1732 matches found
kali-rpi-luks-crypt
Cifrado de disco completo para Kali en Raspberry u otra arquitectura similar usando LUKS Esta guía está dedicada a ejecutar Kali en Raspberry u otra arquitectura similar, p. ej. ODROID-C2 usando cifrado de disco completo con LUKS. Basada en el documento un poco desactualizado aquí. Motivación...
copy-fail-CVE-2026-31431-C
copy-fail-CVE-2026-31431-C Verificado en ubuntu 24, ubuntu 25, kali 2026. gcc -o exploit exploit.c -lz && chmod +x exploit && ./exploit Compilación estática sudo apt install zlib1g-dev gcc -static -o exploit exploit.c -lz o aarch64-linux-gnu-gcc -o exploit exploit.c -lz -static...
web-hacking-playground
Web Hacking Playground Description Web Hacking Playground is a controlled web hacking environment. It consists of vulnerabilities found in real cases, both in pentests and in Bug Bounty programs. The objective is that users can practice with them, and learn to detect and exploit them. Other topic...
web-hacking-playground
Web Hacking Playground 描述 Web Hacking Playground 是一个受控的 Web 黑客环境。它包含真实案例中发现的漏洞，既来自渗透测试也来自漏洞赏金项目。目标是让用户能够通过这些漏洞进行练习，并学习如何检测和利用它们。 还将涉及其他有趣的主题，例如：通过创建自定义有效载荷绕过过滤器、执行利用多个漏洞的链式攻击、开发概念验证脚本等。 重要说明 应用程序源代码是可见的。然而，本实验室采用黑盒方法。因此，不应通过审查代码来解决问题。 此外，需要注意的是，模糊测试（包括参数和目录）以及暴力攻击在本实验室中不会带来任何优势。 环境搭建 建议使用 Kali...
webkiller
WebKiller V2 Tool Information Gathering Write With Python. PreView ██╗ ██╗███████╗██████╗ ██╗ ██╗██╗██╗ ██╗ ███████╗██████╗ ██║ ██║██╔════╝██╔══██╗██║ ██╔╝██║██║ ██║ ██╔════╝██╔══██╗ ██║ █╗ ██║█████╗ ██████╔╝█████╔╝ ██║██║ ██║ █████╗ ██████╔╝ ██║███╗██║██╔══╝ ██╔══██╗██╔═██╗ ██║██║ ██║ ██╔══╝...
catsploit
CATSploit🐈 CATSploit is an automated penetration testing tool using Cyber Attack Techniques Scoring CATS method that can be used without pentester. Currently, pentesters implicitly made the selection of suitable attack techniques for target systems to be attacked. CATSploit uses system...
nodexp
NodeXP - Detection and Exploitation Tool for Node.js Services! NodeXP is an intergrated tool, written in Python 2.7, capable of detecting possible vulnerabilities on Node.js services as well as exploiting them in an automated way, based on ServerSideJavascriptInjection attack! Getting Started -...
ncrack
ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...
FinalRecon
Twitter - Telegram - thewhiteh4t's Blog FinalRecon is an all in one automatic web reconnaissance tool written in python. Goal of FinalRecon is to provide an overview of the target in a short amount of time while maintaining the accuracy of results. Instead of executing several tools one after...
killcast
Manipulate Chromecast Devices in your Network Available in Inspiration - Thousands of Google Chromecast Devices Hijacked to Promote PewDiePie This tool is a Proof of Concept and is for Research Purposes Only, killcast shows how Chromecast devices can be easily manipulated and hijacked by anyone...
CVE-2021-4034
CVE-2021-4034 PoC CVE 2021-4034 PwnKit: Vulnerabilidad de escalada de privilegios locales descubierta en pkexec de polkit PoC Verificado en Kali. ┌──kali㉿kali-/Documents └─$ grep PRETTY /etc/os-release PRETTYNAME="Kali GNU/Linux Rolling" ──kali㉿kali-/Documents └─$ lsbrelease -a No LSB modules are...
Pip-Intel
🌐PIP-INTEL - 开源情报与网络智能工具🌐 测试环境：Kali-Linux Pip-Intel 是一款专为 OSINT（开源情报）和网络情报收集活动设计的强大工具。 它将多种开源工具整合到一个用户友好的界面中， 简化了研究人员和网络安全专业人员的数据收集与分析流程。 Pip-Intel 利用 Python 编写的 pip 包从各种数据点收集信息。 该工具具备通过电子邮件地址、电话号码、IP 地址和社交媒体账户收集详细情报的能力。 它提供广泛的功能，包括基于电子邮件的 OSINT 操作、 基于电话号码的查询、IP 地址地理定位、社交媒体与用户分析，甚至暗网搜索。...
sqlmap-nu11secur1ty
sqlmap sqlmap es una herramienta para pruebas de penetración "penetration testing" de software libre que automatiza el proceso de detección y explotación de fallos mediante inyección de SQL además de tomar el control de servidores de bases de datos. Contiene un poderoso motor de detección, así co...
Cybersecurity-Projects
Proyectos de Ciberseguridad 🐉 70 Proyectos de Ciberseguridad, Hojas de Ruta de Certificación y Recursos Ver Proyectos Completos: Actualmente en desarrollo: Herramienta de Mitigación DDoS Navegación Rápida Proyectos Proyectos prácticos de ciberseguridad con código fuente completo, organizados en...
DraculaOS
基于Kali Linux的OVA文件，用于OSINT调查和网络情报。 下载 DRACULA Os OVA的下载链接可在以下网址找到。 DraculaOs OVA下载文件大小为8 GB。 https://easyupload.io/o1y3jt https://mega.nz/file/569AXCBTDwXtsbHUtdf-K0eHdx578WpbL-2r63tZHqUkUD4WwzQ 要访问虚拟机，需要以下凭据： 用户: root 密码: dracula DRACULA OS 🧛🏻♀️ Dracula OS 是一款专为OSINT（开源情报）和网络情报任务精心设计的Linux操作系统。...
Tools
Herramientas Herramientas de Ciberseguridad SecTools.Org: Top 125 Herramientas de Seguridad de Red Lista de SecTools.Org: Top 125 Herramientas de Seguridad de Red - Durante más de una década, el proyecto Nmap ha estado catalogando las herramientas favoritas de la comunidad de seguridad de redes...
social-engineer-toolkit
The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...
owtf
Offensive Web Testing Framework OWTF OWASP OWTF helps penetration testers stay efficient and aligned with security standards such as the OWASP Web Security Testing Guide, the OWASP Top 10, PTES, and NIST so that they have more time to: See the big picture and think outside the box. Efficiently...
owtf
攻击性 Web 测试框架 OWTF OWASP OWTF 帮助渗透测试人员保持高效，并遵循诸如 OWASP Web 安全测试指南、OWASP Top 10、PTES 和 NIST 等安全标准，以便他们有更多时间： 纵览全局并跳出固有思维。 高效地发现、验证和组合漏洞。 调查复杂问题，例如业务逻辑缺陷或多租户边界情况。 对高风险区域进行有针对性的模糊测试。 在紧张的评估时间窗口内展示有意义的实际影响。 该工具高度可配置，任何人都可以创建简单的插件或在配置文件中添加新测试，而无需具备开发经验。 注意 OWTF...