deep-pwning

Deep-pwning is a lightweight framework for experimenting with machine learning models with the goal of evaluating their robustness against a motivated adversary. Note that deep-pwning in its current state is no where close to maturity or completion. It is meant to be experimented with, expanded...

CVE-2020-16152

CVE-2020-16152 Summary | ---|--- Product vendor| Aerohive Networks / Extreme Networks Product name| HiveOS / IQ Engine...

CVE-2024-3400

PAN-OS Firewall Exploit Script This script is designed to demonstrate the exploitation of vulnerabilities in PAN-OS firewalls. It sends a specially crafted payload to the firewall's API endpoint to execute arbitrary commands. This exploit specifically targets CVE-2024-3400, a command injection...

CVE-2020-2034-POC

CVE-2020-2034-POC Determine the Version Running on the Palo Alto Network Firewall for the Global Protect Portal Recently a lot of critical vulnerabilities were announced by Palo Alto Networks here: https://security.paloaltonetworks.com/?severity=CRITICAL&product=PAN-OS&sort=-date This is a PoC to...

certified-unlearning-neural-networks-icml-2025

النسيان المعتمد للشبكات العصبية يحتوي هذا المستودع على التنفيذ البرمجي للورقة البحثية "النسيان المعتمد للشبكات العصبية" ICML 2025. الأساليب PABI تضخيم الخصوصية عبر التكرار : Gradient Clipping في الورقة DP-SGD : مع خصوصية المجموعة كما هو موصوف في الورقة المعاملات الانكماشية : Model Clipping في...

sherlock

Hunt down social media accounts by username across 400+ social networks Installation • Usage • Contributing Installation !WARNING Packages for ParrotOS and Ubuntu 24.04, maintained by a third party, appear to be broken. Users of these systems should defer to uv/pipx/pip or Docker. Method| Notes...

sherlock

ابحث عن حسابات وسائل التواصل الاجتماعي باستخدام اسم المستخدم عبر أكثر من 400 شبكة اجتماعية التثبيت • الاستخدام • المساهمة التثبيت !WARNING الحزم الخاصة بـ ParrotOS وUbuntu 24.04، التي يتم صيانتها من طرف ثالث، تبدو معطلة. يجب على مستخدمي هذه الأنظمة استخدام uv/pipx/pip أو Docker. الطريقة| ملاحظات...

netattack

NETATTACK The netattack.py is a python script that allows you to scan your local area for WiFi Networks and perform deauthentification attacks. The effectiveness and power of this script highly depends on your wireless card. NETATTACK 2 RELEASED https://github.com/chrizator/netattack2/ USAGE EASY...

Palo Alto Networks PAN-OS Web Interface - Cross Site-Scripting

PAN-OS management web interface is vulnerable to reflected cross-site scripting. A remote attacker able to convince an administrator with an active authenticated session on the firewall management interface to click on a crafted link to that management web interface could potentially execute...

Mitel MiCollab - Arbitary File Read

The Mitel Collab Arbitrary File Read vulnerability allows an unauthenticated attacker to read arbitrary files from the underlying file system on a Mitel Collab server. Exploiting this flaw involves sending specially crafted requests to the server, bypassing access controls and allowing the attack...

DCBI-Netlog-LAB v1.0 - Command Injection

An issue in the component /networkconfig/nsgmasq.cgi of DCN Digital China Networks DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request. id: CVE-2023-26802 info: name: DCBI-Netlog-LAB v1.0 - Command Injection author: pussycat0x...

wifite2

Wifite This repo is a complete re-write of wifite, a Python script for auditing wireless networks. Wifite runs existing wireless-auditing tools for you. Stop memorizing command arguments & switches! Wifite is designed to use all known methods for retrieving the password of a wireless access point...

tailscale

Tailscale https://tailscale.com شبكات WireGuard® الخاصة أصبحت سهلة نظرة عامة يحتوي هذا المستودع على غالبية كود Tailscale مفتوح المصدر. بشكل ملحوظ، يتضمن الخفي tailscaled وأداة سطر الأوامر tailscale. يعمل الخفي tailscaled على لينكس، ويندوز، macOS، وبدرجات متفاوتة على FreeBSD و OpenBSD. تطبيقات...

fierce

Fierce Fierce is a DNS reconnaissance tool for locating non-contiguous IP space. Useful links: Domain Name System DNS Domain Names - Concepts and Facilities Domain Names - Implementation and Specification Threat Analysis of the Domain Name System DNS Name Servers NS State of Authority Record SOA...

ICMP-TransferTools

ICMP-TransferTools ICMP-TransferTools è un insieme di script progettato per spostare file da e verso host Windows in ambienti di rete ristretti. Questo viene realizzato utilizzando un totale di 4 file diversi, composti da un server python e un client powershell per ogni direzione di trasferimento...

Sandman

Sandman Sandman è una backdoor progettata per funzionare su reti hardened durante attività di red team. Sandman agisce come stager e sfrutta NTP un protocollo per sincronizzare ora e data per ottenere ed eseguire uno shellcode arbitrario da un server predefinito. Poiché NTP è un protocollo spesso...

GhostTunnel

GhostTunnel GhostTunnel è un metodo di trasmissione backdoor occulto che può essere utilizzato in un ambiente isolato. Può attaccare il bersaglio tramite il dispositivo HID solo per rilasciare il payload agente, dopodiché il dispositivo HID può essere rimosso dopo il rilascio del payload...

sdnpwn

sdnpwn क्या है? sdnpwn एक टूलकिट और ढांचा है जो सॉफ्टवेयर-डिफाइंड नेटवर्क SDN की सुरक्षा के परीक्षण के लिए है। अधिक जानकारी के लिए यह लेख देखें: https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ स्थापना पहले git का उपयोग करके sdnpwn डाउनलोड करें root@kitploit: git clone...

sdnpwn

What is sdnpwn? sdnpwn is a toolkit and framework for testing the security of Software-Defined Networks SDNs. For more information check out this article: https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ Installation First download sdnpwn using git root@kitploit: git clone...

HomePWN

HomePwn - Coltellino svizzero per il pentesting di dispositivi IoT root@kitploit: . | | \ \ | | \ / \ / / | /\ / / / \ | Y Y Y \ /| | \ / | \ || //||| /\ | //|| / / / / / ☠ HomePwn - IoT Pentesting & Ethical Hacking ☠ Created with ♥ by: 'Ideas Locas CDO Telefonica' HomePwn è un framework...