phpsploit

完全な機能を備えたC2フレームワーク。ポリモーフィックなPHPワンライナーにより、 Webサーバー上に静かに永続化します...

msdat

Quentin HARDY --- [email protected] [email protected] MSDAT MSDAT（M icros oft SQL D atabase A ttacking T ool）是一款开源渗透测试工具，用于远程测试 Microsoft SQL 数据库的安全性。 MSDAT 的使用场景示例： 你有一个远程监听的 Microsoft 数据库，想要查找有效凭据以连接数据库 你有一个有效的 Microsoft SQL 帐户，想要提升权限 你有一个有效的 Microsoft SQL 帐户，想要在托管该数据库的操作系统上执行命令（例如...

msdat

Quentin HARDY --- [email protected] [email protected] MSDAT MSDAT M icros oft SQL D atabase A ttacking T ool is an open source penetration testing tool that tests the security of Microsoft SQL Databases remotely. Usage examples of MSDAT: You have a Microsoft database listening remotely...

In0ri

In0ri is an automated, AI-powered website defacement detection system. Introduction In0ri acts as an intelligent watchdog for your web applications. Instead of relying on traditional source code monitoring, it simulates real-user behavior by periodically taking screenshots of your target websites...

apache__dubbo_CVE-2021-30180_2-7-9

Apache Dubbo プロジェクト...

raven

Raven - 高度なサイバー脅威マップ（シンプル、カスタマイズ可能、レスポンシブ。D3.jsとTOPO JSONを使用し、247の国、約10万都市をカバー。外部ルックアップなしで隔離環境で使用可能！） 構造 オフライン - デモ Firefox, Chrome, Safari ライブ - 500回の攻撃を一度にリグレッション Firefox, Chrome, Safari ライブ - デモ Firefox, Chrome, Safari https://qeeqbox.github.io/raven/ 特徴 D3.jsを使用（Anime.jsではありません）...

raven

Raven - Advanced Cyber Threat Map Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, 100,000 cities, and can be used in an isolated environment without external lookups!. Structure Offline - Demo Firefox, Chrome or Safari Live - Regression 500 attacks at onc...

PacketWhisper

PacketWhisper PacketWhisper - Stealthily Transfer Data & Defeat Attribution Using DNS Queries & Text-Based Steganography, without the need for attacker-controlled Name Servers or domains; Evade DLP/MLS Devices; Defeat Data- & DNS Name Server Whitelisting Controls. Convert any file type e.g...

PcapViz

PcapViz PcapViz 利用从网络设备（使用 tcpcap 或其他抓包软件）捕获的 pcap 文件中的包信息，将网络绘制为设备拓扑和信息流图。它过滤并可选地在以下 3 个“层”中的任意一层显示捕获的数据包： 设备级流量拓扑， IP 通信， TCP/UDP 通信。 每层都能从同一组网络数据包生成不同的网络图。这种分离使得更清晰地看到每一层的数据流，而不是像许多其他可视化包那样混合在一起。应该更容易确定关键拓扑节点或发现数据外泄尝试的模式。 特性 网络拓扑图 - 2 = 设备；会话信息流图：3 = IP，4 = TCP/UDP 通信图节点标签显示国家信息和连接统计信息...

Venom

Venom - A Multi-hop Proxy for Penetration Testers 简体中文 ｜ English Venom is a multi-hop proxy tool developed for penetration testers using Go. You can use venom to easily proxy network traffic to a multi-layer intranet, and easily manage intranet nodes. This tool is limited to security research and...

IIS-ShortName-Scanner

IIS Short Name Scanner - 2012-2023 & Still Giving... Latest presentation: Beyond Microsoft IIS Short File Name Disclosure Latest blog post: https://soroush.me/blog/2023/07/thirteen-years-on-advancing-the-understanding-of-iis-short-file-name-sfn-disclosure/ I recommended everyone to try @bitquark'...

Forklift_LPE

Forklift 3.3.9 ローカル権限昇格 Forklift をインストールすると、Mac OS X 用の com.binarynights.ForkLiftHelper という新しいヘルパーが /Library/PrivilegedHelperTools/ ディレクトリに自動的にインストールされます。 XPC メッセージを処理するこのヘルパーを解析したところ、Mac OS X 上でユーザーから root への権限昇格を実現する複数の方法が明らかになりました。 XPC 呼び出しを受け入れるとき、デフォルトでは HelperTool...

Zerodapi

Zerodai Documentation Start! root@kitploit: pip install zerodai==0.0.0.20 root@kitploit: export zerodapikey="YOURAPIKEY" Get your api key https://zerodai.com Simple Conversational Chat - No memory root@kitploit: from zerodai import zerodai import os zerodai.apiauthos.getenv"zerodapikey" messages ...

Scammers are getting smarter about where they target you

Scammers are becoming more strategic about where they target people. Nine in ten toll scams—the fake unpaid-toll messages that threaten fines or license suspension—arrive by email or text, while roughly six in ten romance scams show up first on social media. That’s no coincidence. Rather than...

bitcracker

BitCracker BitCracker is the first open source password cracking tool for storage devices Hard Disk, USB Pendrive, SD card, etc... encrypted with BitLocker, an encryption feature available on Windows Vista, 7, 8.1 and 10 Ultimate, Pro and Enterprise editions. BitLocker offers a number of differen...

Exploit for Missing Authentication for Critical Function in Smartertools Smartermail

SmarterMail ConnectToHub RCE A Python-based exploit for CVE...

Exploit for Missing Authentication for Critical Function in Smartertools Smartermail

SmarterMail ConnectToHub RCE A Python-based exploit for CVE...

fireELF

fireELF fireELF is a opensource fileless linux malware framework thats crossplatform and allows users to easily create and manage payloads. By default is comes with 'memfdcreate' which is a new way to run linux elf executables completely from memory, without having the binary touch the harddrive...

SharpSploit

SharpSploit SharpSploit is a .NET post-exploitation library written in C that aims to highlight the attack surface of .NET and make the use of offensive .NET easier for red teamers. SharpSploit is named, in part, as a homage to the PowerSploit project, a personal favorite of mine! While SharpSplo...

pickle_exploit

PickleExploit Demonstrating Remote Code Execution Vulnerability via Pickle Serialization in ClearML 🖥️ This script was developed by h3x0v3rl0rd. This proof of concept PoC demonstrates a potential security vulnerability involving the serialization and deserialization of Python objects using the...