quickjack

Quickjack Quickjack es una herramienta intuitiva de apuntar y hacer clic para realizar ataques avanzados y encubiertos de clickjacking y frame slicing. Use la herramienta Quickjack directamente en http://samy.pl/quickjack/quickjack.html por @SamyKamkar // [email protected] // http://samy.pl ...

CVE-2024-43468

Microsoft Configuration Manager ConfigMgr / SCCM 2403 Unauthenticated SQL injections CVE-2024-43468 exploit This script exploits the CVE-2024-43468 that allows an unauthenticated attacker, with network access to a Management Point, to execute arbitrary SQL queries on the site database. As queries...

WiFi-Pineapple-MK7_REST-Client

WIFI PINEAPPLE MARK VII - CLIENTE REST El principal punto de acceso rogue y kit de pentest WiFi para operaciones de acceso cercano. Los ataques pasivos y activos analizan dispositivos vulnerables y mal configurados. https://hak5.org/collections/sale/products/wifi-pineapple Autor :: TW-D Versión :...

wifipumpkin3

Wifipumpkin3 Powerful framework for rogue access point attack. Overview wifipumpkin3 is powerful framework for rogue access point attack, written in Python, that allow and offer to security researchers, red teamers and reverse engineers to mount a wireless network to conduct a man-in-the-middle...

CVE-2024-24919

Checkpoint POC Exploit for testing purposes to retrieve sensitive files from Checkpoint based on this article: https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/ I am not responsible for any abuse of this script, the intention here is for defenders to test their own devices...

CVE-2026-1122-IoT-Firmware-Update-Signature-Bypass-via-Low-Order-Point-Injection

5. CVE-2026-1122 – IoT Firmware Update Signature Bypass via Low‑Order Point Injection Overview An IoT device’s OTA firmware verification uses a flawed Ed25519 implementation that does not reject public keys with small‑order components, allowing an attacker to forge a valid signature for malicious...

showstopper

ShowStopper - Herramienta de exploración de trucos Anti-Debug Contribuido por Check Point Software Technologies LTD. Programado por Yaraslau Harakhavik Resumen El proyecto ShowStopper es una herramienta para ayudar a los investigadores de malware a explorar y probar técnicas anti-debug o verifica...

wacker

Overview A set of scripts to help perform an online dictionary attack against a WPA3 access point. Wacker leverages the wpasupplicant control interface to control the operations of the supplicant daemon and to get status information and event notifications ultimately helping speedup connection...

infernal-twin

Infernal-Wireless v3 Release 3 Improved and Compatibility on Kali Linux 2018 Added Visual Representation of Wireless Scan Added Visual Representation of Probe Requests and Map per SSID requested by Devices Updated MAC address mapping Added MAC address mappting on probe request devices Evil Twin...

concealed_position

Posición Oculta Posición Oculta es un ataque de escalada de privilegios locales contra Windows que utiliza el concepto de "Trae tu propia vulnerabilidad". Específicamente, Posición Oculta CP utiliza la lógica tal como fue diseñada de paquete punto e impresión en Windows que permite a un usuario c...

Snoopy

root@kitploit: | || | | || || || || | | | | || || || || || || || | | | | || | | || | | || || || | | || || || || || || || | | || | | || || || | | | |||| |||||||| || V0.1 "에이미, 기술은 본질적으로 선하거나 악하지 않아. 그것은 어떻게 사용되느냐의 문제지. 마치 죽음의 광선처럼." - 프로페서 판스워스 Snoopy에 오신 것을 환영합니다; 분산 추적 및 프로파일링 프레임워크입니다. Snoopy는 ...

pmkidcracker

PMKID WPA2 Cracker This program is a tool written in Python to recover the pre-shared key of a WPA2 WiFi network without any de-authentication or requiring any clients to be on the network. It targets the weakness of certain access points advertising the PMKID value in EAPOL message 1. Program...

check-point-gateways-rce

Check Point Security Gateways RCE by element.security Tested against R81.10 T335, R80.40 T294 Usage example: python3 checkpointgatewaysrce.py --mode dump https://192.168.0.100 Research blog post: Check Point Security Gateways RCE via CVE-2021-40438...

CVE-2024-24919

Check point:CVE-2024-24919 ejecutar CVE root@kitploit: nuclei -list chick.txt -t CVE-2024-24919.yaml Reemplace con la dirección IP objetivo, y este comando intentará acceder al archivo /etc/shadow, que contiene los hashes de contraseñas. root@kitploit: curl --path-as-is -i -s -k -X POST \ -H 'Hos...

cerbos

What is Cerbos? Cerbos is an authorization layer that evolves with your product. It enables you to define powerful, context-aware access control rules for your application resources in simple, intuitive YAML policies; managed and deployed via your Git-ops infrastructure. It provides highly...

Merlion

Merlion: A Machine Learning Library for Time Series Table of Contents 1. Introduction 2. Comparison with Related Libraries 3. Installation 4. Documentation 5. Getting Started 1. Anomaly Detection 2. Forecasting 6. Evaluation and Benchmarking 7. Technical Report and Citing Merlion Introduction...

hostapd-mana

hostapd-mana Overview A featureful rogue access point first presented at Defcon 22 by Dominic White @singe & Ian de Villiers @ sensepost [email protected] Documentation Check the wiki for information of getting and using hostapd-mana. Features KARMA/MANA Mode - respond to any device looking...

Incident-Analysis-Response-Check-Point-Security-Gateway-CVE-2024-24919-LFI-Exploitation

Incident Analysis: Check Point Security Gateway CVE-2024-24919 Exploitation Attempt 📌 Executive Summary On June 6, 2024, at 03:12 PM, security monitoring systems triggered an alert for a high-severity exploit attempt targeting a Check Point Security Gateway CP-Spark-Gateway-01, IP: 172.16.20.146...

CVE-2024-24919_POC

CVE-2024-24919POC È una prova di concetto su CVE-2024-24919-POC, l'ho realizzata dopo la sua scoperta. CVE-2024-24919 è una vulnerabilità di divulgazione di informazioni del gateway di sicurezza Checkpoint. Puoi vederla in Notion-CVE-2024-24919POC Shodan dork: title:"Check Point" "Server: Check...

Point-to-Point-Protocol-Daemon-RCE-Vulnerability-CVE-2020-8597-

Point-to-Point-Protocol-Daemon-RCE-Vulnerability-CVE-2020-8597- Sri Lanka Institute of Information Technology root@kitploit: Compito 1 M. P. D. M. Dias IT19165530 MLBWDY2S113.1 Point to Point Protocol Daemon RCE Vulnerabilità CVE-2020-8597 Programmazione di Sistemi e Reti – IE2012 Contenuto 1...