ldapdomaindump

LDAPDomainDump Active Directory information dumper via LDAP Introduction In an Active Directory domain, a lot of interesting information can be retrieved via LDAP by any authenticated user or machine. This makes LDAP an interesting protocol for gathering information in the recon phase of a pentes...

climber

Climber Automated auditing tool to check UNIX/Linux systems misconfigurations which may allow local privilege escalation. Dependencies python = 2.7 python-crypto python-mako python-paramiko Note Climber needs Exscript, a Python module and a template processor for automating network connections ov...

cookie_crimes

Chrome Cookie Extraction Without Root This will print out a user's Chrome cookies. You don't need to have their password or be root to use it. nice nice nice nice nice. If you are not the kind of person who regularly gets the ability to execute code on other people's computers, you probably don't...

burpcommander

burpcommander Ruby command-line interface to Burp Suite's REST API Usage burpcommander VERSION: 1.0.1 - UPDATED: 08/29/2018 -t, --target IP Address Defaults to 127.0.0.1 -p, --port Port Number Defaults to 1337 -k, --key API Key If you require an API key specify it here -i, --issue-type-id String...

security-interview-questions

Sources QUIZ: https://quizlet.com/231268221/general-information-security-questions-flash-cards/ SANS Cheat Sheets: https://www.sans.org/blog/the-ultimate-list-of-sans-cheat-sheets/ Offensive Security OSCP: https://411hall.github.io/OSCP-Preparation/...

metta

Metta Metta is an information security preparedness tool. This project uses Redis/Celery, python, and vagrant with virtualbox to do adversarial simulation. This allows you to test mostly your host based instrumentation but may also allow you to test any network based detection and controls...

ct-exposer

Discover sub-domains by searching through Certificate Transparency logs What is CT? Certificate Transparency CT is an experimental IETF standard. The goal of it was to allow the public to audit which certificates were created by Certificate Authorities CA. TLS has a weakness that comes from the...

cve-2025-33073

Hello! I am an AI! Calm down! It's just a joke, actually I'm not an AI, it's a mockery of the metro announcer in my city who sounds like one. There are also people who act like an AI: nice, smiling, fulfilling all social standards, but inside you feel something superficial and without any feeling...

CVE-2019-14287

CVE-2019-14287...

driftwood

Driftwood ⚠️ The Driftwood CLI tool is no longer supported. Please use TruffleHog instead! ⚠️ Driftwood is a tool that can enable you to lookup whether a private key is used for things like TLS or as a GitHub SSH key for a user. Driftwood performs lookups with the computed public key, so the...

pentaho-exploits

Exploits relating to https://research.aurainfosec.io/pentest/pentah0wnage Note: Some things might not work Thanks to my employer Aura Information Security for providing time for me to work on this project...

cve2024-49740

cve2024-49740 cve2024-49740...

2024InformationSecurityEngineer

2024InformationSecurityEngineer 2024 Information Security Engineer, 2024InformationSecurityEngineer 2024 Second Half - Information Security Engineer Exam Question Recollection Soft Exam - Exam Date : 2024年11月08日 1. Firewall Packet Capture 14 points 1. Packet length 2 points Answer: 63 2. Is it a...

Labs

Labs Faraday Labs information security research...

kamerka

NOT SUPPORTED OR DEVELOPED ANYMORE PLEASE USE GUI VERSION https://github.com/woj-ciech/Kamerka-GUI ꓘamerka 2.0 aka FIST Flickr, Instagram, Shodan, Twitter Build interactive map of cameras, printers, tweets and photos. The script creates a map of cameras, printers, tweets and photos based on your...

CVE-2018-17456

CVE-2018-17456...

OSINT-Framework

Marco OSINT http://osintframework.com Notas Marco OSINT enfocado en recopilar información de herramientas o recursos gratuitos. La intención es ayudar a las personas a encontrar recursos OSINT gratuitos. Algunos de los sitios incluidos pueden requerir registro u ofrecer más datos por $$$, pero...

ROOT-OS-UBUNTU-2204-CVE-2023-52737 CVE-2023-52737 in linux - Patched by Root

Root has patched CVE-2023-52737 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROS-20261007-73-0198

The vulnerability of the alpsrawevent function in the drivers/hid/hid-alps.c module of the Linux kernel subsystem for user interface devices relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fixed out-of-band OOB access during the parseadvmonitorpattern function execution. In the parseadvmonitorpattern function, the value of the length variable is currently limited to HCIMAXEXTADLENGTH251. The size o...