nfcgate

NFCGate ⚠️NFCGate is currently being falsely detected as "NGate" malware. Please seethis issue for up-to-date information.⚠️ NFCGate is an Android application meant to capture, analyze, or modify NFC traffic. It can be used as a researching tool to reverse engineer protocols or assess the security...

nfcgate

NFCGate ⚠️NFCGateは現在、「NGate」マルウェアとして誤検出されています。最新情報についてはこのIssueをご確認ください。⚠️ NFCGateは、NFCトラフィックのキャプチャ、分析、変更を目的としたAndroidアプリケーションです。プロトコルのリバースエンジニアリングや、トラフィック改変に対するプロトコルのセキュリティ評価のためのリサーチツールとして使用できます。 注意 このアプリケーションは、TU DarmstadtのSecure Mobile Networking Labの学生によってセキュリティ研究目的で開発されました。悪意のある目的で使用しないでください。...

CVE-2026-73437

Arista EOS DHCP relay is vulnerable to spoofed DHCP reply forwarding (CWE-345). An unauthenticated attacker on an adjacent network can send crafted DHCP reply packets from a non-helper IP address, which the relay forwards to clients without source validation, potentially supplying malicious netwo...

CVE-2026-19655

CVE-2026-19655 affects Arista EOS when DHCP relay/snooping is configured with Option 82 (information option) or when the DHCP server uses match criteria based on that option. An unauthenticated attacker on a client-facing VLAN can send a specially crafted packet that triggers a DHCP Relay service...

EUVD-2026-80003

On affected platforms running Arista EOS with Dynamic Host Configuration Protocol DHCP relay/snooping configured with the information option Option 82, or with the DHCP server configured with match criteria based on the information option, an unauthenticated attacker connected to a client-facing...

PetitPotam

PetitPotam NTLM Relay Attack Detection A Zeek package for detecting some attempts to trigger NTLM relay attacks via the Petit Potam exploit. This package will detect what appear to be successful and unsuccessful exploit attempts. It makes a distinction between them by examining the return code fo...

RemotePotato0

RemotePotato0 UPDATE 21-10-2022: The main exploit scenario RPC- LDAP of RemotePotato0 has been fixed. More details at -- https://twitter.com/splintercode/status/1583555613950255104 Just another "Won't Fix" Windows Privilege Escalation from User to Domain Admin. RemotePotato0 is an exploit that...

Certipy

Certipy - AD CS Attack & Enumeration Toolkit Certipy is a powerful offensive and defensive toolkit for enumerating and abusing Active Directory Certificate Services AD CS. It helps red teamers, penetration testers, and defenders assess AD CS misconfigurations - including full support for...

Ivanti-EPM-Coercion-Vulnerabilities

Ivanti EPM Coercion Vulnerabilities Proof of concept exploits for Ivanti EPM CVE-2024-13159 and others which allows for unauthenticated coercion of the Ivanti EPM machine credential for use in relay attacks. Blog Post Deep-dive analysis here:...

ranger

ranger セキュリティ専門家がリモートのMicrosoft Windowsベースのシステムにアクセスし、操作するためのツール。 このプロジェクトは、私たちは弓や矢を発明したわけではなく、単により効率的な使用方法を考案したという考え方に基づいています。 Rangerはコマンドライン駆動の攻撃・ペネトレーションテストツールであり、インスタンス化されたカタパルトサーバーを使用してWindowsシステムに対して機能を提供する能力を持っています。ユーザーが資格情報またはハッシュセット（NTLM、LM、LM:NTLM）を持っている限り、信頼関係にあるシステムにアクセスできます。...

CVE-2025-33073

CVE-2025-33073 Reflection Relay PoC Universal exploitation tool for CVE-2025-33073 targeting Windows Domain Controllers with DNSAdmins privileges and WinRM enabled. 📋 Overview CVE-2025-33073 is a critical vulnerability that allows attackers to achieve SYSTEM-level code execution on Windows Domain...

stunner

STUNNER Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers. TURN is a protocol mostly used in videoconferencing and audio chats WebRTC. If you find a misconfigured server you can use this tool to open a local socks proxy that relays all traffic via the TURN protocol into t...

cnc-relay

cnc-relay Durante un ejercicio de red team es habitual configurar una infraestructura de relays para separar tu superficie de exposición externa del backend real de comando y control. Algunas de las opciones ligeras más populares son configurar HAProxy o NGINX en infraestructura en la nube...

PetitPotam-notest

PetitPotam NTLM 中继攻击检测 一个 Zeek 包，用于检测通过 PetitPotam 漏洞触发 NTLM 中继攻击的尝试。 该包将检测看似成功和失败的漏洞利用尝试。它通过检查 EFS DCERPC 函数调用的返回码来 区分二者。 注意： 此包仅检测通过未加密 SMB 传输的漏洞利用尝试。通过加密 SMB 传输的 DCERPC 调用将不会被检测到。在这些情况下，有时可以检查 ntlm.log 的输出，寻找正在进行的成功 NTLM 中继攻击的迹象。 安装 安装此包最简单的方式是通过 zkg： zkg install corelight/petitpotam 使用 使用...

OSIPs

OSIPs This script scans every file from a given folder recursively, extracts every IPv4 and IPv6 address, filters out the public IP addresses and then queries these IPs against TOR relays, WhoIs service and Location service. It outputs 4 files: a CSV file and a JSON file with all details of the I...

UnCanny

UNCanny Coerce The idea behind this research was simple as i wanted to find my own coercion technique. i started by looking for new RPC attack surfaces, but after microsoft added RPC activity monitoring...

AdvPhishing

Check For Mp4: https://www.instagram.com/tukbuck/reel/DTBBBknj-nd/ Note: If you want to activate this tool or want same project with working condition then first pay: ETHERC20 wallet address: 0xe48df3c0e1713518096c7d2d0a2dce70aa85cd33 Follow on Social Media Platforms Contribute us Want to Learn t...

CVE-2022-30216

CVE-2022-30216 A Zeek package which raises notices for attempts and exploits of CVE-2022-30216, a technique used against Windows Server to force an NTLM authorization to an arbitrary server. An attacker can reuse the NTLM token to generate a client certificate, enabling them to request a Kerberos...

NtlmRelayToEWS

ntlmRelayToEWS Author: Arno0x0x - @Arno0x0x ntlmRelayToEWS is a tool for performing ntlm relay attacks on Exchange Web Services EWS. It spawns an SMBListener on port 445 and an HTTPListener on port 80, waiting for incoming connection from the victim. Once the victim connects to one of the...

rustdesk

Build • Docker • Structure • Snapshot Українська | česky | 中文 | Magyar | Español | فارسی | Français | Deutsch | Polski | Indonesian | Suomi | മലയാളം | 日本語 | Nederlands | Italiano | Русский | Português Brasil | Esperanto | 한국어 | العربي | Tiếng Việt | Dansk | Ελληνικά | Türkçe | Norsk | Română We...