AWSGoat

AWSGoat : Una infraestructura AWS malditamente vulnerable Comprometer la infraestructura en la nube de una organización es como sentarse sobre una mina de oro para los atacantes. Y a veces, una simple mala configuración o una vulnerabilidad en aplicaciones web es todo lo que un atacante necesita...

AzureGoat

AzureGoat: Una infraestructura Azure vulnerable a propósito Comprometer la infraestructura en la nube de una organización es como sentarse sobre una mina de oro para los atacantes. Y a veces, una simple mala configuración o una vulnerabilidad en aplicaciones web es todo lo que un atacante necesit...

Reproducing-ConnMan-1.34

Connection Manager Copyright C 2007-2012 Intel Corporation. All rights reserved. Functionality and features The following features are built-in into Connection Manager: - Generic plugin infrastructure - Device and network abstraction with basic storage support - IPv4, IPv4-LL link-local and DHCP...

InfraHunter

InfraHunter Actively hunt for attacker infrastructure by filtering Shodan results with URLScan data. Requirements Shodan API Key URLScan API Key python3 -m pip install -r requirements.txt Usage Examples python3 .\hunter.py -q "http.html:'titan stealer'" -s Shodan API Key -u URLScan API Key Builti...

chall.stypr.com

chall.stypr.com Thank you for playing chall.stypr.com It has been nine years since I initially set up and hosted my wargame. Many CTFs have now already re-used or made similar challenges, so I've decided to share the sourcecode of all challenges and configurations used to host the challenge...

GithubC2

GithubC2 Github as C2 Demonstration , free API = free C2 Infrastructure Demo https://user-images.githubusercontent.com/110354855/192076474-3c1884f8-4a59-4944-b0d6-9dc59c7692f0.mp4...

AutoFunkt

AutoFunkt root@kitploit: d8888 888 8888888888 888 888 d88888 888 888 888 888 d88P888 888 888 888 888 d88P 888 888 888 888888 .d b. 8888888 888 888 88888b. 888 888 888888 d88P 888 888 888 888 d88 88b 888 888 888 888 "88b 888 .88P 888 d88P 888 888 888 888 888 888 888 888 888 888888K 888 d8888888888...

CVE-2025-51591-Pandoc-SSRF-POC

CVE-2025-51591 Pandoc SSRF POC A Server-Side Request Forgery SSRF in JGM Pandoc v3.6.4 allows attackers to gain access to and compromise the whole infrastructure via injecting a crafted iframe. Install Pandoc https://pandoc.org/installing.html Payload Example ⚠️ replace iframe url to your own OAST...

awesome-llvm-security

awesome-llvm-security root@kitploit: If you find that some links are not working, you can simply replace the username with gmh5225. Or you can send an issue for me. Show respect to all the projects below, perfect works of art 🫡 How to contribute? https://github.com/HyunCafe/contribute-practice...

NexaCorp-DFIR-INC-2026-001

NexaCorp DFIR: INC-2026-001 - Compromiso de Infraestructura Linux Investigación DFIR e ingeniería de detección sobre una intrusión simulada contra la infraestructura de NexaCorp. Realizada como un encargo individual de 4 días bootcamp Blue & Red Team de BeCode Bruselas, Misión 01. El entregable e...

HSC24RedTeamInfra

HSC24RedTeamInfra Slides and Codes used for the workshop Red Team Infrastructure Automation...

Red-Team-Infrastructure-Wiki

This wiki is intended to provide a resource for setting up a resilient Red Team infrastructure. It was made to complement Steve Borosh @424f424f and Jeff Dimmock's @bluscreenofjeff BSides NoVa 2017 talk "Doomsday Preppers: Fortifying Your Red Team Infrastructure" slides If you have an addition...

abaddon

Abaddon Red team operations involve miscellaneous skills, last several months and are politically sensitive; they require a lot of monitoring, consolidating and caution. Wavestone’s red team operations management software, Abaddon, has been designed to make red team operations faster, more...

abaddon

Abaddon Las operaciones de red team implican habilidades variadas, duran varios meses y son políticamente sensibles; requieren mucha monitorización, consolidación y precaución. El software de gestión de operaciones de red team de Wavestone, Abaddon, ha sido diseñado para hacer las operaciones de...

metabadger

Metabadger Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 IMDSv2. Metabadger Purpose and functionality Diagnose and evaluate your current usage of the AWS Instance Metadata Service along with understanding how the service works Prepare you t...

C2-Tracker

C2 Tracker C2 Tracker es un feed de IOC gratuito, impulsado por la comunidad, que utiliza búsquedas en Shodan yCensys para recolectar direcciones IP de infraestructura conocida de malware/botnet/C2. Este Proyecto ha sido Archivado Este proyecto ha sido archivado. Los archivos de texto en data/ se...

hostresolver

HostResolver Versión actual: 1.0.0 Envíe comentarios e informes de errores a: [email protected] ==================================================================================== Contenido: 1. Resumen 2. Uso de HostResolver Archivos de entrada Opciones y configuración Escaneo Salida...

Important: Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.6.1

Logging for Red Hat OpenShift - 6.6.1 Red Hat OpenShift Logging 6.6.1 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs...

PHP-8.1.0-dev-Backdoor

PHP 8.1.0-dev User-Agentt Backdoor Remote Code Execution RCE Severity: Critical CVSS Equivalent: 10.0 Vulnerability Type: Supply Chain Backdoor / Remote Code Execution RCE Affected Software: PHP 8.1.0-dev Development Build Only Attack Vector: Remote Unauthenticated Authentication Required: No Use...

Dropper-GCleaner-C2-Infrastructure-Kernel-Driver-PowerShell-Conhost-Payload-Analysis

1. C2 Infrastructure – Resilient & Redundant Servers Process Hacker memory analysis reveals a comprehensive list of domains used by Dropper GCleaner for C2 communication. These domains are hosted on various platforms Scaleway, Render, Replit, etc., indicating a robust and redundant infrastructure...