RootPipeTester

目录 1. 什么是 RootPipe Tester？ 2. 为什么我应该使用 RootPipe Tester？ 3. 如何使用 RootPipe Tester？ 4. 恐慌！！！我的系统有漏洞？我们都要完蛋了吗？ 1. OS X 10.10 Yosemite 2. OS X 10.9 Mavericks 3. OS X 10.8 Mountain Lion 4. OS X 10.7 Lion, Mac OS X 10.6 Snow Leopard, Mac OS X 10.5 Leopard, Mac OS X 10.4 Tiger 5. Mac OS X 10.3 Panther 6...

hershell

Hershell NOTE: the project has been forked on this repo, check there for any other developments. Hershell is a simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception...

kurukshetra

Kurukshetra Kurukshetra is a web framework that’s developed with the aim of being the first open source framework which provides a solid foundation to host reasonably complex secure coding challenges while still providing the ability to efficiently and dynamically execute each challenge on the...

Disk-Arbitrator

Introducción Disk Arbitrator es una utilidad forense para Mac OS X diseñada para ayudar al usuario a garantizar que se sigan los procedimientos forenses correctos durante la creación de imágenes de un dispositivo de disco. Disk Arbitrator es esencialmente una interfaz de usuario para el framework...

phpsploit

Full-featured C2 framework which silently persists on webserver via polymorphic PHP oneliner...

OSXAuditor

OS X Auditor OS X Auditor 是一款免费的 Mac OS X 计算机取证工具。 OS X Auditor 会解析并对以下运行系统或待分析系统副本中的工件进行哈希处理： 内核扩展 系统代理和守护进程 第三方代理和守护进程 旧的、已弃用的系统和第三方启动项 用户的代理 用户下载的文件 已安装的应用程序 它提取： 用户的隔离文件 用户的 Safari 历史记录、下载记录、最常访问站点、LastSession、HTML5 数据库和本地存储 用户的 Firefox cookie、下载记录、表单历史记录、权限、位置记录和登录信息 用户的 Chrome...

zizzania

zizzania zizzania sniffs wireless traffic listening for WPA handshakes and dumping only those frames suitable to be decrypted one beacon + EAPOL frames + data. In order to speed up the process, zizzania sends IEEE 802.11 DeAuth frames to the stations whose handshake is needed, properly handling...

wafpass

WAFPASS root@kitploit: ██╗ ██╗ █████╗ ███████╗██████╗ █████╗ ███████╗███████╗ ██║ ██║██╔══██╗██╔════╝██╔══██╗██╔══██╗██╔════╝██╔════╝ ██║ █╗ ██║███████║█████╗ ██████╔╝███████║███████╗███████╗ ██║███╗██║██╔══██║██╔══╝ ██╔═══╝ ██╔══██║╚════██║╚════██║ ╚███╔███╔╝██║ ██║██║ ██║ ██║ ██║███████║███████...

hershell

Hershell Simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception. Supported OS are: Windows Linux Mac OS FreeBSD and derivatives Why ? Although meterpreter payloads are...

RootPipe-Demo

RootPipe-Demo Questa è un'applicazione Mac Proof-of-Concept che dimostra la vulnerabilità di escalation dei privilegi RootPipe CVE-2015-1130 identificata da Emil Kvarnhammar di TrueSec Questa demo è stata scritta in Objective-C, portata dal PoC Python qui: RootPipe Utilizzo Per usarlo, fornisci...

arpy

Arpy Arpy is an easy-to-use ARP spoofing MiTM tool for Mac. It provides 3 targeted functions: Packet Sniffing Visited Domains Visited Domains with Gource Each function will be explained below. Tested OS to date Darwin 14.3.0 Darwin Kernel Version 14.3.0 Mac OS X Requirements Python 2.7 Gource Sca...

KisMac2

SI PREGA DI NOTARE, QUESTO PROGETTO NON È PIÙ MANTENUTO KisMac2 KisMAC è uno strumento gratuito e open source per il wardriving e la sicurezza wireless per Mac OS X. Segnalazione problemi: D'ora in poi, utilizza il tracker qui su GitHub...

test_struts2_vulnerability_CVE-2017-5638

teststruts2vulnerabilityCVE-2017-5638inMACOSX тест уязвимости struts2 CVE-2017-5638 в Mac OS X скачать тестовое веб-приложение и запустить его в tomcat root@kitploit: install tomcat brew install tomcat confirm where the tomcat installed ls -lF which catalina confirm tomcat home dir ls -lF...

perl-CVE-2013-1775

CVE-2013-1775 Apple Mac OSX 10.8.4 - Escalade de privilèges Version Perl de l'exploit CVE-2013-1775 Apple Mac OSX 10.8.4 - Escalade de privilèges. Références: https://www.exploit-db.com/exploits/27965/...

macsurf

Das moderne Web, auf einem 25 Jahre alten Mac. MacSurf ist ein Webbrowser für Classic Mac OS 9 PowerPC. CSS3, ES5-JavaScript und PNGs mit Alphakanal – lauffähig auf einem G3 iMac. MacSurf ist ein Vollzeitprojekt. Wenn es deinen alten Mac zurück ins Web gebracht hat, hilft jeder Dollar, die...

lunar

LUNAR Lockdown UNix Auditing and Reporting Version Current version 15.9.1 Refer to lunar.sh and changelog for more up to date version information License CC BY-SA: https://creativecommons.org/licenses/by-sa/4.0/ Fund me here: https://ko-fi.com/richardatlateralblast NOTICE Run this code in audit...

chipsec

CHIPSEC: Platform Security Assessment Framework CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware BIOS/UEFI, and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities...

Astra Linux – Vulnerability in WebKit2GTK

A memory corruption issue has been resolved through improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4, and iPadOS 16.4, as well as iOS 15.7.7 and iPadOS 15.7.7. Processing web content may lead to arbitrary code execution. Apple is aware of a report...

xmap

XMap: The Internet Scanner XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning. XMap is reimplemented and improved thoroughly from ZMap and is fully compatible with ZMap, armed with the "5 minutes" probing speed and novel scanning techniques...

Linux Distros Unpatched Vulnerability : CVE-2026-76035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox...