Log4j-Scanner-Exploit

Log4Shell-Scanner-Exploit Script em bash que permite identificar e/ou explorar a vulnerabilidade Log4shell de forma remota. Esta ferramenta realiza diferentes testes usando payloads LDAP e cabeçalhos X-Api-Version, User-Agent e X-Forwarded-For. Utilize sempre este script com autorização prévia do...

Log4Shell-Scanner

Log4Shell-Scanner Python-Skript zur Erkennung der Log4Shell-Sicherheitslücke CVE-2021-44228...

log4shell-scanner

log4shell-scanner Ein abhängigkeitsfreier, defensiver Scanner für Log4Shell — findet verwundbare log4j-core-JARs und JNDI-Exploit-Muster in Logs und Konfigurationen. Warum dieses Projekt Während meiner CERT-In -Rotation arbeitete ich an Bedrohungserkennung, Eingrenzung, Behebung und Threat Huntin...

Metasploit Wrap-Up

Dump Windows secrets from Active Directory This week, our very own Christophe De La Fuente added an important update to the existing Windows Secret Dump module. It is now able to dump secrets from Active Directory, which will be very useful for Metasploit users. This new feature uses the Director...