pentest-a2p2v-core

README Automated Attack Path Planning and Validation A2P2V is a planning and cyber-attack tool that provides the capability for users to determine a set of ranked attack sequences given a specific attacker goal. The aim of the tool is to simplify process so that non-security experts can generate...

pentest-a2p2v-core

LÉAME Automated Attack Path Planning and Validation A2P2V es una herramienta de planificación y ciberataque que proporciona la capacidad a los usuarios de determinar un conjunto de secuencias de ataque clasificadas dado un objetivo específico del atacante. El objetivo de la herramienta es...

CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ

CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ This exploit builds upon the foundational work available at https://github.com/X1cT34m https://github.com/X1r0z/ActiveMQ-RCE. We have further developed the technique to achieve a reverse shell utilizing the Metasploit Framework...

CVE-2017-9805-Apache-Struts-Fuzz-N-Sploit

CVE-2017-9805StrutsFuzzNSploit Just a terrible script I wrote in Python3 to fuzz and if desired, exploit via Metasploit: CVE-2017-9805 RCE for CTF's or whatever in accordance with the thugcrowd DWTFYW Public License I stole from those cool cats =...

CVE-2017-0199

Exploit toolkit CVE-2017-0199 - v4.0 Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other...

eternal_scanner

ETERNAL SCANNER 2.4 Eternal scanner is an network scanner for Eternal Blue exploit CVE-2017-0144 & Eternal Romance named pipe CVE-2017-0145 . Screenshots 2.2 Version New Implementations Eternal Romance Vulnerability check escan -er Escan Database Splited Results escan -l Video...

CVE-2023-21839-metasploit-scanner

CVE-2023-21839-metasploit-scanner Usage git clone https://github.com/kurehalin/CVE-2023-21839-metasploit-scanner cd CVE-2023-21839-metasploit-scanner mkdir -p /.msf4/modules/auxiliary/scanner/http cp weblogiciioprce.py /.msf4/modules/auxiliary/scanner/http chmod +x...

offensive-security-lab-1

offensive-security-lab-1 A hands-on vulnerability assessment and exploitation of a Windows 7 VM using the EternalBlue CVE-2017-0143 exploit. Includes scanning, exploitation with Metasploit, post-exploitation, and remediation steps in a controlled lab environment...

TIC4301_Project

TIC4301Project TIC4301 Project - CVE-2021-40444 Download the following vagrant boxes: Kali - https://drive.google.com/file/d/1RegQcT2jjFoaQRgLjXDYl4iS0HNtmU2/view?usp=sharing Win10 - https://drive.google.com/file/d/1zcLertRoI-FrHDkRq1NO-KHaF88bMv6e/view?usp=sharing Import the boxes with the...

metasploitable3

Metasploitable3 Metasploitable3 es una máquina virtual construida desde cero con una gran cantidad de vulnerabilidades de seguridad. Está diseñada para ser utilizada como objetivo para probar exploits con metasploit. Metasploitable3 se publica bajo una licencia de estilo BSD. Consulte COPYING par...

Micro Focus Operations Bridge Manager <=2020.05 - Remote Code Execution

Micro Focus Operations Bridge Manager in versions 2020.05 and below is vulnerable to remote code execution via UCMDB. The vulnerability allows remote attackers to execute arbitrary code on affected installations of Data Center Automation. An attack requires network access and authentication as a...

Klog Server <=2.41 - Unauthenticated Command Injection

Klog Server 2.4.1 and prior is susceptible to an unauthenticated command injection vulnerability. The authenticate.php file uses the user HTTP POST parameter in a call to the shellexec PHP function without appropriate input validation, allowing arbitrary command execution as the apache user. The...

metasploit-pentest-report

Authorized Penetration Test — Metasploit Lab Scope and Authorization All targets used in this project are explicitly authorized: Target| IP| Authorization Basis ---|---|--- Metasploitable2| 192.168.3.130| Self-hosted VM on isolated host-only network. Intentionally vulnerable by design — created...

CVE-2021-44228-log4jVulnScanner-metasploit

CVE-2021-44228-log4jVulnScanner-metasploit open detection and scanning tool for discovering and fuzzing for Log4J RCE CVE-2021-44228 vulnerability preparation POC root@kitploit: git clone https://github.com/TaroballzChen/CVE-2021-44228-log4jVulnScanner-metasploit cd...

msploitego

msploitego - The Pentesting suite for Maltego THIS IS A BETA RELEASE, please be nice and report any issues Whats New New Features Now supporting multiple workspaces for Metasploit via Postgres queries A bash script that runs tons of auxiliary modules against targets. Really 'fattens' up the...

msploitego

msploitego - El conjunto de pentesting para Maltego ESTA ES UNA VERSIÓN BETA, por favor sea amable y reporte cualquier problema Novedades Nuevas características Ahora compatible con múltiples workspaces para Metasploit a través de consultas Postgres Un script bash que ejecuta toneladas de módulos...

cookie_crimes

Extracción de cookies de Chrome sin ser root Esto imprimirá las cookies de Chrome de un usuario. No necesitas su contraseña ni ser root para usarlo. genial genial genial genial genial. Si no eres del tipo de persona que regularmente obtiene la capacidad de ejecutar código en las computadoras de...

backdoor-apk

backdoor-apk backdoor-apk es un script de shell que simplifica el proceso de añadir una puerta trasera a cualquier archivo APK de Android. Los usuarios de este script de shell deben tener conocimientos prácticos de Linux, Bash, Metasploit, Apktool, el SDK de Android, smali, etc. Este script de...

Optimum

Optimum Optimum – Hack The Box Writeup Overview In this machine, the objective is to gain initial access to a Windows host by exploiting a vulnerable web service and then escalate privileges to obtain the administrator flag. The attack path involved: Service enumeration Exploitation of Rejetto HT...

meterssh

Nombre de la herramienta: MeterSSH Escrito por: David Kennedy Empresa: TrustedSec Sitio web: https://www.trustedsec.com Twitter: @TrustedSec, @HackingDave MeterSSH es una forma de tomar shellcode, inyectarlo en la memoria y luego tunelizar el puerto que desees a través de SSH para enmascarar...