mquery

mquery: Blazingly fast Yara queries for malware analysts Ever had trouble searching for malware samples? Mquery is an analyst-friendly web GUI to look through your digital warehouse. It can be used to search through terabytes of malware in a blink of an eye: Under the hood we use our UrsaDB, to...

cleanldap

CleanLdap BOF to perform stealthy LDAP queries over AD WS Arguments Just going to cut to the chase, here are the args and what they mean: root@kitploit: Z: DC Hostname "dc01.example.com" Z: LDAP query "objectClass=" Z: Comma separated list of LDAP attributes "samaccountname,distinguishedName,cn" ...

dnsx

A fast and multi-purpose DNS toolkit designed for running DNS queries Features • Installation • Usage • Running dnsx • Wildcard • Notes • Join Discord dnsx is a fast and multi-purpose DNS toolkit designed for running various probes through the retryabledns library. It supports multiple DNS querie...

LetsMapYourNetwork

Omniscient - Let’s Map Your Network v2.0 Table of Contents 1. WHAT IT IS 2. WHY IT IS 3. WHERE TO USE IT 4. Presentations 5. Key Features 6. Installation Guidelines 7. HOW TO USE IT 8. Understand Node 9. Contributer 10. LMYN In Action 11. Roadmap 12. Contact Information WHAT IT IS It is utmost...

BloodHound_CustomQueries_Toolset

BloodHoundCustomQueriesToolset Tool to import your customqueries for BloodHound "Legacy" to BloodHound "Community". note: on linux/kali, your customqueries.json file for BloodHound Legacy is located at /.config/bloodhound/customqueries.json Installation 1. Clone this repository. 2. Copy the...

CVE-2025-57819-poc

CVE-2025-57819 — FreePBX Unauthenticated SQLi → RCE One-shot exploit for the FreePBX Endpoint Manager unauthenticated SQL injection CVE-2025-57819, chained into remote code execution via the FreePBX cronjobs table. For authorized security testing / CTF use only. Vulnerability The endpoint module'...

zmap

ZMap: The Internet Scanner ZMap is a fast stateless single packet network scanner designed for Internet-wide network surveys. On a typical desktop computer with a gigabit Ethernet connection, ZMap is capable of scanning the entire public IPv4 address space on a single port in under 45 minutes. Fo...

CVE-2019-14529

CVE-2019-14529 Multiple SQL Injection vulnerability in OpenEMR project Vulnerable function in file: /openemr/interface/forms/eyemag/save.php Conditions : any authorized user Vulnerable versions: 5.0.2, Fixed in 5.0.2 version. Description There are two functions: 1. "storePDF", with non filtered...

msldap

🚩 Sponsors If you like this project, consider purchasing licenses of OctoPwn, our full pentesting suite that runs in your browser! For notifications on new builds/releases and other info, hop on to our Discord msldap LDAP library for MS AD 🚩 Runs in the browser This project, alongside with many...

ltm

ltm Machine-history debugger for Linux. Records process, file, network, memory, and block I/O via eBPF, stores metadata in SQLite, and answers timeline / diff / plain-English / SQL questions about what happened on the box. ⚠️ Tracepoint-only capture today — recording currently uses tracepoint...

BlueHound

BlueHound is an open-source tool that helps blue teams pinpoint the security issues that actually matter. By combining information about user permissions, network access and unpatched vulnerabilities, BlueHound reveals the paths attackers would take if they were inside your network It is a fork o...

graphql-threat-matrix

GraphQL Threat Matrix Why graphql-threat-matrix? graphql-threat-matrix was built for bug bounty hunters, security researchers and hackers to assist with uncovering vulnerabilities across multiple GraphQL implementations. The differences in how GraphQL implementations interpret and conform to the...

cypheroth

Cypheroth Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets. Description This is a bash script that automates running cypher queries against Bloodhound data stored in a Neo4j database. I found myself re-running the same...

Registry-Recon

Registry-Recon Cobalt Strike Aggressor Script that Performs System/AV/EDR Recon. Author: Jess Hires Description As a red-team practitioner, we are often using tools that attempt to fingerprint details about a compromised system, preferably in the most stealthy way possible. Some of our usual...

shodan-dorks

Shodan dorks Описание: Этот репозиторий GitHub содержит набор поисковых запросов, известных как «дорки» dorks, для Shodan — мощного инструмента, используемого для поиска устройств, подключенных к Интернету. Дорки предназначены для помощи специалистам по безопасности в обнаружении потенциальных...

Sentinel-Queries

Microsoft Sentinel용 KQL Microsoft Sentinel에서 KQL을 사용하기 위한 몇 가지 팁, 요령 및 예제입니다. 1. 소개 2. KQL 쿼리의 구조 3. 기본 사항 1. 시간 기본 사항 2. Where 기본 사항 3. Project 기본 사항 4. Summarize 기본 사항 5. Render 기본 사항 6. Parse 및 Split 기본 사항 소개 Kusto Query Language는 Azure Monitor, Azure Data Explorer 및 Azure Log Analytics그 내부에서...

codeql

CodeQL 이 오픈 소스 저장소에는 GitHub 고급 보안 및 GitHub이 전 세계 고객에게 제공하는 기타 애플리케이션 보안 제품을 구동하는 표준 CodeQL 라이브러리와 쿼리가 포함되어 있습니다. CodeQL을 배우고 쿼리를 실행하려면 어떻게 해야 하나요? CodeQL 언어, Visual Studio Code용 CodeQL 확장을 사용한 CodeQL 작성, CodeQL CLI 사용에 대한 광범위한 문서가 있습니다. 기여하기 표준 라이브러리와 표준 검사에 대한 기여를 환영합니다. 새로운 검사에 대한 아이디어나 기존 쿼리를...

instarecon

InstaRecon Автоматизированная начальная цифровая разведка. Отлично подходит для получения первичного профиля ваших целей и обнаружения дополнительных поддоменов. InstaRecon выполняет: DNS-запросы A, PTR, MX, NS Рекурсивные DNS-запросы по всем обнаруженным хостам Whois-запросы по домену и IP...

heroku-CVE-2013-0269

heroku-CVE-2013-0269 Проверьте все ваши приложения Heroku на наличие уязвимой версии JSON Общие сведения Обнаружена уязвимость безопасности в Ruby-геме JSON. Это основная причина недавно объявленной проблемы с внедрением MySQL в Rails. Доступна новая версия гема JSON. Разработчики могут получить...

osquery

osquery osquery — это фреймворк для инструментирования, мониторинга и анализа операционной системы на основе SQL. Доступен для Linux, macOS и Windows. Информация и ресурсы Домашняя страница: osquery.io Загрузки: osquery.io/downloads Документация: ReadTheDocs Stack Overflow: Вопросы на Stack...