11637 matches found
attack_range
Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs — Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...
mwebfp
LNHG - Massive Web Fingerprinter mwebfp Introduction The "LowNoiseHG LNHG Massive Web Fingerprinter " "mwebfp " from now on was conceived in July 2013 after realizing the usefulness of webserver screenshots to pentesters, during an engagement with large external or internal IP address ranges, as ...
ncrack
ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...
BlueCloud
Overview Cyber Range deployment of HELK and Velociraptor! Automated terraform deployment of one system running HELK + Velociraptor server with one registered Windows endpoint in Azure or AWS. A collection of Terraform and Ansible scripts that automatically and quickly deploys a small HELK +...
robodroid
RoboDroid RoboDroid is a cutting-edge software tool designed to simplify the process of managing and very soon also deploying Android machines for usage in Cyber Range environments. With RoboDroid, users can easily set up and customize pre-defined behaviors for their Android machines, allowing th...
CVE-2017-7529
CVE-2017-7529 Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request. Installation $ git clone...
combobulator
Dependency Combobulator Dependency Combobulator is an Open-Source, modular and extensible framework to detect and prevent dependency confusion leakage and potential attacks. This facilitates a holistic approach for ensuring secure application releases that can be evaluated against different sourc...
cve-2022-42889
cve-2022-42889 cve-2022-42889 Text4Shell affects Apache Commons Text versions 1.5 through 1.9. It has been patched as of Commons Text version 1.10. references: https://securitylab.github.com/advisories/GHSL-2022-018ApacheCommonsText/ https://github.com/karthikuj/cve-2022-42889-text4shell-docker...
scanginx
Scanginx Scanner For Nginx - Remote Integer Overflow Vulnerability Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request...
cPanelScanner
🔍 Escáner de cPanel Una herramienta rápida y multihilo de detección de cPanel escrita en Go. Escanea direcciones IP, rangos CIDR o listas de objetivos desde un archivo para identificar servicios cPanel ejecutándose en los puertos 2082, 2083 y 2087. ✨ Características Escaneo multihilo — concurrenc...
recollapse
REcollapse REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications. It can also be helpful to bypass WAFs and weak vulnerability mitigations. For more information, take a look at the REcollapse blog post. The goal of this tool ...
Astro Cloudflare Adapter - Server Side Request Forgery
Astro is a web framework for content-driven websites. Versions 11.0.3 through 12.6.5 are vulnerable to SSRF when using Astro's Cloudflare adapter. When configured with output: 'server' while using the default imageService: 'compile', the generated image optimization endpoint doesn't check the URL...
CVE-2023-4966
CVE-2023-4966 CitrixBleed Programm to exploit Citrix Applications with a range of ip adresses here is how you compile it for windows, macOS, or Linux root@kitploit: GOOS=windows GOARCH=amd64 go build -o citrix citrix.go GOOS=darwin GOARCH=amd64 go build -o citrix.exe citrix.go GOOS=linux...
cve-2023-50164
CVE-2023-50164 受影响版本 Struts 2.0.0 - Struts 2.3.37 EOL Struts 2.5.0 - Struts 2.5.32 Struts 6.0.0 - Struts 6.3.0 修复版本 Struts 2.5.33 Struts 6.3.0.2 搜索脚本 Windows/PowerShell 适用于 PowerShell 5.1 及更高版本。由 Kjetil Sigvartsen 在挪威卫生网络撰写。 root@kitploit: String$Extensions = @'.jar', '.war', '.ear'...
apache__dubbo_CVE-2021-30180_2-7-9
Apache Dubbo 项目...
domain_analyzer
Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...
MS15-034
MS15-034 MS15-034 POC "当前IIS服务器版本是存在已知漏洞（CVE-2015-1635, MS15-034）的易受攻击版本，利用该漏洞可能导致远程代码执行或引发蓝屏等攻击风险。 测试语法：wget --header=""Range: bytes=0-18446744073709551615"" 引发蓝屏攻击语法：wget --header=""Range: bytes=18-18446744073709551615"" ※ https://technet.microsoft.com/library/security/ms15-034 ※...
iptodomain
iptodomain 描述： 该工具允许你利用 VirusTotal 中存档的历史信息（使用 API 密钥）从 IP 范围中提取域名。如果你想知道某个 IP 地址背后有哪些域名，这将非常有用。例如，在漏洞赏金计划中，最初的步骤之一就是提取子域名，该工具可以协助完成此任务……首先你需要找出公司使用的 IP 范围。很多时候，一个好的起点是了解 AS（自治系统）编号，然后你就能找到 IP 范围。 要使用此工具，你需要在代码中设置你的 VirusTotal API 密钥，请注册 VirusTotal，之后他们会提供 API 密钥。 示例： python iptodomain.py -i...
RRC_steganography
RRC 隐写术 旋转范围编码 RRC 隐写术 — 一种高效且可证明安全的语言隐写方法，通过大型语言模型生成的文本嵌入秘密消息。 论文 : 通过范围编码实现高效可证明安全的语言隐写 工作原理 步骤| 描述 ---|--- 嵌入 算法 3| 将秘密消息转换为十进制值，并在语言模型概率分布和 PRNG 生成偏移量引导的收缩区间内迭代 旋转 该值。每次旋转产生一个 token。 提取 算法 4| 在隐写文本上重新运行语言模型以恢复区间边界，然后 逆向旋转 回原始十进制值并二值化。 旋转机制解决了标准范围编码隐写术的两个问题： 1. 概率分布保持 — 旋转后的秘密值在每个区间内均匀分布，因此...