OSXAuditor

OS X Auditor OS X Auditor는 무료 Mac OS X 컴퓨터 포렌식 도구입니다. OS X Auditor는 실행 중인 시스템 또는 분석하려는 시스템의 사본에서 다음 아티팩트를 파싱하고 해싱합니다: 커널 확장 시스템 에이전트 및 데몬 타사 에이전트 및 데몬 오래되고 더 이상 사용되지 않는 시스템 및 타사 시작 항목 사용자 에이전트 사용자의 다운로드된 파일 설치된 애플리케이션 다음을 추출합니다: 사용자의 격리된 파일 사용자의 Safari 기록, 다운로드, 상위 사이트, LastSession, HTML5 데이터베이스 ...

RootPipeTester

목차 1. RootPipe Tester란 무엇인가? 2. 왜 RootPipe Tester를 사용해야 하나? 3. RootPipe Tester를 어떻게 사용하나? 4. 패닉!!! 내 시스템이 취약하다고? 우리 모두 죽는 건가? 1. OS X 10.10 Yosemite 2. OS X 10.9 Mavericks 3. OS X 10.8 Mountain Lion 4. OS X 10.7 Lion, Mac OS X 10.6 Snow Leopard, Mac OS X 10.5 Leopard, Mac OS X 10.4 Tiger 5. Mac O...

phpsploit

Full-featured C2 framework which silently persists on webserver via polymorphic PHP oneliner...

macsurf

25년 된 Mac에서 만나는 현대 웹. MacSurf는 Classic Mac OS 9 PowerPC용 웹 브라우저입니다. CSS3, ES5 JavaScript, 알파 채널 PNG — G3 iMac에서 실행됩니다. MacSurf는 전업풀타임 프로젝트입니다. 이 프로젝트가 당신의 올드 Mac을 다시 웹에 연결해 주었다면, 모든 도움이 개발을 계속하는 데 큰 힘이 됩니다. Patreon에서 개발 로그와 함께 진행 상황을 팔로우해 주세요. 후원자 MacSurf는 후원자들 덕분에 살아 있습니다 — 감사합니다: Patreon Shlooo...

xmap

XMap: The Internet Scanner XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning. XMap is reimplemented and improved thoroughly from ZMap and is fully compatible with ZMap, armed with the "5 minutes" probing speed and novel scanning techniques...

lunar

LUNAR Lockdown UNix Auditing and Reporting Version Current version 15.9.1 Refer to lunar.sh and changelog for more up to date version information License CC BY-SA: https://creativecommons.org/licenses/by-sa/4.0/ Fund me here: https://ko-fi.com/richardatlateralblast NOTICE Run this code in audit...

hershell

Hershell Simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception. Supported OS are: Windows Linux Mac OS FreeBSD and derivatives Why ? Although meterpreter payloads are...

Disk-Arbitrator

はじめに Disk Arbitrator は、ディスクデバイスのイメージング中に正しいフォレンジック手順が守られていることを確認するために設計された Mac OS X フォレンジックユーティリティです。Disk Arbitrator は基本的に、Disk Arbitration フレームワークへのユーザーインターフェースであり、このフレームワークにより、プログラムはファイルシステムの自動マウントを含むブロックストレージデバイスの管理に参加できます。有効にすると、Disk Arbitrator...

RootPipe-Demo

RootPipe-Demo これは、Emil Kvarnhammar氏（TrueSec）によって特定されたRootPipe権限昇格の脆弱性（CVE-2015-1130）を実証するProof-of-Concept Macアプリケーションです。 このデモはObjective-Cで書かれており、Python PoCから移植されました：RootPipe 使用方法 使用方法：権限を昇格させたいファイルのパスを指定し、そのファイルを権限昇格後にコピーする先のパスを指定し、権限を8進数形式（例：04777）で指定し、オプションでファイルの所有者名とグループを指定します。 対応OS Mac OS X...

kurukshetra

Kurukshetra Kurukshetra is a web framework that’s developed with the aim of being the first open source framework which provides a solid foundation to host reasonably complex secure coding challenges while still providing the ability to efficiently and dynamically execute each challenge on the...

hershell

Hershell NOTE: the project has been forked on this repo, check there for any other developments. Hershell is a simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception...

chipsec

CHIPSEC: Platform Security Assessment Framework CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware BIOS/UEFI, and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities...

perl-CVE-2013-1775

CVE-2013-1775 Apple Mac OSX 10.8.4 - 권한 상승 CVE-2013-1775 Apple Mac OSX 10.8.4 - 권한 상승 익스플로잇의 Perl 버전입니다. 참고 자료: https://www.exploit-db.com/exploits/27965/ https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/sudopasswordbypass.rb...

zizzania

zizzania zizzania sniffs wireless traffic listening for WPA handshakes and dumping only those frames suitable to be decrypted one beacon + EAPOL frames + data. In order to speed up the process, zizzania sends IEEE 802.11 DeAuth frames to the stations whose handshake is needed, properly handling...

wafpass

WAFPASS root@kitploit: ██╗ ██╗ █████╗ ███████╗██████╗ █████╗ ███████╗███████╗ ██║ ██║██╔══██╗██╔════╝██╔══██╗██╔══██╗██╔════╝██╔════╝ ██║ █╗ ██║███████║█████╗ ██████╔╝███████║███████╗███████╗ ██║███╗██║██╔══██║██╔══╝ ██╔═══╝ ██╔══██║╚════██║╚════██║ ╚███╔███╔╝██║ ██║██║ ██║ ██║ ██║███████║███████...

test_struts2_vulnerability_CVE-2017-5638

teststruts2vulnerabilityCVE-2017-5638inMACOSX Mac OS X에서 struts2 취약점 CVE-2017-5638 테스트 테스트 웹 앱을 다운로드하고 tomcat에서 실행 root@kitploit: install tomcat brew install tomcat confirm where the tomcat installed ls -lF which catalina confirm tomcat home dir ls -lF /usr/local/Cellar/tomcat/8.5.11/libexec crea...

arpy

Arpy Arpy is an easy-to-use ARP spoofing MiTM tool for Mac. It provides 3 targeted functions: Packet Sniffing Visited Domains Visited Domains with Gource Each function will be explained below. Tested OS to date Darwin 14.3.0 Darwin Kernel Version 14.3.0 Mac OS X Requirements Python 2.7 Gource Sca...

KisMac2

SI PREGA DI NOTARE, QUESTO PROGETTO NON È PIÙ MANTENUTO KisMac2 KisMAC è uno strumento gratuito e open source per il wardriving e la sicurezza wireless per Mac OS X. Segnalazione problemi: D'ora in poi, utilizza il tracker qui su GitHub...

Astra Linux – Vulnerability in WebKit2GTK

A memory corruption issue has been resolved through improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4, and iPadOS 16.4, as well as iOS 15.7.7 and iPadOS 15.7.7. Processing web content may lead to arbitrary code execution. Apple is aware of a report...

Astra Linux – Vulnerability in WebKit2GTK

This issue was addressed by adding additional logic. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, and watchOS 10.5. A maliciously crafted webpage may be able to obtain user fingerprints...