3073475 matches found
RDPCredentialStealer
RDPCredentialStealer RDPCredentialStealer it's an implant that steal credentials provided by users in RDP using API Hooking with Detours in C++ Proof-of-Concept Tool for Credential Theft Let's try this: First of all i transfer the DLL of the GitHub repository to the C:\Users\Public\Music path: No...
cve-2024-21762-checker
FortiGate cve-2024-21762-checker Este script se utiliza para comprobar vulnerabilidades en Fortigate SSL VPN basadas en CVE-2024-21762. Utiliza Shodan para encontrar dispositivos vulnerables y probar su vulnerabilidad. Características Utiliza la API de Shodan para encontrar dispositivos Fortigate...
Project-Eyes-On
Project Eyes On v3.0 Global Surveillance Coded by: Y0oshi IG: @rde0 "The unified intelligence tool for mass IP camera scanning." Overview Project Eyes On is a hyper-fast, multi-threaded surveillance tool designed to locate open IP cameras across the globe. It combines two powerful engines: 1...
dirtypipetester
Control de Vulnerabilidad Dirty Pipe Control de la vulnerabilidad Dirty Pipe CVE-2022-0847 -Ejecute directamente para consultar el estado de vulnerabilidad de su sistema bajo prueba. -Para consultar el estado de vulnerabilidad de otras versiones del kernel, ejecute añadiendo x.xx.xxx al final...
BinAbsInspector
What is BinAbsInspector? BinAbsInspector Binary Abstract Inspector is a static analyzer for automated reverse engineering and scanning vulnerabilities in binaries, which is a long-term research project incubated at Keenlab. It is based on abstract interpretation with the support from Ghidra. It...
CVE-2020-10148-Solarwinds-Orion
CVE-2020-10148 Solarwinds Orion Descargar CVE-2020-10148.py root@kitploit: wget https://gist.githubusercontent.com/0xsha/75616ef6f24067c4fb5b320c5dfa4965/raw/0d7db4f2ea5aacc0ada7b1a7b23f2ce8ba39315f/CVE-2020-10148.py Buscar Solarwinds Orion desde Shodan root@kitploit:...
JWT-Bruteforcer
JWT-Bruteforcer Herramienta básica de Jwt Bruteforcer con prueba de vulnerabilidad CVE-2018-1000531 Librerías importadas: jwt base64 Requiere versión mínima de python 3.6...
disable-RegisterSpoolerRemoteRpcEndPoint
disable-RegisterSpoolerRemoteRpcEndPoint Solución alternativa para la vulnerabilidad de ejecución remota de código de Windows Print Spooler CVE-2021-34527. Ver: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527 Actualización 2021-07-08: Microsoft publicó un parche Microsoft ya...
unrar-cve-2022-30333-poc
A proof of concept for CVE-2022-30333 - a path traversal vulnerability in unRAR versions prior to 6.11. I created this as a demonstration of the exploit for an AttackerKB writeup, and hope to incorporate it in a Metasploit Module soon! Basically, you provide a target including path traversal and...
iotmap
IoTMap IoTMap 是一个使用一个或多个协议同时建模物联网网络的工具。 这是一项正在进行的工作，作为物联网安全博士论文的一部分。 此存储库定期更新，随着获得新结果。 该项目目前支持3种协议：BLE、ZigBee 和 OS4I。更多协议即将推出。 依赖项： Python 3 依赖项 Python 3.5 Scapy（可以通过requirements文件安装，但建议从最新源码构建） neo4j-1.7.6 docopt-0.6.2 prompt-toolkit-3.0.5 terminaltables-3.1.0 pycryptodomex-3.9.7 您可以使用...
goCabrito
goCabrito Super organized and flexible script for sending phishing campaigns. Features Sends to a single email Sends to lists of emails text Sends to lists emails with first, last name csv Supports attachments Splits emails in groups Delays sending emails between each group Support Tags to be...
Samurai
Samurai Email Discovery SED is a email discovery framework created 100% in BASH that grabs emails via google dork, company name, or domain name. Requirements apt-install lynx Possibly more features such as an OSINT options, and credential reuse discovery & torsocks implimented - but it does the...
SpotifyC2
SpotifyC2 — Cloud-Based Command Channel Research Execute commands through a Spotify playlist and receive command output through Telegram. What is SpotifyC2? SpotifyC2 is a Windows-based cybersecurity research project that demonstrates how publicly accessible cloud services can be used as a...
autoharness
AutoHarness Created by Akshat Parikh What is this tool? AutoHarness is a tool that automatically generates fuzzing harnesses for you. This idea stems from a concurrent problem in fuzzing codebases today: large codebases have thousands of functions and pieces of code that can be embedded fairly de...
exrop
Exrop 面向 x86-64 二进制文件的自动 ROP 链生成器，基于 Triton 符号执行引擎。 特性 将寄存器设置为常量或其他寄存器的值（rdi=0x41414141，rdi=rax） 写入内存（支持常量和基于寄存器的地址/值） 将字符串/字节写入内存 函数调用，支持混合常量/寄存器/字符串参数（open"/etc/passwd", 0） 系统调用链 坏字符规避 支持非返回型 gadget（jmp reg, call reg） 栈迁移，配合 JOP 链搜索用于内核漏洞利用 内核模式，自动重写 retpoline thunk 仅清理模式，过滤带有危险副作用内存写入的 gadget...
exrop
Exrop Automatic ROP chain generator for x86-64 binaries, powered by Triton symbolic execution. Features Set registers to constants or other registers rdi=0x41414141, rdi=rax Write to memory constant and register-based addresses/values Write strings/bytes to memory Function calls with mixed...
kontext-cli
Website | Documentation | Dashboard | Discord Kontext is an authorization platform for AI agents. It helps teams control what agents can access and do with scoped credentials, policy enforcement, approvals, and audit trails. Kontext can run local-first for developer agents and extend to managed o...
htb-writeups
Hack The Box Writeups - The Ultimate HTB Resource The most comprehensive collection of Hack The Box writeups , walkthroughs , and cheatsheets on GitHub. 500+ machines, 400+ challenges, ProLabs, Sherlocks DFIR, CTF events, penetration testing methodology, and OSCP/CPTS certification prep - all in...
Ironsquirrel
IRONSQUIRREL Este proyecto tiene como objetivo entregar exploits de navegador al navegador de la víctima de manera cifrada. Se utiliza Elliptic-curve Diffie-Hellman secp256k1 para el acuerdo de claves y AES para el cifrado. Al entregar el código del exploit y el shellcode a la víctima de forma...