CVE-2023-33592

CVE-2023-33592 CVE-2023-33592 batch vulnerability exploit program...

cve-2022-44268-detector

cve-2022-44268-detector - detect malicious PNGs cve-2022-44268-detector is a Go program that consumes PNGs and reports whether they appear to be malicious images generated by an exploit for CVE-2022-44268, an ImageMagick vulnerability that allows attackers to read arbitrary file contents using...

diaphora

δiaphora Installation Install with the Hex-Rays plugin manager: hcli plugin install https://github.com/joxeankoret/diaphora/archive/refs/tags/3.4.2.zip Manual install instructions are below. Diaphora διαφορά, Greek for 'difference' version 3.4 is the most advanced program diffing tool working as ...

angr

angr angr is a platform-agnostic binary analysis framework. It is brought to you by the Computer Security Lab at UC Santa Barbara, SEFCOM at Arizona State University, their associated CTF team, Shellphish, the open source community, and @rhelmot. Project Links Homepage: https://angr.io Project...

nCPU

A complete computer in which every layer — arithmetic, OS, compiler, display — is either a trained neural network or runs entirely on GPU. The model doesn't run on the computer. The model is the computer. nCPU is one repository pursuing one thesis from five directions: a computer can be built out...

n00bRAT

n00bRAT v0.7 It's a tiny C program which emulates a bare minimum HTTP server for fingerprinting security scanners. It let's one control the machine over this faked HTTPv0.1 protocol. This n00b server was created as RAT during college for Ethical Hacking course. What is it / Why it is / etc. Read...

procrustes

Procrustes A bash script that automates the exfiltration of data over dns in case we have a blind command execution on a server where all outbound connections except DNS are blocked. The script currently supports sh, bash and powershell and is compatible with exec style command execution e.g...

USP

USP Features This Go program establishes persistence on a Linux system by creating a udev rule that triggers the execution of a specified payload binary or script. It offers two trigger options: USB Persistence: The payload is executed whenever a USB device is inserted. Boot Persistence: The...

ssh-audit

ssh-audit ssh-audit is a tool for ssh server auditing. Features SSH1 and SSH2 protocol server support; grab banner, recognize device or software and operating system, detect compression; gather key-exchange, host-key, encryption and message authentication code algorithms; output algorithm...

functrace

functrace - A function tracer functrace is a tool that helps to analyze a binary file with dynamic instrumentation using DynamoRIO http://dynamorio.org/. These are some implemented features based on DynamoRIO: disassemble all the executed code disassemble a specific function dump if these are...

c-jwt-cracker

JWT cracker A multi-threaded JWT brute-force cracker written in C. If you are very lucky or have a huge computing power, this program should find the secret key of a JWT token, allowing you to forge valid tokens. This is for testing purposes only, do not put yourself in trouble : I used the Apple...

CVE-2018-8120

CVE-2018-8120 CVE-2018-8120 Windows LPE exploit Supports both x32 and x64. Tested on: Win7 x32, Win7 x64, Win2008 x32, Win2008 R2 x32, Win2008 R2 Datacenter x64, Win2008 Enterprise x64. Usage CVE-2018-8120 exploit by @unamerhttps://github.com/unamer Usage: exp.exe command Example: exp.exe "net us...

restic

Introduction restic is a backup program that is fast, efficient and secure. It supports the three major operating systems Linux, macOS, Windows and a few smaller ones FreeBSD, OpenBSD. For detailed usage and installation instructions check out the documentation. You can ask questions in our...

diaphora

δiaphora Instalación Instala con el gestor de plugins de Hex-Rays: hcli plugin install https://github.com/joxeankoret/diaphora/archive/refs/tags/3.4.2.zip Las instrucciones de instalación manual están más abajo. Diaphora διαφορά, 'diferencia' en griego versión 3.4 es la herramienta de diffing de...

multiplier

Multiplier finds more bugs faster Multiplier provides precise and comprehensive code understanding capabilities. It does so by saving build artifacts into a database, and then making them persistently accessible using a C++ or Python API. Multiplier emphasizes the ability to uniquely identify all...

SSH-Remote-Code-Execution

SSH Remote Code Execution SSH Zero-Day | Made by ClumsyLulz & Taylor Christian Newsome Summary This repository contains a C program that accepts input parameters and generates a packet to be sent to a server over the SSH protocol. The program allocates a buffer to hold the data, writes it to a...

CVE-2019-9193-Home-Lab

ENGLISH BELOW CVE-2019-9193 — PostgreSQL COPY FROM PROGRAM RCE Lab นี้จำลองช่องโหว่ CVE-2019-9193 ที่เกิดใน PostgreSQL เวอร์ชัน 9.3 - 11.2 ซึ่งเปิดให้ user ที่เป็น superuser หรือมี role pgexecuteserverprogram สามารถใช้คำสั่ง: COPY ... FROM PROGRAM '' เพื่อรันคำสั่ง OS ได้โดยตรง ส่งผลให้เกิด Remot...

buzzer

Buzzer - An eBPF Fuzzer toolchain Buzzer is a fuzzer toolchain that allows to write eBPF fuzzing strategies. A Fuzzing strategy is a way to generate random eBPF Programs and then validate that they don't have unexpected behaviour. To run the fuzzer follow the next steps 1. Install bazel. 2. Insta...

KapeFiles

KAPE Files Community-created Targets and Modules for use with KAPE Download KAPE · Report a Bug · Request Feature KapeFiles KAPE Overview KAPE is an efficient and highly configurable triage program that will target essentially any device or storage location, find forensically useful artifacts, an...

frinet

Frinet By combining Frida with an enhanced version of Tenet, Frinet facilitates the study of large programs, vulnerability research and root-cause analysis on iOS, Android, Linux, Windows, and most architectures. Blogpost on the Synacktiv website This version is a complete rewrite of...