dismap

🌀 Dismap - Asset discovery and identification tool Dismap 定位是一个资产发现和识别工具，他可以快速识别 Web/tcp/udp 等协议和指纹信息，定位资产类型，适用于内外网，辅助红队人员快速定位潜在风险资产信息，辅助蓝队人员探测疑似脆弱资产 Dismap 拥有完善的指纹规则库，目前包括 tcp/udp/tls 协议指纹和 4500+ Web 指纹规则，可以识别包括 favicon、body、header 等， 对于规则库的简介位于 RuleLab 扫描结果可直接丢给Vulmap=0.8 进行漏洞扫描。, 0.3...

kernel: net: qrtr: restrict socket creation to the initial network namespace

A flaw was found in the Linux kernel's QRTR Qualcomm IPC Router networking component. An unprivileged local attacker can create a QRTR socket in a separate network namespace. Due to improper handling of global state variables, this allows the attacker to send datagrams and control-plane messages ...

kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface vti6 component. An unprivileged local user, particularly within a user namespace, could exploit a vulnerability related to incorrect network namespace handling during the movement of a vti6 tunnel. This issue can lead to a kerne...

packetfence

PacketFence ¿Qué es PacketFence? PacketFence es un sistema de control de acceso a la red NAC gratuito, de código abierto, totalmente soportado y de confianza. Con un impresionante conjunto de funciones que incluyen un portal cautivo para registro y remediación, gestión centralizada de redes...

kernel: ice: fix double-free of tx_buf skb

A flaw was found in the Linux kernel's ice network driver. An error in the driver's handling of network packet transmission, specifically when icetso or icetxcsum functions fail, can lead to a double-free of a network buffer skb. This occurs because a transmit buffer txbuf may still point to an...

kernel: net: qrtr: restrict socket creation to the initial network namespace

A flaw was found in the Linux kernel's QRTR Qualcomm IPC Router networking component. An unprivileged local attacker can create a QRTR socket in a separate network namespace. Due to improper handling of global state variables, this allows the attacker to send datagrams and control-plane messages ...

trape

trape stable v2.0 People tracker on the Internet: Learn to track the world, to avoid being traced. Trape is an OSINT analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time. It was created with the aim of teaching the world how larg...

ipv4Bypass

ipv4Bypass Using IPv6 to Bypass Security Dependences tested on Kali Linux python3 nmap arp-scan apt-get install arp-scan python-nmap https://pypi.org/project/python-nmap/ Example on how to run the tool $ python bypass.py -i eth0 -r 10.5.192.0/24 $ python bypass.py -h Usage: bypass.py options...

ehids-agent

English | 中文介绍 Introduction to eHIDS HIDS demo implemented by eBPF kernel technology. Warning Just a eBPF-based DEMO, please use Tetragon / Tracee / falco instead. Implementations & Functionalities： 1. TCP network data capture 2. UDP network data capture 3. DNS information capture in uprobe mode ...

HosTaGe

HosTaGe - Honeypot-To-Go Copyright C 2013-2021, Aalborg University Denmark and Technische Universität Darmstadt Germany HosTaGe is a lightweight, low-interaction, portable, and generic honeypot for mobile devices that aims on the detection of malicious, wireless network environments. As most...

wonitor

web monitor fast, zero config web endpoint change monitor. for comparing responses, a selected list of http headers and the full response body is stored on a local key/value store file. no configuration needed. to increase network throughput, a --worker flag allows to set the concurrency when...

gp_netSecDSS

netSecDSS Decision Support System for Risk Assessing Network and System Security in SMEs A Docker-based network security monitoring platform built for small and medium enterprises that can't afford commercial SIEM tools. It simulates a realistic multi-subnet SME network, runs staged attack...

zerobox

Zerobox Python SDK 面向 zerobox 的 Python SDK。可通过文件、网络和凭据控制来对任意命令进行沙箱化。 pip install zerobox 安装 wheel 会将 zerobox CLI 放入你环境的 bin/ 中，并提供一个 Python SDK。 有关 CLI 用法、secrets 概念、完整标志参考、性能数据和平台支持，请参阅 主 README。 快速开始 from zerobox import Sandbox sandbox = Sandbox.create"allowwrite": "/tmp" printsandbox.sh"echo...

AIP

Attacker IP Prioritization AIP Tool The Attacker IP Prioritization AIP is a tool to generate efficient and economic IP blocklists based on network traffic captured from honeypot networks. With the advent of 5G, IoT devices are directly connected often without firewall protection. Therefore we nee...

Praeda

Este archivo se utiliza para enumerar algunos elementos de configuración y recomendaciones. También algo de sintaxis básica de Praeda. Módulos perl requeridos: LWP::Simple LWP::UserAgent HTML::TagParser URI::Fetch HTTP::Cookies IO::Socket HTML::TableExtract Getopt::Std Net::SSL Net::SNMP...

python-pentesting

渗透测试人员的Python 概述 对于渗透测试和红队参与，开始使用Python相当容易！这个仓库只是一个随机脚本的小集合，帮助你入门。 由以下机构提供： 示例：由Mike Felch @ustayready和Joff Thyer @joffthyer提供 此代码纯粹用于教育目的。 pivotwinrm.py: 展示如何使用Python与winrm在远程机器上执行命令 cloudawss3.py: 搜索AWS S3桶中是否存在敏感文件名 cloudawssecrets.py: 转储AWS Secrets Manager中的所有秘密 cloudazuread.py: 转储AzureAD用户...

PSO - Printer Security Offensive

🖨️ PSO - Printer Security Offensive Version 0.4.0 | Changelog "Nmap for Printers" - Offensive security tool for printer pentesting. Fast. Focused. No bloat. ⚠️ Legal Notice PSO includes assessment and exploitation features. Always obtain explicit authorization before use. Safe mode: Scanning + IPP...

webrtc-ips

STUN IP Address requests for WebRTC Demo: https://diafygi.github.io/webrtc-ips/ What this does Firefox and Chrome have implemented WebRTC that allow requests to STUN servers be made that will return the local and public IP addresses for the user. These request results are available to javascript,...

pcapan

pcapan Un asistente de análisis de capturas pcap Uso: $ git clone https://github.com/synacktiv/pcapan $ cd pcapan $ cargo run -- --pcap /tmp/capture.pcap --google -w whitelist.yaml Finished dev unoptimized + debuginfo targets in 0.04s Running target/debug/pcapan --pcap /tmp/log.tcpdump --google -...

smtpshell

smtpshell A simple Reverse Shell that can communicate through Gmail SMTP or any other SMTP to evade network restrictions Note: This reverse shell communicates Via Gmail SMTP or u can use any other smtps as well but Gmail SMTP is valid because most of the companies block unknown traffic so gmail...