Flerken

Flerken Introducción Se ha demostrado que la Ofuscación de Línea de Comandos CLOB es un factor no despreciable en el malware sin archivos o actores maliciosos que "viven de la tierra". Aunque se ven docenas de herramientas de ofuscación en la naturaleza, pocas contramedidas adecuadas se pueden...

playwright

🎭 Playwright |...

playwright

🎭 Playwright Documentation | API reference Playwright is a framework for web automation and testing. It drives Chromium, Firefox, and WebKit with a single API — in your tests, in your scripts, and as a tool for AI agents...

tools

Zscaler ThreatLabz Tools Tools developed by the Zscaler ThreatLabz Threat Intelligence team Follow us on Twitter: @Threatlabz Blog: https://www.zscaler.com/blogs/security-research...

CVE-2023-27532-RCE-Only

Forked Version RCE Only Forked repository and removed the credential leak part. Applied fixes for compilation. CVE-2023-27532 Proof of Concept code to exploit CVE-2023-27532 and either leak plaintext credentials or perform remote command execution. Overview For a detailed analysis of the...

cve-2016-7434

CVE-2016-7434 هذا جزء من Cved: أداة لإدارة حاويات docker الضعيفة. Cved: https://github.com/git-rep-src/cved مصدر الصورة: https://github.com/cved-sources/cve-2016-7434 مؤلف الصورة: https://github.com/opsxcq/exploit-CVE-2016-7434...

sliver-tor-bridge

sliver-tor-bridge puente de transporte basado en tor para sliver c2. crea un servicio oculto y redirige el tráfico a tu servidor sliver para que tu IP real nunca quede expuesta. qué hace configura un servicio oculto de tor que apunta a un proxy http local. el proxy reenvía todo al listener https ...

s2-062

s2-062 Remote Code Execution S2-062 CVE-2021-31805 Verification POC Verification method vulfocus range issue The poc inside validates against the s2-061 range, with the parameter id; the new range uses the parameter name The main reason for identifying it as id is that I can't think of any good...

Pesidious

Mutación de Malware usando Aprendizaje por Refuerzo Profundo y GANs El propósito de la herramienta es usar inteligencia artificial para mutar una muestra de malware solo PE32 para evadir clasificadores impulsados por IA mientras se mantiene su funcionalidad intacta. En el pasado, se ha realizado ...

iWant

iWant Compartición de archivos peer-to-peer descentralizada basada en CLI Estado de la compilación ¿Qué es? Una herramienta de línea de comandos para buscar y descargar archivos en una red LAN, sin ningún servidor central. Características Descentralizado : No hay un servidor central que aloje...

ldap_shell

LDAP shell This project is a fork of ldapshell from Impacket. It provides an interactive shell for Active Directory enumeration and manipulation via LDAP/LDAPS protocols, making it useful for both system administrators and security professionals. Installation These tools are only compatible with...

svn-extractor

Svn-Extractor Many a times web application pen-testers are encountered with the presence of .svn folders. For those not aware .svn folder is used by SVN version control system to perform its operations. For a blackbox pentest this folder contains huge amount of information. Some of the key areas...

shannon v3.1.0

!NOTE Shannon 3.0 is live: deeper security code analysis, more thoroughly vetted findings, a rebuilt CLI, native CI/CD, professional PDF reports, and SARIF. Shannon is an autonomous, AI pentester for web applications and APIs. It analyzes your source code, identifies attack paths, and executes re...

Active-Scanning-and-Information-Gathering-in-ICS-SCADA-Networks-Using-Network-Mapper-NMAP

Scan actif et collecte d'informations dans les réseaux ICS/SCADA à l'aide de Network Mapper NMAP turc Cet article de recherche a déjà été publié auparavant et vous pouvez également trouver la version originale au format .pdf ici...

Spring4shell

Spring4shell Spring4shell...

Spring_cve-2022-22980

Springcve-2022-22980 spring data mongodb remote code execution | cve-2022-22980 poc Description A Spring Data MongoDB application is vulnerable to SpEL injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value...

vcenter_rce

vcenterrce استغلال ثغرة، Vmware vCenter 6.5-7.0 RCE CVE-2021-21972، رفع Behinder 3، getshell الاستخدام： python3 vcenterrce -u url...

friman

friman Do you ever feel that finding the right Frida version for the job is like threading a needle? With different projects, devices, and debugging scenarios all requiring specific builds, keeping track of Frida versions can quickly become a tedious balancing act. friman pronounced "free man " i...

kube-alien

Kube-alien This tool launches attack on k8s cluster from within. That means you already need to have an access with permission to deploy pods in a cluster to run it. After running the kube-alien pod it tries to takeover cluster's nodes by adding your public key to node's /root/.ssh/authorizedkeys...

kube-alien

Kube-alien Esta herramienta lanza ataques a un clúster de k8s desde dentro. Esto significa que ya necesitas tener acceso con permisos para desplegar pods en un clúster para ejecutarlo. Después de ejecutar el pod kube-alien, intenta tomar el control de los nodos del clúster añadiendo tu clave...