SHA256-CDP

SHA256-CDP: Cyclic Digit-sum Projection GPU-accelerated rainbow table implementation of the CDP structural analysis framework for SHA-256. Built on the findings of the CDP paper DOI: 10.5281/zenodo.20627240, this repository provides a complete, working implementation of CDP-based rainbow chain...

hopgoblin

hopgoblin hopgoblin is a scanner for Adobe Experience Manager AEM instances. It automates a handful of checks that we frequently perform manually during security assessments. Features Detects exposed QueryBuilder endpoints: /bin/querybuilder.json /bin/querybuilder.feed Abuses QueryBuilder to:...

flask-session-cookie-manager

Flask 세션 쿠키 디코더/인코더 원저자 : Wilson Sumanang 수정 및 개선 저자 : Alexandre ZANNI 출처 : saruberoz.github.io 종속성 Python 2 또는 Python 3 itsdangerous Flask 설치 패키지 BlackArch Linux pacman -S flask-session-cookie-manager3,2 Git ArchLinux Python 3 및 Python 2 모두: git clone...

flask-session-cookie-manager

Flask Session Cookie Decoder/Encoder Original author : Wilson Sumanang Fixes and improvements author : Alexandre ZANNI Imported from saruberoz.github.io Depencencies Python 2 or Python 3 itsdangerous Flask Installation Package BlackArch Linux pacman -S flask-session-cookie-manager3,2 Git ArchLinu...

ColdWer

A cold war on your endpoint. 🥶 ColdWer ColdWer leverages WerFaultSecure.exe PPL bypass to freeze EDR/AV processes and dump LSASS memory on modern Windows systems. C O L D W E R └─┴─┴── WerFaultSecure └─┴──────── LSASS Dump └─┴──────────── Cold Freeze Freeze your EDR/AV. Extract what you need. Sta...

Firmware_Slap

Firmware Slap Firmware slap combines concolic analysis with function clustering for vulnerability discovery and function similarity in firmware. Firmware slap is built as a series of libraries and exports most information as either pickles or JSON for integration with other tools. Slides from the...

pbtk

pbtk - Protobuf 앱 리버스 엔지니어링 Protobuf는 Google에서 개발한 직렬화 형식으로, 점점 더 많은 Android, 웹, 데스크톱 및 기타 애플리케이션에서 사용되고 있습니다. 이는 데이터 구조를 선언하는 언어 로 구성되며, 대상 구현에 따라 코드 또는 다른 종류의 구조로 컴파일됩니다. pbtk Protobuf 툴킷는 통합 GUI를 통해 접근할 수 있는 완전한 기능의 스크립트 세트로, 두 가지 주요 기능을 제공합니다: 프로그램에서 Protobuf 구조 추출 , 이를 다시 읽을 수 있는 .proto 파일로...

pbtk

pbtk - Reverse engineering Protobuf apps Protobuf is a serialization format developed by Google and used in an increasing number of Android, web, desktop and more applications. It consists of a language for declaring data structures , which is then compiled to code or another kind of structure...

pgaudit

pgAudit Open Source PostgreSQL Audit Logging Introduction The PostgreSQL Audit Extension pgAudit provides detailed session and/or object audit logging via the standard PostgreSQL logging facility. The goal of pgAudit is to provide PostgreSQL users with capability to produce audit logs often...

Klip

Klip Minimal terminal-based password manager. Features · Installation · Usage · Security Features Fully offline operation. Secure encryption using Argon2id for key derivation and authenticated encryption with libsodium. Secure password generator. Custom TUI built without external libraries...

SpoofcheckSelfTest

SpoofCheck Self Test Web application that lets you test if your domain is vulnerable to email spoofing. NOTE: This application is still in development. Installation: This application is designed to be used as a service. However, if you want to host this yourself, do the following: git clone...

threatbox

Threatbox - 표준 공격 플랫폼 ThreatBox는 표준화되고 제어된 Linux 기반 공격 플랫폼입니다. 저는 이 플랫폼의 버전을 수년간 사용해 왔습니다. 처음에는 스크립트 모음으로 시작했으며, 롤링 가상 머신으로 유지되다가, Linux ISO를 빌드하는 코드로 존재했고, 이제는 ansible 플레이북 세트로 변환되었습니다. 왜 Ansible일까요? 왜 안 될까요? 이것이 표준 공격 플랫폼 구성의 다음 자연스러운 진화처럼 보였습니다. 이 프로젝트는 ansible 플레이북과 역할을 사용하여 Linux 대상Ubuntu...

threatbox

Threatbox - Standard Attack Platform ThreatBox is a standard and controlled Linux based attack platform. I've used a version of this for years. It started as a collection of scripts, lived as a rolling virtual machine, existed as code to build a Linux ISO, and has now been converted to a set of...

bkcrack

bkcrack Biham と Kocher の既知平文攻撃を使用してレガシーZIP暗号化を解読します。 概要 ZIPアーカイブには、圧縮や暗号化が施された多数のエントリが含まれる場合があります。 特に、エントリは従来のPKWARE暗号化、レガシー暗号化、またはZipCryptoと呼ばれるパスワードベースの対称暗号アルゴリズムで暗号化できます。 このアルゴリズムは、疑似ランダムバイトストリーム（キーストリーム）を生成し、エントリの内容（平文）にXORして暗号化データ（暗号文）を生成します。...

bkcrack

bkcrack Crack legacy zip encryption with Biham and Kocher's known plaintext attack. Overview A ZIP archive may contain many entries whose content can be compressed and/or encrypted. In particular, entries can be encrypted with a password-based symmetric encryption algorithm referred to as...

secator

펜테스터의 스위스 나이프. 기능 • 지원 명령어 • 설치 • 사용법 • 문서 • Discord에 참여하세요! secator는 보안 평가에 사용되는 작업 및 워크플로우 실행기입니다. 수십 개의 잘 알려진 보안 도구를 지원하며 펜테스터와 보안 연구자의 생산성을 향상시키기 위해 설계되었습니다. 기능 엄선된 명령어 목록 통합된 입력 옵션 통합된 출력 스키마 CLI 및 라이브러리 사용 Celery를 이용한 분산 옵션 간단한 작업부터 복잡한 워크플로우까지 사용자 정의 가능 지원 도구 secator는 다음 도구를 통합합니다: 이름| 설명|...

ivre-wizard

IVRE . \ ,/ \ |\ / | | //\ | \ /\ | | / | '/ | / /\oo/\ | |/ / | | | | | | /\ // |/,|| ,| By BitBurner ivre-wizard An interactive wizard front end for IVRE to make creating scans to the database easier. Why? I created this script for doing scans with IVRE https://ivre.rocks/ on Kali...

idamcp

IDA Pro MCP Server This project provides a Model Context Protocol MCP server for integrating IDA Pro with AI agents like Gemini, Claude, and Jetski. It features a gateway-based proxy architecture, an embedded relational SQLite query engine, and headless session management to support advanced...

PE_CVE-CVE-2021-3156

PECVE-CVE-2021-3156 Exploit for Ubuntu 20.04 using CVE-2021-3156, enhanced with simple and automated post-exploitation scripts Besides the root shell you can have: -A .txt file with all the idrsa ssh keys configured in the server. See the script: getallsshkeys.sh -A privshell executable that allo...

Passhunt

Passhunt Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords. Screenshot Pre-requisites Make sure you have installed the following: - Python 3.0 or later. - pip3 sudo apt-get...