Win-PortFwd

Win-PortFwd Powershell script to setup windows port forwarding using native netsh client Install: git clone https://github.com/deepzec/Win-PortFwd.git Usage: .\win-portfwd.ps1 or powershell.exe -noprofile -executionpolicy bypass -file .\win-portfwd.ps1 Example : Note: This script require admin...

etl-parser

etl-parser Event Trace Log file reader in pure Python etl-parser is a pure Python 3 parser library for ETL Windows log files. ETL is the default format for ETW as well as the default format for the Kernel logger. etl-parser has no system dependencies, and will work well on both Windows and Linux...

WinFiHack

WinFiHack \ \ / | | | | | | \ \ /\ / /| | ' | | | | || |/ |/ | |/ / \ V V / | | | | | | | | | | | | Tool: Provide interface default: Wi-Fi Tool-Interf...

CVE-2026-54085: Improper Neutralization of Argument Delimiters in a Command

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.2.0 through 4.14.6, multiple active response scripts pass attacker-influenced alert fields to privileged system commands without validating their format, allowing...

Windows Gather Wireless Current Connection Info

Gather information about the current connection on each wireless LAN interface via 'netsh wlan show interfaces' on a Windows shell or Meterpreter session. !/usr/bin/env python3 -- coding: utf-8 -- """ Gather current WLAN connection details on each wireless interface Metasploit-style...

WinRM Gather VPN Profiles

List VPN connections and rasphone.pbk phonebooks through WinRM !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.winrm.winrmsessionmixin import WinRMSessionMixin import re class ModulePost, WinRMSessionMixin: info = "name": "WinRM Gather VPN Profiles",...

WinRM Gather WiFi Keys

Extract saved WLAN profile PSKs via netsh over a WinRM session !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.winrm.winrmsessionmixin import WinRMSessionMixin import re class ModulePost, WinRMSessionMixin: info = "name": "WinRM Gather WiFi Keys", "description...

Windows Gather WiFi Keys

List saved WLAN profiles and extract cleartext PSKs with 'netsh wlan show profile key=clear' on a Windows shell or Meterpreter session. !/usr/bin/env python3 -- coding: utf-8 -- """ Extract saved WiFi profile keys from a Windows shell or Meterpreter session using netsh wlan, then display and save...

Pivoting-and-Privilege-Escalation-Lab-Exercise-

Pivoting-and-Privilege-Escalation-Lab-Exercise- 🧑‍💻 In this ex...

WinFiHack - A Windows Wifi Brute Forcing Utility Which Is An Extremely Old Method But Still Works Without The Requirement Of External Dependencies

WinFiHack is a recreational attempt by me to rewrite my previous project Brute-Hacking-Framework's main wifi hacking script that uses netsh and native Windows scripts to create a wifi bruteforcer. This is in no way a fast script nor a superior way of doing the same hack but it needs no external...

CISA issues warning to US businesses: Beware of China's state-sponsored cyber actor

The US Cybersecurity and Infrastructure Security Agency CISA has an urgent message for US businesses: watch out for Volt Typhoon, a threat actor sponsored by the Peoples Republic of China PRC. The agency's joint Cybersecurity Advisory CSA published last week highlights a cluster of tactics,...

Persistence – Netsh Helper DLL

Netsh is a Windows utility which can be used by administrators to perform tasks related to the network configuration of a system and perform modifications on the host based Windows firewall. Netsh functionality can be extended with the usage of DLL files. This capability enable red teams to use...

Win-PortFwd - Powershell Script To Setup Windows Port Forwarding Using Native Netsh Client

Powershell script to setup windows port forwarding using native netsh client. Install: git clone https://github.com/deepzec/Win-PortFwd.git Usage: .\win-portfwd.ps1 or powershell.exe -noprofile -executionpolicy bypass -file .\win-portfwd.ps1 Note: This script require admin privileges to run, this...

Microsoft Windows: Service: PNRP Machine Name Publication Service

The service SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.109267";...

New “Fileless Malware” Targets Banks and Organizations Spotted in the Wild

More than a hundred banks and financial institutions across the world have been infected with a dangerous sophisticated, memory-based malware that's almost undetectable, researchers warned. Newly published report by the Russian security firm Kaspersky Lab indicates that hackers are targeting bank...

HP Client 9.19.08.17.9 - Command Injection

HP Client 9.19.08.17.9 - Command Injection Exploit Title: HP Client - Automation Command Injection Date: 10/10/2016 Exploit Author: SlidingWindow , Twitter: @kapilkhot Vendor Homepage: Previosuly HP, now http://www.persistentsys.com/ Version: Tested on version 7.9 but should work on 8.1, 9.0, 9.1...

Windows Manage Set Port Forwarding With PortProxy

This module uses the PortProxy interface from netsh to set up port forwarding persistently even after reboot. PortProxy supports TCP IPv4 and IPv6 connections. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

Microsoft Windows ISATAP组件IPv6地址欺骗漏洞（MS10-029）

BUGTRAQ ID: 39352 CVE ID: CVE-2010-0812 Microsoft Windows是微软发布的非常流行的操作系统。 由于Windows检查隧道传输的ISATAP报文中内部报文IPv6源址的方法，导致Windows IPv6栈存在欺骗漏洞。成功利用这个漏洞的攻击者可以扮演地址绕过边界或主机防火墙。此外，当目标计算机使用攻击者所指定的源IPv6地址回复消息的话，还可能泄露信息。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft...

Crack cafe billing system-vulnerability warning-the black bar safety net

For the cafe payment system, to crack we must first understand its principle, the following used more of the“PUBWIN”to explain One, principle: PUBWIN in mind time-consuming, is the IP address for the target, that is it will put the IP and the user is bound, if the user on the machine, the client...