57325 matches found
TeamFiltration
TeamFiltration TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 EntraID accounts. See the TeamFiltration wiki page for an introduction into how TeamFiltration works and the Quick Start Guide for how to get up and running! This tool has bee...
binlex
| Binlex - Un framework lexer de rasgos genéticos binarios Si los maldevs creen que su binario es FUD, están a punto de tener una crisis existencial. ---|--- Binlex extrae instrucciones, bloques básicos y funciones de binarios y emite rasgos JSON buscables para flujos de trabajo de ingeniería...
rehex
逆向工程师的十六进制编辑器 一款跨平台(Windows、Linux、macOS、BSD)的十六进制编辑器,适用于逆向工程及其他一切用途。 手册的在线版本可在此访问:solemnwarning.net/rehex/manual/。 功能特性 支持大文件(1TB以上) 解码整数/浮点数值类型 内联反汇编机器码 高亮和注释字节范围 并排比较整个文件或选定区域 Lua脚本支持(API参考) 虚拟地址映射支持 支持常见文本编码(ASCII、Unicode、ISO-8859-X等) 导入和导出Intel HEX文件 位图数据可视化 二进制模板,用于自动注释数据(类似于010 Editor) 位编辑/...
rehex
Reverse Engineers' Hex Editor A cross-platform Windows, Linux, macOS, BSD hex editor for reverse engineering, and everything else. An online copy of the manual can be accessed here: solemnwarning.net/rehex/manual/. Features Large 1TB+ file support Decoding of integer/floating point value types...
CVE-2025-24893
PoC para CVE-2025-24893 — Ejecución Remota de Código en XWiki PoC Seguro PoC para CVE-2025-24893: Exploit de Ejecución Remota de Código en XWiki para versiones anteriores a 15.10.11 , 16.4.1 y 16.5.0RC1. ⚠️ IMPORTANTE — SOLO PRUEBAS AUTORIZADAS Este repositorio contiene un proyecto de prueba de...
ksubdomain
KSubdomain: Ultra-Fast Stateless Subdomain Enumeration Tool 中文文档 | English KSubdomain is a stateless subdomain enumeration tool delivering unprecedented scanning speed with extremely low memory consumption. By directly operating network adapters via raw sockets — bypassing the OS kernel stack —...
nushell
Nushell A new type of shell. Table of Contents Status Learning About Nu Installation Configuration Philosophy Pipelines Opening files Plugins Goals Officially Supported By Contributing License Status This project has reached a minimum-viable-product level of quality. Many people use it as their...
mini-diarium
Mini Diarium A local-only journal with serious encryption. Free, open source, and never touches the internet. mini-diarium.com · Download · Documentation · Features · Philosophy · Benchmarks ☕ Support the Project Mini Diarium is free, open source, and will always be. If you find it useful and wan...
Brute_Force
BruteForce install : sudo apt install python3 python3-pip pip3 install proxylist pip3 install mechanize Usage: BruteForce Gmail Attack python3 BruteForce.py -g [email protected] -l Filelist python3 BruteForce.py -g [email protected] -p PasswordSingle BruteForce Hotmail Attack python3...
bissap
bissap %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%. % % % .: % .===% . :: % :%%=====%%%%%%: % %%%= =====%============%%%-% = % = =====-================ % BBBBBBBBBBBBBBBBB IIIIIIIIII SSSSSSSSSSSSSSS SSSSSSSSSSSSSSS AAA PPPPPPPPPPPPPPPPP = : =====================% + B::::::::::::::::B I::::::::I...
cve-2025-24893
CVE-2025-24893 XWiki RCE 漏洞利用 一个简单的 Python3 脚本,用于利用 CVE-2025-24893 (XWiki 平台中的一个远程代码执行漏洞),使用基于 Groovy 的异步宏和可配置的反向 Shell 载荷。 ⚠️ 警告: 该工具仅供教育和授权测试目的 使用。未经授权针对您不拥有或未经明确许可测试的系统使用是非法且不道德的。 目录 功能特性 需求 安装 使用 检测与协议回退 反向 Shell 载荷 许可证 免责声明 功能特性 ✅ 自动检测目标是否支持 HTTPS 或 HTTP ✅ 构建 Groovy ProcessBuilder 片段以避免...
HackBrowserData
HackBrowserData HackBrowserData is a command-line tool for decrypting and exporting browser data passwords, history, cookies, bookmarks, credit cards, download history, localStorage, sessionStorage and extensions from the browser. It supports the most popular Chromium-based browsers and Firefox o...
apkstudio
APK Studio 基于 Qt6 的开源跨平台 IDE,用于逆向工程 Android 应用程序包。提供友好的 IDE 风格布局,包括支持 .smali 代码文件语法高亮的代码编辑器。 特性 跨平台,可在 Linux 、Mac OS X 和 Windows 上运行 反编译/重新编译/签名和安装 APK 自动工具下载与安装 - APK Studio 可自动下载并安装所需工具(Java、Apktool、JADX、ADB、Uber APK Signer) 框架支持 - 安装并使用制造商特定的框架文件(例如 HTC、LG、Samsung),支持可选标签,用于反编译和重新编译 APK 命令行打开...
fuzzer-testing
fuzzer-testing Standardized Docker images for evaluating open-source fuzzers, fully integrated with the corpora for easy experimentation. Supported / Included Fuzzers AFL github.com/google/AFL AFLplusplus github.com/AFLplusplus Honggfuzz github.com/google/honggfuzzz QSYM sslab-gatech/qsym Eclipse...
smolvm
smolvm Branchable microVMs for AI agents. Embed lightweight virtual machines into your software, portable dev environments, and local sandboxing. Install brew install smol-machines/tap/smolvm macOS Homebrew curl -sSL https://smolmachines.com/install.sh | bash macOS + Linux Windows: unzip the...
GoSH
GoSH Golang reverse/bind shell generator Description This tool generates a Go binary that launches a shell of the desired type on the targeted host. The shell binary can be compiled for multiple platforms, supports partial polymorphism unique functions' names and can use UDP protocol instead of t...
LFISuite
LFI Suite 什么是 LFI Suite? LFI Suite 是一款完全自动化 的工具,能够使用多种不同的攻击方法扫描和利用本地文件包含漏洞,详见功能部分。 功能 支持 Windows、Linux 和 OS X 自动配置 自动更新 提供 8 种不同的本地文件包含攻击模式: /proc/self/environ php://filter php://input /proc/self/fd access log phpinfo data:// expect:// 提供第九种模式,称为自动攻击...
yakit
YAKIT-A Cyber Security ALL-IN-ONE Platform based on Yak language Whitepaper • Official documentation • Issue feedback • Official website • Community • Architecture :book:Language: English • 中文 Introduction Security integration is a reform of security operations and management for enterprises in t...
CrossC2
CrossC2 framework README | 中文文档 | READMEFULL | 中文完整文档 CobaltStrike support Support CobaltStrike's security assessment of other platforms Linux/MacOS/..., and include the development support of Unix post-penetration module | CS3.14bug fixes| CS4.0| CS4.X 4.14.8 ---|---|---|--- Master branch| ✅| |...
dns-black-cat
DNS-Black-CatDBC Multi-platform toolkit for an interactive C2C DNS shell, by using DNS-Black-Cat, you will be able to execute system commands in shell mode over a fully encrypted covert channel. Server ported as a python script, which acts as DNS server with required functionalities to provide...