Lucifer

Lucifer Codacy Badge Initial Release: 09/09/2020 Setup git clone https://github.com/Skiller9090/Lucifer.git cd Lucifer pip install -r requirements.txt python main.py --help If you want the cutting edge changes add -b dev to the end of git clone https://github...

RiskySPN

RiskySPNs RiskySPNs is a collection of PowerShell scripts focused on detecting and abusing accounts associated with SPNs Service Principal Name. This module can assist blue teams to identify potentially risky SPNs as well as red teams to escalate privileges by leveraging Kerberos and Active...

CVE-2022-21668-Pipenv-RCE-vulnerability

CVE-2022-21668-Pipenv-RCE-vulnerability 1. Introduction In this document the Pipenv vulnerabilityCVE-2022-21668 is discussed in detail. The following sections cover the bug code in pipenv/utils.py file which opens up the door for various RCE attacks and also about the recent fix which validates...

copyfail

CVE-2026-31431 — "Copy Fail" Safe Detection Script A read-only detection script for the Copy Fail Linux kernel local privilege escalation vulnerability. No exploit code. No AFALG socket opened. No files written outside /etc/modprobe.d only when you apply the mitigation manually. Background Copy...

liferay-ga4-rce-research

Liferay CE 7.0.3 GA4 — Vulnerability Research RAPTOR Loop-Hunt A security audit of Liferay Portal CE 7.0.3 GA4 git tag 7.0.3-ga4, commit b2d7cc68a performed with the RAPTOR loop-hunt methodology: deterministic recon → 25 isolated generator agents reading raw source → 22 independent judge agents...

drozer

drozer drozer is a security testing framework for Android. drozer allows you to search for security vulnerabilities in apps and devices by assuming the role of an app and interacting with the Android Runtime, other apps' IPC endpoints and the underlying OS. drozer provides tools to help you use,...

ONUS

ONUS - Automated Vulnerability Assessment & Penetration Testing Built by maverickaayush. A locally-hosted, air-gapped VAPT tool: point it at an authorized target domain and it runs 8 scanning modules in parallel, deterministically scores every finding CVSS v3.1, optionally adds AI-generated...

lsarelayx

lsarelayx Introduction lsarelayx is system wide NTLM relay tool designed to relay incoming NTLM based authentication to the host it is running on. lsarelayx will relay any incoming authentication request which includes SMB. Since lsarelayx hooks into existing application authentication flows, the...

ctftool

CTFTOOL Just want to test the SYSTEM exploit? Click here. An Interactive CTF Exploration Tool This is ctftool, an interactive command line tool to experiment with CTF, a little-known protocol used on Windows to implement Text Services. This might be useful for studying Windows internals, debuggin...

dnsenum

README - dnsenum.pl VERSION: 1.2.4 multithreaded perl script to enumerate DNS information of a domain and to discover non-contiguous ip blocks. OPERATIONS: 1 Get the host's addresse A record. 2 Get the namservers threaded. 3 Get the MX record threaded. 4 Perform axfr queries on nameservers and ge...

CVE-2023-30854

WWBN Avideo Authenticated RCE - OS Command Injection CVE-2023-30854 WWBN Avideo sqlFile $objClone-cloneSiteURLvideos/cache/clones/$json-sqlFile"; $log-add"Clone 2 of $totalSteps: Geting MySQL Dump file"; exec$cmd . " 2&1", $output, $returnval; We can control $objClone-cloneSiteURL through the adm...

Revoke-Obfuscation

Revoke-Obfuscation v1.0 Introduction Revoke-Obfuscation is a PowerShell v3.0+ compatible PowerShell obfuscation detection framework. Authors Daniel Bohannon @danielhbohannon Lee Holmes @LeeHomes Research Blog Post:...

Medusa

Medusa Medusa is a cross-platform agent compatible with both Python 3.8 and Python 2.7. Installation To install Medusa, you'll need Mythic v3 installed on a remote computer. You can find installation instructions for Mythic at the Mythic project page. From the Mythic install root, run the command...

CVE-2024-51568---CyberPanel-Command-Injection-Nuclei-Template

CVE-2024-51568 - CyberPanel Command Injection PoC A proof-of-concept environment and Nuclei template for testing CVE-2024-51568, a critical pre-authentication command injection vulnerability in CyberPanel. Vulnerability Details CVE: CVE-2024-51568 Severity: Critical CVSS 9.8 Type:...

gatekeeper

Gatekeeper What is Gatekeeper? Gatekeeper is the first open source DDoS protection system. It is designed to scale to any peak bandwidth, so it can withstand DDoS attacks both of today and of tomorrow. In spite of the geographically distributed architecture of Gatekeeper, the network policy that...

ProHunter

📋 Overview This project is a core module of the ProHunter system, primarily designed to perform malicious judgment on threat graphs sampled from the PPG module. The main idea of this methods is that uses inexact graph vector matching to calculate vector similarity between threat graphs and attack...

sqlmap-nu11secur1ty

MSF Module Generator sqlmap-nu11secur1ty - Kali Linux Author: nu11secur1ty Description: Generate Metasploit auxiliary modules from Burp Suite requests and run sqlmap-nu11secur1ty automatically. Important: Only for lab/authorized testing. Overview This generator allows you to create a Metasploit...

hashdb

HashDB HashDB is a community-sourced library of hashing algorithms used in malware. How To Use HashDB HashDB can be used as a stand alone hashing library, but it also feeds the HashDB Lookup Service run by OALabs. This service allows analysts to reverse hashes and retrieve hashed API names and...

awesome-oneliner-bugbounty

Awesome One-liner Bug Bounty A collection of awesome one-liner scripts especially for bug bounty. This repository stores and houses various one-liner for bug bounty tips provided by me as well as contributed by the community. Your contributions and suggestions are heartily♥ welcome. Definitions...

Shinigami

Shinigami Shinigami is an experimental tool designed to detect and unpack malware implants that are injected via process hollowing or generic packer routines. How this works The tool operates by hooking NT functions related to Process Hollowing and marking newly executable memory pages with the...