impacket

Impacket Copyright Fortra, LLC and its affiliated companies. All rights reserved. Impacket was originally created by SecureAuth, and now maintained by Fortra's Core Security. Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level...

netstat2neo4j

Netstat Visualization with Neo4j Description Graphs help to spot anomalies and patterns in large datasets. This script takes netstat information from multiple hosts and formats them in a way to make them importable into Neo4j. Neo4j can be queried for find connections to certain hosts, from certa...

edk2

============== EDK II Project A modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications from www.uefi.org. .. image::...

edk2

============== Progetto EDK II Un ambiente di sviluppo firmware moderno, ricco di funzionalità e cross-platform per le specifiche UEFI e PI di www.uefi.org. .. image::...

RedTeam-Tools

RedTeam-Tools Questa repository GitHub contiene una collezione di 150+ strumenti e risorse utili per attività di red teaming. Alcuni strumenti sono progettati specificamente per il red teaming, mentre altri sono più generici e possono essere adattati a un contesto di red teaming. 🔗 Se sei un Blue...

Perfusion

Perfusion Unter Windows 7 , Windows Server 2008R2 , Windows 8 und Windows Server 2012 ist der Registrierungsschlüssel der Dienste RpcEptMapper und DnsCache nur 7/2008R2 mit schwachen Berechtigungen konfiguriert. Jeder lokale Benutzer kann einen Unterschlüssel Performance erstellen und dann die...

Struts2-048

Struts2-048 CVE-2017-9791 Autore: DragonEgg root@kitploit: def Usage: print 'check:' print ' python file.py http://1.1.1.1/struts2-showcase/integration/saveGangster.action' print 'poc:' print ' python file.py http://1.1.1.1/struts2-showcase/integration/saveGangster.action command' Demo...

AutoBrowser

AutoBrowser 4.0 AutoBrowser è uno strumento scritto in Python per penetration tester. Lo scopo di questo strumento è creare un report file JSON e screenshot delle porte basate su HTTP/S sulla rete. Puoi scegliere tra analizzare un report Nmap file XML -oX o eseguire una scansione con Nmap, poi lo...

sudo-snooper

sudo-snooper sudo-snooper acts like the original sudo binary to fool users into entering their passwords. It will show a fake prompt just like the original to the user to enter their sudo password. This can be useful in penetration tests or security evaluations for testing user knowledge...

cdb

Pown CDB Pown CDB è un'utilità per il Chrome Debug Protocol. L'obiettivo principale dello strumento è automatizzare i compiti comuni per aiutare a eseguire il debug di applicazioni web dalla riga di comando e monitorare e intercettare attivamente richieste e risposte HTTP. Ciò è particolarmente...

cdb

Pown CDB Pown CDB is a Chrome Debug Protocol utility. The main goal of the tool is to automate common tasks to help debug web applications from the command-line and actively monitor and intercept HTTP requests and responses. This is particularly useful during penetration tests and other types of...

yara

!IMPORTANT This project is in maintenance mode. More info: https://virustotal.github.io/yara-x/blog/yara-x-is-stable/ YARA in a nutshell YARA is a tool aimed at but not limited to helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malwar...

z3

Z3 Z3 ist ein Theorembeweiser von Microsoft Research. Es ist unter der MIT-Lizenz lizenziert. Windows-Binärverteilungen enthalten C++-Laufzeit-Redistributables Wenn Sie mit Z3 nicht vertraut sind, können Sie hier beginnen. Vorgefertigte Binärdateien für stabile und nächtliche Versionen sind hier...

CVE-2024-22274-RCE

Privilegieneskalation: VMware vCenter Server Authenticated RCE 📜 Beschreibung Die „com.vmware.appliance.recovery.backup.job.create“ und die „com.vmware.appliance.recovery.backup.validate“ API-Komponenten sind anfällig für einen Flag-Injection-Angriff, der ausgenutzt werden kann, um beliebige...

RFCpwn

RFCpwn Ein SAP-Enumeration- und Exploitation-Toolkit, das SAP-RFC-Aufrufe verwendet Twitter: @icryo Dies ist ein Toolkit zur Demonstration der Auswirkungen kompromittierter Servicekonten. Dieses PoC ist nicht für den Einsatz in Produktionsumgebungen gedacht, es wird keine Garantie für Stabilität...

awesome-bugbounty-tools

Awesome Bug Bounty Tools Eine kuratierte Liste verschiedener Bug-Bounty-Tools Inhaltsverzeichnis Recon Subdomain Enumeration Port Scanning Screenshots Technologies Content Discovery Content Filtering Links Parameters Fuzzing Monitoring Waf Evasion Exploitation Command Injection CORS...

pastego

pastego Scrape/Parse Pastebin usando GO e l'espressione grammaticale PEG. pastego.png Installazione $ go get -u github.com/notdodo/pastego Utilizzo Le parole chiave di ricerca sono sensibili alle maiuscole/minuscole pastego -s "password,keygen,PASSWORD" Puoi usare operatori booleani per ridurre i...

pastego

pastego Scrape/Parse Pastebin using GO and grammar expression PEG. pastego.png Installation $ go get -u github.com/notdodo/pastego Usage Search keywords are case sensitive pastego -s "password,keygen,PASSWORD" You can use boolean operators to reduce false positive pastego -s "quake && earthquake,...

uefi_retool

uefiretool A tool for UEFI firmware reverse engineering. UEFI firmware analysis with uefiretool script Usage: Copy idaplugin/uefianalyser.py script and idaplugin/uefianalyser directory to IDA plugins directory Edit config.json file PEDIR is a directory that contains all executable images from the...

uefi_retool

uefiretool Uno strumento per il reverse engineering del firmware UEFI. Analisi del firmware UEFI con lo script uefiretool Utilizzo: Copia lo script idaplugin/uefianalyser.py e la directory idaplugin/uefianalyser nella directory dei plugin di IDA Modifica il file config.json PEDIR è una directory...