NfSpy

NfSpy - an ID-spoofing NFS client by Daniel Miller NfSpy is a Python library for automating the falsification of NFS credentials when mounting an NFS share. Included are two client programs: nfspy uses the Filesystem in Userspace FUSE library to mount an NFS share in Linux. This allows the use of...

weevely3

Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...

hsecscan

hsecscan A security scanner for HTTP response headers. Requirements Python 2.x Python Modules os.path argparse sqlite3 urlparse urllib2 urllib json ssl Install $ pip install hsecscan Usage $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D DBFILE -d 'POST data' -x PROX...

sippts

What is Sippts? Sippts is a set of tools to audit VoIP servers and devices using the SIP protocol. Sippts is programmed in Python and it allows us to check the security of a VoIP server using the SIP protocol. Is it free? Yes. You can freely use, modify and distribute it. If you modify it, please...

tplink-smartplug

TP-Link WiFi SmartPlug Client and Wireshark Dissector For the full story, see Reverse Engineering the TP-Link HS110 tplinksmartplug.py A python client for the proprietary TP-Link Smart Home protocol to control TP-Link HS100, HS110 and KP115 WiFi Smart Plugs. The SmartHome protocol runs on TCP por...

testssl.sh

Intro testssl.sh is a free command line tool which checks a server's service on any port for the support of TLS/SSL ciphers, protocols as well as some cryptographic flaws. Key features Clear output: yo...

CVE-2024-3596-Detector

RADIUS Vulnerability Detector Limits of the Code: The code is aimed directly at detecting MD5 conflict. However, a more comprehensive analysis may be required to thoroughly test all aspects of CVE-2024-3596. This code can only detect attacks based on MD5 collision. Additional analysis may be...

ipeeyoupeewepee

ipeeyoupeewepee A scanner and attack suite for hosts on the public internet mostly Cisco routers that forward unauthenticated packets encapsulated in the IP-in-IP and GRE protocols. This vulnerability, known as "Insecure Implementation of Tunneling Protocols," is tracked under CVE-2020-10136 and...

ICS-Security-Tools

ICS Security Tools, Tips, and Trade Developed as a community asset This effort intends to pull together tools, tips, and tricks of the trade to working on cyber security in the ICS environment. The code repository will house any specific scripts, tools, configurations, or other useful tidbits to...

tsusen

Tsusen 津波センサー is a standalone network sensor made for gathering information from the regular traffic coming from the outside i.e. Internet on a daily basis e.g. mass-scans, service-scanners, etc.. Any disturbances should be closely watched for as those can become a good prediction base of...

msdt-disable

NOTE : This tool is now obsolete! The Follina exploit is now fixed as of June 14, 2022. Which means: if you used this tool, you can now enable the MSDT protocol again... if you still have the backup .reg file, of course. The MSDT Protocol Disabler is a tool that disables the MSDT protocol...

jdwp-shellifier

JDWP exploitation script What is it ? This exploitation script is meant to be used by pentesters against active JDWP service, in order to gain Remote Code Execution. How does it work ? Well, in a pretty standard way, the script only requires a Python 2 interpreter: % python ./jdwp-shellifier.py -...

zeek-spicy-stun

STUN Session Traversal Utilities for NAT STUN This is a Zeek protocol analyzer that detects STUN based on Spicy. You must install Spicy to use this package. This package will create two logs: stun.log - This log has every STUN message. stunnat.log - This log has NAT detections from mapped...

refreshing-mcp-tool

This isn't really done or ready yet, but I wanted to get the code checked in. This basically implements F5's database protocol, "mcp", which operates through a UNIX domain socket. That means that you need a shell on the F5 device before you can use any of these. You'll typically forward the outpu...

Titanis

View the User Guide on the documentation site Introduction Titanis is a library of protocol implementations and command line utilities, written in C, for interacting with Windows environments. It uses .NET 8 and is cross-platform Windows and Linux. Some of the protocols implemented: SMB2 MS-SMB2...

ettercap

A suite for man in the middle attacks Copyright 2001-Current The Ettercap Dev Team INTRODUCTION Ettercap is a comprehensive suite for man in the middle attacks. It features sniffing of live connections, content filtering on the fly and many other interesting tricks. It supports active and passive...

sslscan

SSLScan SSLScan queries SSL services, such as HTTPS, in order to determine the ciphers that are supported. SSLScan is designed to be easy, lean and fast. The output includes preferred ciphers of the SSL service, the certificate and is in Text and XML formats. Features Query SSL services Supported...

CVE-2022-30190

MS-MSDT Follina CVE-2022-30190 PoC Malicious docx generator to exploit Microsoft Office Word Remote Code Execution Creation of this Script is based on CVE-2021-40444 PoC by LockedByte and writeup by Tothi Using First modify backup.html and replace powershell payload. Right now just pops a calc.ex...

CVE-2026-33829-Writeup

CVE-2026-33829-Writeup Vulnerability Case Study: CVE-2026-33829 Windows Snipping Tool NTLM Coercion Executive Summary This write-up details the technical replication of CVE-2026-33829 , an information disclosure vulnerability within the modern Windows Snipping Tool application framework. By abusi...

docker-CVE-2019-11043

Docker image and commands to check CVE-2019-11043 CVE: CVE-2019-11043 Description: In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FC...