ZipExec

ZipExec ZipExec es una herramienta de Proof-of-Concept POC para envolver herramientas basadas en binarios en un archivo zip protegido por contraseña. Este archivo zip luego se codifica en base64 a una cadena que se reconstruye en disco. Esta cadena codificada se carga en un archivo JScript que, a...

Detection-and-Mitigation-script-for-CVE-2021-42717

Detection-and-Mitigation-script-for-CVE-2021-42717 Detection and Mitigation script for CVE-2021-42717 - ModSecurity DoS Vulnerability in JSON Parsing ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects with nesting tens-of-thousands deep could result in...

refinery

Binary Refinery docs tests codecov pypi High Octane Triage Analysis || || || || || | / / / \ || ==||=====|| | / |/ \ /==| / \ ===| '======|| | \ | | \ | \ /| | || || /||/ / | | | || =========''====/=========/ /==||=====||======' \ / / The Binary Refinery™ is a collection of Python scripts...

CVE-2020-15053

CVE-2020-15053 : Artica Proxy before 4.28.030418 Community Edition allows Reflected Cross Site Scripting. Product Description: Artica Tech offers a powerful but simple-to-use solution, usually the preserve of Large and Multinational companies. With a starting price of just 99€ and more than 62 00...

ldeep

============== Project Status .. image:: https://github.com/franc-pentest/ldeep/actions/workflows/python-test.yml/badge.svg :target: https://github.com/franc-pentest/ldeep/actions/workflows/python-test.yml :alt: Build status .. image:: https://badgen.net/pypi/v/ldeep :target:...

CVE-2023-40361

CVE-2023-40361 This vulnerability was discovered and disclosed by myself. This repository will hold the advisory. This repository is only for educational purposes. Links Blog Post Thinking Objects: https://to.com/news/advisory-secudos-qiata-cve-2023-40361 Blog Post SECUDOS GmbH:...

Vol3xp

Vol3xp, Plugins de Volatility 3 Explorer WinObj - Explorador de Objetos del Kernel de Windows, una mejora de https://github.com/kslgroup/WinObj para Volatility 3 winobj.py WinObj muy similar a WinObj Sysinternals También es compatible con Struct Analyzer y WinObjGui de VolExp. RAMMap - Mapeo de...

GPOddity

GPOddity El proyecto GPOddity, cuyo objetivo es automatizar los vectores de ataque a GPO mediante NTLM relaying y más. Para más detalles sobre el ataque y una demostración de cómo usar la herramienta, consulte el artículo asociado disponible en:...

misp-objects

misp-objects MISP objects used in MISP system and can be used by other information sharing tools. MISP objects are in addition to MISP attributes to allow advanced combinations of attributes. The creation of these objects and their associated attributes are based on real cyber security use-cases...

CVE-2020-6308

CVE-2020-6308 Exploit script for SAP Business Objects SSRF This is a simple Golang script to automate the exploitation of CVE-2020-6308. The original Github repo did not show any automation https://github.com/InitRoot/CVE-2020-6308-PoC , thanks @InitRoot, so this was made in an effort to help...

CVE-2022-30778

Warning The vulnerability has been revoked Override This is Abount CVE-2021-43503. Requirement PHP = 8.0 Composer Recover vulnerability 1. Startup service composer install cp .env.example .env php artisan key:generate php artisan serve it will listening 8000 port in localhost 2. PoC queueResolver...

GPOHound

GPOHound GPOHound es una herramienta para volcar y analizar Objetos de directiva de grupo GPO extraídos del recurso compartido SYSVOL. Proporciona un formato estructurado y formalizado para ayudar a descubrir configuraciones incorrectas, ajustes inseguros y rutas de escalada de privilegios en...

CVE-2022-0185

CVE-2022-0185 This repo contains demo exploits for CVE-2022-0185. There are two versions here. The non-kctf version fuse version specifically targets Ubuntu with kernel version 5.11.0-44. It does not directly return a root shell, but makes /bin/bash suid, which will lead to trivial privilege...

EntraFalcon

EntraFalcon EntraFalcon is a PowerShell-based assessment tool for pentesters, security analysts, and system administrators to evaluate the security posture of a Microsoft Entra ID environment. Designed for ease of use, EntraFalcon runs on PowerShell 5.1 and 7, supports both Windows and Linux, and...

ldapdomaindump

LDAPDomainDump LDAP을 이용한 Active Directory 정보 덤퍼 소개 Active Directory 도메인에서는 인증된 사용자또는 머신가 LDAP을 통해 많은 흥미로운 정보를 검색할 수 있습니다. 이로 인해 LDAP은 내부 네트워크 침투 테스트의 정찰 단계에서 정보를 수집하는 데 유용한 프로토콜이 됩니다. 문제는 LDAP의 데이터가 종종 읽기 쉬운 형식으로 제공되지 않는다는 점입니다. ldapdomaindump는 이 문제를 해결하기 위해 설계된 도구로, LDAP을 통해 사용 가능한 정보를 수집하고 파싱하여...

FarsightAD

FarsightAD 목차 FarsightAD 목차 설명 사전 요구 사항 기본 사용법 AD 헌팅 cmdlet 데모 완전/부분적으로 숨겨진 객체 탐지 감사의 말 감사 인사 저자 라이선스 설명 FarsightAD는 Active Directory 도메인 침해 이후 위협 행위자가 배포한 가능한 지속성 메커니즘을 발견하는 데 도움을 주기 위해 설계된 PowerShell 스크립트입니다. 이 스크립트는 복제 메타데이터의 타임스탬프로 보강된 다양한 객체와 해당 속성들을 CSV/JSON 파일로 내보냅니다. 또한, 복제 권한으로 실행될 경우...

CVE-2017-11882

CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882 MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 Research: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about Patch analysis:...

DVS

DCOM Vulnerability Scanner AKA Devious swiss army knife - Movimiento lateral usando objetos DCOM ¿Alguna vez te has preguntado cómo moverte lateralmente a través de redes internas? ¿o interactuar con máquinas remotas sin alertar a los EDR? Supongamos que tenemos credenciales válidas, o una sesión...

CVE-2018-1000529

CVE-2018-1000529 NVD CVE-2018-1000529: https://nvd.nist.gov/vuln/detail/CVE-2018-1000529 MITRE CVE-2018-1000529: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-1000529 Stored XSS in Grails Fields Plugin =2.2.7 This repository was used to demonstrate a proof of concept of the vulnerability fo...

CVE-2020-9484

CVE-2020-9484 POC for CVE-2020-9484 POC for CVE-2020-9484 Apache Tomcat RCE by deserialization CVE-2020-9484 Explore the docs » Getting Started 1. Clone this repository, then you will be able to use CVE-2020-9484 and modify the source code if needed. 2. Download ysoserial jar 3. place both...