perl-CVE-2013-1775

CVE-2013-1775 Apple Mac OSX 10.8.4 - Повышение привилегий Perl-версия эксплойта повышения привилегий CVE-2013-1775 для Apple Mac OSX 10.8.4. Ссылки: https://www.exploit-db.com/exploits/27965/ https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/sudopasswordbypass....

OSXAuditor

OS X Auditor OS X Auditor — это бесплатный инструмент компьютерной криминалистики для Mac OS X. OS X Auditor анализирует и вычисляет хэши следующих артефактов на работающей системе или копии анализируемой системы: расширения ядра системные агенты и демоны агенты и демоны сторонних разработчиков...

RootPipeTester

Содержание 1. Что такое RootPipe Tester? 2. Зачем мне использовать RootPipe Tester? 3. Как использовать RootPipe Tester? 4. ПАНИКА!!! Моя система уязвима? Мы все умрём? 1. OS X 10.10 Yosemite 2. OS X 10.9 Mavericks 3. OS X 10.8 Mountain Lion 4. OS X 10.7 Lion, Mac OS X 10.6 Snow Leopard, Mac OS X...

phpsploit

Full-featured C2 framework which silently persists on webserver via polymorphic PHP oneliner...

macsurf

Современный веб на 25-летнем Mac. MacSurf — это веб-браузер для Classic Mac OS 9 PowerPC. CSS3, JavaScript ES5 и PNG с альфа-каналом — и всё это работает на G3 iMac. MacSurf — это проект на полную ставку. Если он вернул ваш старый Mac в веб, каждый доллар помогает продолжать разработку. Следите з...

xmap

XMap: The Internet Scanner XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning. XMap is reimplemented and improved thoroughly from ZMap and is fully compatible with ZMap, armed with the "5 minutes" probing speed and novel scanning techniques...

lunar

LUNAR Lockdown UNix Auditing and Reporting Version Current version 15.9.1 Refer to lunar.sh and changelog for more up to date version information License CC BY-SA: https://creativecommons.org/licenses/by-sa/4.0/ Fund me here: https://ko-fi.com/richardatlateralblast NOTICE Run this code in audit...

hershell

Hershell Simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception. Supported OS are: Windows Linux Mac OS FreeBSD and derivatives Why ? Although meterpreter payloads are...

Disk-Arbitrator

소개 Disk Arbitrator는 Mac OS X 포렌식 유틸리티로, 디스크 장치를 이미징하는 동안 올바른 포렌식 절차를 따르도록 사용자를 돕기 위해 설계되었습니다. Disk Arbitrator는 기본적으로 Disk Arbitration 프레임워크용 사용자 인터페이스로, 프로그램이 파일 시스템의 자동 마운트를 포함한 블록 저장 장치 관리에 참여할 수 있게 해줍니다. 활성화되면 Disk Arbitrator는 파일 시스템 마운트를 차단하여 읽기-쓰기로 마운트되어 증거 무결성을 침해하는 일을 방지합니다. 중요한 점은 Disk...

RootPipe-Demo

RootPipe-Demo Это демонстрационное Mac-приложение, подтверждающее концепцию уязвимости повышения привилегий RootPipe CVE-2015-1130, обнаруженной Эмилем Кварнхаммаром из TrueSec Демонстрация написана на Objective-C, портирована с Python PoC отсюда: RootPipe Использование Чтобы воспользоваться,...

kurukshetra

Kurukshetra Kurukshetra is a web framework that’s developed with the aim of being the first open source framework which provides a solid foundation to host reasonably complex secure coding challenges while still providing the ability to efficiently and dynamically execute each challenge on the...

hershell

Hershell NOTE: the project has been forked on this repo, check there for any other developments. Hershell is a simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception...

chipsec

CHIPSEC: Platform Security Assessment Framework CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware BIOS/UEFI, and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities...

zizzania

zizzania zizzania sniffs wireless traffic listening for WPA handshakes and dumping only those frames suitable to be decrypted one beacon + EAPOL frames + data. In order to speed up the process, zizzania sends IEEE 802.11 DeAuth frames to the stations whose handshake is needed, properly handling...

wafpass

WAFPASS root@kitploit: ██╗ ██╗ █████╗ ███████╗██████╗ █████╗ ███████╗███████╗ ██║ ██║██╔══██╗██╔════╝██╔══██╗██╔══██╗██╔════╝██╔════╝ ██║ █╗ ██║███████║█████╗ ██████╔╝███████║███████╗███████╗ ██║███╗██║██╔══██║██╔══╝ ██╔═══╝ ██╔══██║╚════██║╚════██║ ╚███╔███╔╝██║ ██║██║ ██║ ██║ ██║███████║███████...

test_struts2_vulnerability_CVE-2017-5638

teststruts2vulnerabilityCVE-2017-5638inMACOSX тест уязвимости struts2 CVE-2017-5638 в Mac OS X скачать тестовое веб-приложение и запустить его в tomcat root@kitploit: install tomcat brew install tomcat confirm where the tomcat installed ls -lF which catalina confirm tomcat home dir ls -lF...

arpy

Arpy Arpy is an easy-to-use ARP spoofing MiTM tool for Mac. It provides 3 targeted functions: Packet Sniffing Visited Domains Visited Domains with Gource Each function will be explained below. Tested OS to date Darwin 14.3.0 Darwin Kernel Version 14.3.0 Mac OS X Requirements Python 2.7 Gource Sca...

KisMac2

SI PREGA DI NOTARE, QUESTO PROGETTO NON È PIÙ MANTENUTO KisMac2 KisMAC è uno strumento gratuito e open source per il wardriving e la sicurezza wireless per Mac OS X. Segnalazione problemi: D'ora in poi, utilizza il tracker qui su GitHub...

Astra Linux – Vulnerability in WebKit2GTK

A memory corruption issue has been resolved through improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4, and iPadOS 16.4, as well as iOS 15.7.7 and iPadOS 15.7.7. Processing web content may lead to arbitrary code execution. Apple is aware of a report...

Astra Linux – Vulnerability in WebKit2GTK

This issue was addressed by adding additional logic. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, and watchOS 10.5. A maliciously crafted webpage may be able to obtain user fingerprints...