badsecrets

badsecrets A pure python library for identifying the use of known or very weak cryptographic secrets across a variety of platforms. The project is designed to be both a repository of various "known secrets" for example, ASP.NET machine keys found in examples in tutorials, and to provide a...

badsecrets

badsecrets مكتبة بايثون نقية لتحديد استخدام الأسرار التشفيرية المعروفة أو الضعيفة جداً عبر مجموعة متنوعة من المنصات. تم تصميم المشروع ليكون مستودعاً لمختلف "الأسرار المعروفة" على سبيل المثال، مفاتيح آلة ASP.NET الموجودة في أمثلة الدروس، وتوفير طبقة تجريد مستقلة عن اللغة لتحديد استخدامها. معرفة مت...

Astra

Astra REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can...

CVE-2014-0346

CVE-2014-0160 Heartbleed Test Script This script checks for the infamous Heartbleed vulnerability CVE-2014-0160 in SSL/TLS servers. 📜 Credits Based on the original script by Jared Stafford [email protected] Modified and updated by Songül Kızılay for educational and research purposes ⚠️...

Guardrails

Bibliothèque NVIDIA NeMo Guardrails...

ShadowRay-RCE-PoC-CVE-2023-48022

PoC for a remote command execution vulnerability in Ray framework CVE-2023-48022 This exploit script and PoC are written for an in-depth CVE analysis on vsociety. The Ray framework, an essential tool for Python-based AI and machine learning applications, has encountered a significant security...

pwnspoof

يقوم pwnSpoof من Punk Security بإنشاء ملفات سجلات مزيفة واقعية لخوادم الويب الشائعة مع سيناريوهات هجوم قابلة للتخصيص. كل حزمة سجل فريدة وقابلة للتخصيص بالكامل، مما يجعلها مثالية لتوليد سيناريوهات CTF وللسلاسل التدريبية. هل يمكنك العثور على جلسة المهاجم وبناء صورة الحادثة؟ جدول المحتويات...

pwnspoof

pwnSpoof from Punk Security generates realistic spoofed log files for common web servers with customisable attack scenarios. Every log bundle is unique and completely customisable, making it perfect for generating CTF scenarios and for training serials. Can you find the attacker session and build...

CVE-2018-7211-PoC

CVE-2018-7211-PoC The PoC||GTFO of CVE-2018-7211 Reference: https://membership.backbox.org/idashboards-9-6b-multiple-vulnerabilities/ Requirements None, only Python Usage Run the script root@kitploit: $ git clone https://github.com/bowline90/CVE-2018-7211-PoC.git $ cd CVE-2018-7211-PoC $ chmod +x...

CVE-2022-4616-POC

CVE-2022-46169 Pseudo Shell Description This Python script serves as a helper tool to streamline the process of exploiting the CVE-2022-46169 vulnerability. It starts an HTTP server that listens for incoming requests and provides a simple interface for the user to input commands. These commands a...

vbull

vBulletin Mass Exploit CVE-2019-16759 Alert! This tool was made for penetration testing CVE-2019-16759. We are not responsible for errors made by users of this tool. Installation and usage: $ pkg install git python2 $ pip2 install requests $ git clone https://github.com/psychoxploit/vbull $ cd...

chromepass

Chromepass - اختراق كلمات المرور وملفات تعريف الارتباط المحفوظة في Chrome عرض توضيحي · الإبلاغ عن خطأ · طلب ميزة جدول المحتويات حول المشروع اكتشاف برامج مكافحة الفيروسات بدء الاستخدام المتطلبات التثبيت الاستخدام البريد الإلكتروني الأخطاء والثغرات وطلبات الميزات تعلم المزيد الترخيص العرض التوضيحي...

chromepass

Chromepass - Hacking Chrome Saved Passwords and Cookies View Demo · Report Bug · Request Feature Table of Contents About the Project AV Detection Getting started Prerequisites Installation Usage Email Errors, Bugs and Feature Requests Learn More License Demo About The project Chromepass is a...

autoresponder

AutoResponder Outil de réponse aux incidents Carbon Black Response pour la chasse aux menaces dans un environnement Qu'est-ce que c'est ? AutoResponder est un outil destiné à aider les personnes à effectuer leurs tâches de réponse aux incidents AVEC l'aide des capacités impressionnantes de Carbon...

autoresponder

AutoResponder Carbon Black Response IR tool for hunting threats in an environment What is it? AutoResponder is a tool aimed to help people to carry out their Incident Response tasks WITH the help of Carbon Black Response's awesome capabilities and WITHOUT much bothering IT/System/Network Teams Wh...

killchain

killchain “Kill Chain” est une console unifiée avec un anonymiseur qui exécutera ces étapes d'attaque : Reconnaissance Armement Livraison Exploitation Installation Commande et Contrôle Et Actions Les ensembles d'outils dépendants sont :...

iocx

IOCX Extraction déterministe et sans risque d'IOC pour les pipelines de sécurité modernes Extraction statique d'IOC à partir d'un fichier PE à l'aide de la CLI IOCX...

SambaHunter

SambaHunter It is a simple script to exploit RCE for Samba CVE-2017-7494. Now works with Python3. Many of the required Python2 libraries are deprecated e.g. commands Added logging to show which shares are writeable. If 'Exploit Finished' appears but no shares are writeable, the exploit didn't wor...

CVE-2018-8174_EXP

CVE-2018-8174EXP usage: CVE-2018-8174.py -h -u URL -o OUTPUT -i IP -p PORT Exploit for CVE-2018-8174 optional arguments: -h, --help show this help message and exit -u URL, --url URL exp url -o OUTPUT, --output OUTPUT Output exploit rtf -i IP, --ip IP ip for netcat -p PORT, --port PORT port for...

Torward

Torward Torward is an improved version based on the torghost-gn and darktor scripts, designed to enhance anonymity on the Internet. The tool prevents data leaks and forces all traffic from our computer to be routed exclusively through the Tor network, providing a high level of privacy in our...