1148567 matches found
sqlmap
sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...
security-code-scan
Vulnerability Patterns Detector for C and VB.NET - Website Downloading Official releases are available as nuget package, Visual Studio extension and stand-alone runner. Building root@kitploit: git clone https://github.com/security-code-scan/security-code-scan.git cd security-code-scan Open...
PasteMonitor
PasteMonitor Scrape Pastebin API to collect daily pastes, setup a wordlist and be alerted by email when you have a match. Description The PasteMonitor tool allows you to perform two main actions for educational purposes only: Download daily new public pastes Average number of pastes per day:...
Shell3er
Shell3er Shell3er PowerShell Reverse Shell The Shell3er Reverse Features Get-RandomProcessName Function The Get-RandomProcessName function generates a random process name by concatenating "PS" with a new GUID. This is used to create unique and seemingly random process names, making it harder to...
WSSAT
WSSAT - Web Service Security Assessment Tool WSSAT is an open source web service security scanning tool which provides a dynamic environment to add, update or delete vulnerabilities by just editing its configuration files. This tool accepts WSDL address list as input file and for each service, it...
fluxion
Fluxion is the future of MITM WPA attacks Fluxion is a security auditing and social-engineering research tool. It is a remake of linset by vk496 with hopefully fewer bugs and more functionality. The script attempts to retrieve the WPA/WPA2 key from a target access point by means of a social...
Impost3r
Impost3r Impost3r is a tool that aim to steal many kinds of linux passwordsincluding ssh,su,sudo written by C Attackers can use Impost3r to make a trap to steal the legal user's passwords XD This tool is limited to security research and teaching, and the user bears all legal and related...
pulsegram
PulseGram PulseGram is a keylogger integrated with a Telegram bot. It is a monitoring tool that captures keystrokes, clipboard content, and screenshots, sending all the information to a configured Telegram bot. It is designed for use in adversary simulations and security testing contexts. β οΈ...
pacu
Quick reference Where to get help : the Rhino Security Labs Discord, or Stack Overflow Where to file issues : https://github.com/RhinoSecurityLabs/pacu/issues Maintained by : Rhino Security Labs What is Pacu? Pacu is an open-source AWS exploitation framework, designed for offensive security testi...
PrivescCheck
PrivescCheck Quickly identify common Windows vulnerabilities and configuration issues that are not necessarily covered by public security standards, and collect useful information for exploitation and post-exploitation tasks. !IMPORTANT A major aspect to be aware of when using this tool is that a...
PathFinder
Web Path Finder Web Path Finder is a Python program that provides information about a website. It retrieves various details such as page title, last updated date, DNS information, subdomains, firewall names, technologies used, certificate information, and more. Features and Benefits Retrieve...
TerminalFix campaign deploys a reverse tunnel through multistage intrusion
In this article 1. Attack chain overview 2. Mitigation and protection guidance 3. Learn more Microsoft Threat Intelligence has observed a TerminalFix campaign, a variant of ClickFix, targeting organizations across multiple industries. The campaign uses compromised websites to display a fake...
drovorub-hunt
Dispatches from Drovorub: Network Threat Hunting for Russia GRU GTsSS' Malware at Scale Recently, the National Security Agency and Federal Bureau of Investigation released a report outlining command and control capabilities leveraged by the Russian General Staff Main Intelligence Directorate GRU...
shfz
shfz A scenario-based web application fuzzng tool that supports fuzz generation by genetic algorithm. Features Easy to customize fuzzing test by scripting fuzzing scenario in JavaScript / TypeScript Third-party packages can be used in fuzzing scenario script Genetic algorithm fuzz generation...
Detect-It-Easy
Detect It Easy DiE is a powerful tool for file type identification, popular among malware analysts , cybersecurity experts , and reverse engineers worldwide. Supporting both signature-based and heuristic analysis , DiE enables efficient file inspections across a broad range of platforms, includin...
h0neytr4p
Adjusted for T-Pot This fork of h0neytr4p was revised for T-Pot with the following features: Add Docker support Dockerfile, docker-compose.yml Use a single logfile instead of two Log to JSON instead of CSV Enrich JSON log file with additional info i.e. Cookies, Headers, Destination Port, etc...
telfhash
Trend Micro ELF Hash telfhash telfhash is symbol hash for ELF files, just like imphash is imports hash for PE files. With telfhash, you can cluster ELF files by similarity based on symbols. This is particularly useful for clustering malicious samples. If a sample has no symbols, telfhash uses its...
nimcrypt
nimcrypt Nimcrypt is a .NET PE Crypter written in Nim, based entirely on the work of @byt3bl33d3r's OffensiveNim project: https://github.com/byt3bl33d3r/OffensiveNim This tool was inspired by @S3cur3Th1sSh1t's blog post a few months ago, as it's essentially just a full PoC of what he presented:...
netattack
NETATTACK The netattack.py is a python script that allows you to scan your local area for WiFi Networks and perform deauthentification attacks. The effectiveness and power of this script highly depends on your wireless card. NETATTACK 2 RELEASED https://github.com/chrizator/netattack2/ USAGE EASY...
dismap
π Dismap - Asset discovery and identification tool δΈζ Readme Dismap positioning is an asset discovery and identification tool. It can quickly identify protocols and fingerprint information such as web/tcp/udp, locate asset types, and is suitable for internal and external networks. It assists red...