4067 matches found
PersistAssist
PersistAssist PersistAssist is a fully modular persistence framework written in C. All persistence techniques contain a cleanup method which will server to remove the persistence aside from the persistence code. This is a WIP so there are many empty classes, the main object of this project...
monkey
Monkey documentation This folder contains the Monkey Documentation site. For more information see content/development/contribute-documentation.md...
ida_kernelcache
idakernelcache: An IDA Toolkit for analyzing iOS kernelcaches Cellebrite Fork This fork was updated to work on IDA 9.x / Python 3 / iOS 27.0 beta 1 Original Readme idakernelcache is an IDAPython module for IDA Pro to make working with iOS kernelcaches easier. The module provides functions to:...
FOSSBilling 0.5.4-0.7.x - Unauthenticated System API Role Authorization Bypass
FOSSBilling versions 0.5.4 through 0.7.x contain an authorization bypass in API role handling. The internal system role is accepted from the URL, resolves to the cron-admin identity, and reaches privileged system API methods without authentication, a session, or a CSRF token. Version 0.8.0 reject...
DahuaConsole
Dahua Console Version: Pre-alpha Bugs: Indeed TODO: Lots of stuff Install requirements sudo pip3 install -r requirements.txt Arguments -h, --help show this help message and exit --rhost RHOST Remote Target Address IP/FQDN --rport RPORT Remote Target Port --proto dhip,dvrip,3des,http,https Protoco...
Red-Team
Project Introduction This project is used to collect and summarize the following aspects of Red Team: Red Team attack mindset Red Team attack tools Red Team attack methods Highlights https://mitre-attack.github.io/ MITRE's wiki summarizing attack techniques https://huntingday.github.io MITRE |...
OptionsBleed-POC-Scanner
OptionsBleed-POC-Scanner OptionsBleed CVE-2017-9798 PoC / Scanner More information coming soon... Disclaimer This software has been created purely for the purposes of academic research and for the development of effective defensive techniques, and is not intended to be used to attack systems exce...
BeeLogger
BeeLogger Copyright 2017 BeeLogger Written by: Alisson Moretto - 4w4k3 Twitter: @4w4k3Official TOOL DESIGNED TO GOOD PURPOSES, PENTESTS, DON'T BE A CRIMINAL ! Only download it here, do not trust in other places. NOTE: BeeLogger just have official support for latin languages in this moment. HOW TO...
MHDDoS
MHDDoS DDoS Testing Toolkit · 60 Methods · Python 3.11+ For authorized testing and educational use only. Do not attack systems, websites, or networks without the owner's explicit permission. Download · Features · Installation · Docker · Documentation · Community · Hosting ⚠️ Important Notice...
smart-contract-vulnerabilities
Smart Contract Vulnerabilities A collection of smart contract vulnerabilities along with prevention methods. See /references for LLM-optimized references. Access Control Authorization Through tx.origin Insufficient Access Control Delegatecall to Untrusted Callee Signature Malleability Missing...
go-secdump
go-secdump Description Package go-secdump is a tool built to remotely extract hashes from the SAM registry hive as well as LSA secrets and cached hashes from the SECURITY hive without any remote agent and without touching disk. The tool is built on top of the library go-smb and use it to...
ermir
Ermir Ermir is an Evil/Rogue RMI Registry, it exploits unsecure deserialization on any Java code calling standard RMI methods on it list/lookup/bind/rebind/unbind. Requirements Ruby v3 or newer. Installation Install Ermir from rubygems.org: $ gem install ermir or clone the repo and build the gem:...
frida
Frida Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers. Learn more at frida.re. Two ways to install 1. Install from prebuilt binaries This is the recommended way to get started. All you need to do is: pip install frida-tools CLI tools pip install frida...
hijackthis
Download Latest build v3.x - Release Stable build v2 outdated - not updated anymore this is beta-version - major changes are in progress; although it is definitely safe to use HiJackThis+ HiJackThis+ Plus previously called: HiJackThis Fork v3 is a fork and a continuation of the original Trend Mic...
frida-ios-hook
Frida iOS hook 📍 A tool that helps you can easy using frida. It support script for trace classes, functions, and modify the return values of methods on iOS platform. 👉 For Android platform: frida-android-hook 👉 For Intercept Api was encrypted on iOS application: frida-ios-intercept-api Env OS...
CredSpy
CredSpy Enumerate Microsoft Entra ID authentication methods for email addresses using the public GetCredentialType API. This is the same endpoint the Microsoft login page uses when you enter a username. In contrast to most tools using the GetCredentialType method, CredSpy also shows the...
windows-coerced-authentication-methods
This repository contains a list of many methods to coerce a windows machine to authenticate to an attacker-controlled machine. All of these methods are callable by a standard user in the domain to force the machine account of the target Windows machine usually a domain controller to authenticate ...
CVE-2022-22980
CVE-2022-22980 Spring Data MongoDB SpEL Expression Injection MongoDB is a document-oriented NoSQL database with the scalable and flexible that used for high volume data storage. Instead of using tables and rows as in the traditional relational databases, MongoDB makes use of collections and...
Impulse
💣 Impulse Modern Denial-of-service ToolKit 💻 Main window 📡 Methods: Method| Target| Description ---|---|--- SMS| PHONE| Sends a massive amount of SMS messages and calls to a single target EMAIL| EMAIL| Sends a massive amount of Email messages to a target NTP| IP:PORT| NTP amplification is a type ...