aircrack-ng

Aircrack-ng Badges GitHub CI Others !Codespellhttps://github.com/a...

RootPipe-Demo

RootPipe-Demo 这是一个概念验证的Mac应用程序，演示了由Emil Kvarnhammar从TrueSec发现的RootPipe权限提升漏洞（CVE-2015-1130）。 此演示使用Objective-C编写，从Python PoC移植而来：RootPipe 使用方法 使用方式很简单：首先提供你想要提升权限的文件路径，然后提供文件提升权限后要复制到的目标路径，接着以八进制格式提供权限（例如04777），并且（可选）提供文件所有者的用户名和组名。 操作系统支持 Mac OS X 10.9 - Mac OS X 10.10.2 许可证 MIT许可证。版权所有 © 2015...

flow_divert-heap-overflow

flowdivert-heap-overflow flowdivert-heap-overflow es un exploit de prueba de concepto para CVE-2016-1827, que fue parcheado en OS X El Capitan 10.11.5 e iOS 9.3.2. La vulnerabilidad consiste en una serie de operaciones aritméticas sin comprobar sobre una longitud no confiable suministrada desde e...

CVE-2014-1266-poc

OS X/iOS SSL 漏洞概念验证 概述 此存储库包含一些Go代码，用于演示最近发现的iOS和OS X中的SSL验证漏洞。 Apple更新公告 Adam Langley 的分析文章 使用方法 $ git clone https://github.com/gabrielg/CVE-2014-1266-poc.git $ cd CVE-2014-1266-poc $ go build main.go $ ./main In another terminal $ cd CVE-2014-1266-poc $ go run httpserver.go...

reverse-shell

reverse-shell Reverse Shell as a Service - https://reverse-shell.sh Easy to remember reverse shell that should work on most Unix-like systems. Detects available software on the target and runs an appropriate payload. Usage 1. Listen for connection On your machine, open up a port and listen on it...

chipsec

CHIPSEC: Platform Security Assessment Framework CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware BIOS/UEFI, and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities...

weevely3

Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...

perl-CVE-2013-1775

CVE-2013-1775 Apple Mac OSX 10.8.4 - Escalada de privilegios Versión en Perl del exploit de escalada de privilegios CVE-2013-1775 para Apple Mac OSX 10.8.4. Referencias: https://www.exploit-db.com/exploits/27965/...

audit

audit Panel de preferencias de Auditoría y lector de registros para OS X OS X tiene un sistema de auditoría integrado basado en OpenBSM. Se configura a través de la línea de comandos y tiene una sintaxis algo esotérica. Para solucionar esto, creé un panel de preferencias del sistema para configur...

openssl

Welcome to the OpenSSL Project !openssl logowww.openssl.org !github actions ci badgegithub actions ci OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations ar...

wafpass

WAFPASS ██╗ ██╗ █████╗ ███████╗██████╗ █████╗ ███████╗███████╗ ██║ ██║██╔══██╗██╔════╝██╔══██╗██╔══██╗██╔════╝██╔════╝ ██║ █╗ ██║███████║█████╗ ██████╔╝███████║███████╗███████╗ ██║███╗██║██╔══██║██╔══╝ ██╔═══╝ ██╔══██║╚════██║╚════██║ ╚███╔███╔╝██║ ██║██║ ██║ ██║ ██║███████║███████║ ╚══╝╚══╝ ╚═╝...

Disk-Arbitrator

Introducción Disk Arbitrator es una utilidad forense para Mac OS X diseñada para ayudar al usuario a garantizar que se sigan los procedimientos forenses correctos durante la creación de imágenes de un dispositivo de disco. Disk Arbitrator es esencialmente una interfaz de usuario para el framework...

zizzania

zizzania zizzania sniffs wireless traffic listening for WPA handshakes and dumping only those frames suitable to be decrypted one beacon + EAPOL frames + data. In order to speed up the process, zizzania sends IEEE 802.11 DeAuth frames to the stations whose handshake is needed, properly handling...

PegasusX

PegasusX PoC de LPE para OS X 10.11.6 para CVE-2016-4655 / CVE-2016-4656 Análisis de CVEs y Writeup Un análisis detallado de los CVEs utilizados en este PoC está disponible aquí: Análisis y explotación de las vulnerabilidades del kernel de Pegasus CVE-2016-4655 / CVE-2016-4656...

NodeGoat

NodeGoat Being lightweight, fast, and scalable, Node.js is becoming a widely adopted platform for developing web applications. This project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them. Getti...

rootsh

rootsh rootsh 是一个针对 OS X Yosemite 10.10.5 build 14F27 的本地权限提升工具。它利用了 CVE-2016-1758 和 CVE-2016-1828，这两个 XNU 中的漏洞已在 OS X El Capitan 10.11.4 和 10.11.5 中修补。rootsh 无法在启用了 SMAP 的平台上运行。 CVE-2016-1758 CVE-2016-1758 是一个信息泄露漏洞，由于将内核栈中未初始化的字节复制到用户空间导致。通过比较泄露的内核指针与固定参考地址，可以恢复内核偏移（kernel slide）。 CVE-2016-1828...

lunar

LUNAR Lockdown UNix Auditing and Reporting Version Current version 15.9.3 Refer to lunar.sh and CHANGELOG.md for more up to date version information License CC BY-NC-SA: https://creativecommons.org/licenses/by-nc-sa/4.0/ Fund me here: https://ko-fi.com/richardatlateralblast NOTICE Run this code i...

OSXAuditor

OS X Auditor OS X Auditor 是一款免费的 Mac OS X 计算机取证工具。 OS X Auditor 会解析并对以下运行系统或待分析系统副本中的工件进行哈希处理： 内核扩展 系统代理和守护进程 第三方代理和守护进程 旧的、已弃用的系统和第三方启动项 用户的代理 用户下载的文件 已安装的应用程序 它提取： 用户的隔离文件 用户的 Safari 历史记录、下载记录、最常访问站点、LastSession、HTML5 数据库和本地存储 用户的 Firefox cookie、下载记录、表单历史记录、权限、位置记录和登录信息 用户的 Chrome...

RootPipeTester

Tabla de Contenidos 1. ¿Qué es RootPipe Tester? 2. ¿Por qué debería usar RootPipe Tester? 3. ¿Cómo uso RootPipe Tester? 4. ¡¡¡PÁNICO!!! ¿Mi sistema es vulnerable? ¿Vamos a morir todos? 1. OS X 10.10 Yosemite 2. OS X 10.9 Mavericks 3. OS X 10.8 Mountain Lion 4. OS X 10.7 Lion, Mac OS X 10.6 Snow...

mach_race

Mach Race OS X Local Privilege Escalation Exploit c fG! 2015, 2016, [email protected] - https://reverse.put.as A SUID, SIP, and binary entitlements universal OS X exploit CVE-2016-1757. Usage against a SUID binary: ./machraceserver /bin/ps compatmode for i in seq 0 1000000; do...