PivotSuite

DESCARGO DE RESPONSABILIDAD: Este software es solo para fines educativos. Este software no debe utilizarse para actividades ilegales. El autor no se hace responsable de su uso. PivotSuite PivotSuite: Hackea la Red Oculta - Un Kit de Pivoteo de Red Descripción PivotSuite es un kit de pivoteo de re...

WonderShell

WonderShell - CVE - 2021-44595 | CVE - 2021-44596 Discovered by Netanel Cohen and Tomer Peled a Security Researchers from BugSec. Description POC example to exploit Wondershare Dr.Fone . Dr.Fone is a phone toolkit develop by wondershare , and vulnerable to RCE. Only with network access we manage ...

Protocol-Analyzer

Analizador de Protocolos NetProtoFuzz Framework de pruebas de fuzzing orientado a protocolos para protocolos de red. Codacy Badge Framework y Escáner en profundo desarrollo. Versión 0.0.12. Los principales propósitos del framework Verificación de la operación de protocolos de red propietarios de...

Passhunt

Passhunt Passhunt es una herramienta simple para buscar credenciales predeterminadas en dispositivos de red, aplicaciones web y más. Busca entre 523 proveedores y sus 2084 contraseñas predeterminadas. Captura de pantalla Requisitos previos Asegúrate de tener instalado lo siguiente: - Python 3.0 o...

CVE-2024-7029

PoC tool for exploiting CVE-2024-7029 in AvTech devices 🎤 README Translation English فارسی 📸 Screenshot 💎 Introduction CVE-2024-7029 highlights a severe security issue in AVTech devices, where attackers can bypass authentication and execute arbitrary commands remotely. This vulnerability poses...

adidnsdump

Active Directory Integrated DNS dump tool By default any user in Active Directory can enumerate all DNS records in the Domain or Forest DNS zones, similar to a zone transfer. This tool enables enumeration and exporting of all DNS records in the zone for recon purposes of internal networks. For mo...

Honeyd

Honeyd 1.6d Copyright c 2002 - 2007 Niels Provos [email protected] About Honeyd: Honeyd is a small daemon that creates virtual hosts on a network. The hosts can be configured to run arbitrary services, and their TCP personality can be adapted so that they appear to be running certain version...

webstor

WebStor Identificación rápida de tecnologías web vulnerables en su organización WebStor es una herramienta implementada en Python bajo la licencia MIT para enumerar rápidamente todos los sitios web en todas las redes de su organización, almacenar sus respuestas y consultar tecnologías web y...

netsniff-ng

netsniff-ng - the packet sniffing beast \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ . . netsniff-ng is a free, performant / Linux network analyzer and .' '. networking toolkit. If you will, \ ^, ,^ / the Swiss army knife for network |'O\ /O'| . -- packets. ' ' /...

netsniff-ng

////////////////////////////////////////////////////////////////////////////// netsniff-ng - the packet sniffing beast \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ . . netsniff-ng is a free, performant / Linux network analyzer and .' '. networking toolkit. If you...

dsploit

dSploit - Una suite de penetración de redes para Android. Copyleft de Simone Margaritelli, alias evilsocket. http://www.dsploit.net/ http://www.evilsocket.net/ dSploit es una suite de análisis y penetración de redes para Android que tiene como objetivo ofrecer a los expertos/entusiastas de...

NetMRI-2014-3418

NetMRI-CVE-2014-3418 - Metasploit Module InfoBlox Network Automation OS Command Injection Metasploit Module Product: Network Automation NetMRI Switch Port Manager Automation Change Manager Security Device Controller Vendor: InfoBlox Vulnerable Versions: 6.4.X.X-6.8.4.X Tested Version: 6.8.2.11 CV...

aiengine

AIEngine Artificial Inteligent Engine AIEngine es un motor de inspección de paquetes interactivo/programable de próxima generación en Python/Ruby/Java/Lua con capacidades de aprendizaje sin intervención humana, funcionalidad NIDS Sistema de Detección de Intrusiones en Red, clasificación de domini...

infernal-twin

Infernal-Wireless v3 Release 3 Improved and Compatibility on Kali Linux 2018 Added Visual Representation of Wireless Scan Added Visual Representation of Probe Requests and Map per SSID requested by Devices Updated MAC address mapping Added MAC address mappting on probe request devices Evil Twin...

CVE-2026-23744

CVE-2026-23744 CVE-2026-23744 RCE 在分析此漏洞时，我发现 MCPJam Inspector 将 /api/mcp/connect 端点绑定到 0.0.0.0，从而暴露在网络中。该端点接受一个包含 serverConfig 的 JSON 对象，其中包含 command 和 args 字段。 该应用旨在启动 MCP 服务器，但未能正确处理用户提供的值。因此，攻击者可以发送包含任意命令和参数的构造 HTTP 请求，这些请求随后会在服务器上执行，导致远程代码执行 RCE。 最有趣的是，漏洞利用载荷并非任意构造。通过使用 Burp Suite...

tcpcopy

TCPCopy - A TCP Stream Replay Tool TCPCopy is a TCP stream replay tool for realistic testing of Internet server applications. Getting to Know TCPCopy An Overview of TCPCopy for Beginners A General Overview of TCPCopy Architecture TCPCopy Testing Use Cases TCPCopy Pre-Warming Examples Description...

mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce

CVE-2026-20452 — MediaTek WLAN AP Heap Overflow PoC Proof of concept exploit for CVE-2026-20452, a heap-based buffer overflow in MediaTek's WLAN Access Point driver. Vulnerability CVE : CVE-2026-20452 CVSS : 8.0 HIGH CWE : CWE-122 — Heap-based Buffer Overflow Subcomponent : wlan AP driver Attack...

wifi-monitor

wifi-monitor Prints the IPs on your local network that're sending the most packets ack = 802.11 control frame acknowledgement or block acknowledgement req = 802.11 control frame request to send clear = 802.11 control frame clear to send data = QoSData or Data Options: -j: prints new devices that...

minipwner

MiniPwner Un script para configurar un TP-Link MR3040 con OpenWRT en una simple, pero potente, "caja de paso" para pruebas de penetración. ¿Qué es el "MiniPwner"? El MiniPwner es una "caja de paso" para pruebas de penetración. Está diseñado como un dispositivo pequeño, simple pero potente que pue...

CVE-2021-22005

CVE-2021-22005 VMware vCenter Server Arbitrary File Upload Vulnerability Code By: Junsheng @Orange Network Security Lab Orange Network Security Lab https://0range.team/ 0x00 Risk Overview This tool is only for authorized security testing. Unauthorized illegal attacks on sites are prohibited. Read...