar atacando Chrome. Este repositorio muestra cómo desencadenar...

pupy

Pupy Pupy is an opensource, cross-platform Windows, Linux, OSX, Android, multi function RAT Remote Administration Tool and post-exploitation tool mainly written in python. It features a all-in-memory execution guideline and leaves very low footprint. Pupy can communicate using various transports,...

Pyramid

Pyramid ¿Qué es? Pyramid está compuesto por: 1. un servidor HTTP/S en Python que puede entregar archivos cifrados chacha, xor 2. módulos de Python que pueden cargar dependencias en memoria de herramientas ofensivas como Bloodhound-py, secretsdump, LaZagne, Pythonnet, DonPAPI, pythonmemorymodule,...

XWiki Platform - Cross-Site Scripting

XWiki Platform versions = 4.2-milestone-3 and = 16.5.0-rc-1 and = 17.0.0-rc-1 and = 4.2-milestone-3 and = 16.5.0-rc-1 and = 17.0.0-rc-1 and 17.3.0-rc-1 are vulnerable to reflected XSS in two templates. The vulnerability allows an attacker to execute malicious JavaScript code in the context of the...

All-in-One WP Migration < 7.87 - Unauthenticated Information Disclosure

The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to unauthenticated information disclosure due to its error.log file being publicly accessible in versions before 7.87. id: CVE-2024-8852 info: name: All-in-One WP Migration 7.87 - Unauthenticated Information Disclosure...

WP Hotel Booking <= 2.3.2 - Cross-Site Scripting

The WP Hotel Booking plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'checkindate' parameter in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...

All-in-One WP Migration and Backup < 7.106 - Arbitrary Log File Write

The All-in-One WP Migration and Backup WordPress plugin before 7.106 does not properly sanitise a user-supplied value before using it to build a file path. This makes it possible for unauthenticated attackers to create or append a log file in arbitrary locations outside the intended storage...