kekeo

kekeo kekeo is a little toolbox I have started to manipulate Microsoft Kerberos in C and for fun ASN.1 library In kekeo, I use an external commercial library to deal with Kerberos ASN.1 structures: OSS ASN.1/C http://www.oss.com/asn1/products/asn1-c/asn1-c.html It was the only code...

pwncat

pwncat pwncat is a post-exploitation platform for Linux targets. It started out as a wrapper around basic bind and reverse shells and has grown from there. It streamlines common red team operations while staging code from your attacker machine, not the target. pwncat used to only support Linux, b...

traitor

Traitor Automatically exploit low-hanging fruit to pop a root shell. Linux privilege escalation made easy! Traitor packages up a bunch of methods to exploit local misconfigurations and vulnerabilities in order to pop a root shell: Nearly all of GTFOBins Writeable docker.sock CVE-2022-0847 Dirty...

unredacter

Unredacter Te muestra por qué nunca, nunca, jamás deberías usar el pixelado como técnica de redacción. Para un análisis más completo de cómo funciona esto, consulta mi artículo en el blog aquí. Cómo Probarlo Instala las dependencias: npm install Después inicia con npm start Eso es todo. Cómo...

adaudit

adaudit This PowerShell script is designed to conduct a comprehensive audit of Microsoft Active Directory, focusing on identifying common security vulnerabilities and weaknesses. Its execution facilitates the pinpointing of critical areas that require reinforcement, thereby fortifying your...

cliam

cliam Multi cloud iam permissions enumeration tool. Currently covers: AWS GCP Azure Oracle 🚧 WIP Description Cliam is a simple cloud permissions identifier. There are two main components to the CLI. Most of the enumerated permissions are list, describe or get permissions. enumerate which can be...

cliam

cliam 多云 IAM 权限枚举工具。目前支持： AWS GCP Azure Oracle 🚧 开发中 描述 Cliam 是一个简单的云权限识别工具。CLI 包含两个主要组件。枚举的权限大多是 list、describe 或 get 权限。 enumerate 用于枚举特定权限（推荐） 某些服务提供商拥有服务组，可以检查特定服务/资源子集的权限。 安装 下载最新发布版。DEV 标签表示当前版本但不稳定。 若要在本地构建二进制文件，请进入 cli 目录并运行 make dev 用法 Cliam 通过服务常用的环境变量或从 CLI 传递常用标志来使用凭证。...

AutoGadgetFS

以太坊捐赠：0xA919e40ddB0563918dDc174320D91992e0048477 目录 1. 什么是AutoGadgetFS？ 2. 需求 3. 设置 a. 仅设备测试 b. 最小agfs中间人配置 c. 带调试支持的完整agfs中间人配置 4. USB设备类支持 5. 功能 6. 路线图 7. 安装 a. Linux b. 带WiFi的树莓派Zero 8. AutoGadgetFS教程 9. 截图 10. YouTube播放列表 11. Slack 12. 支持方 13. 请我喝杯咖啡 ☕️ 14. 联系我 15. 想贡献？ 什么是AutoGadgetFS？...

GhostLock-for-OnePlus15T

GhostLock — OnePlus 15T Exploit de kernel dirigido a dispositivos OnePlus 15T con bootloader bloqueado. Utiliza CVE-2026-43499 para obtener acceso root sin desbloquear el bootloader ni modificar boot.img. Solo para investigación de seguridad autorizada y fines educativos. Modificado a partir...

Security Bulletin: Qiskit SDK is vulnerable when deserializing QPY Files and may overflow the available stack space.

Summary A maliciously constructed QPY payload that contains specifically constructed ParameterExpression objects as part of the payload can trigger a segfault in the evaluation of those expressions during deserialization. The function qiskit.qpy.load may recurse too deeply and overflow the...

habu

Habu 黑客工具包 我正在开发 Habu，用于教授（和学习）关于 Python 和网络黑客的一些概念。 当前版本实现的一些技术包括： ARP 投毒与嗅探 DHCP 发现与饥饿攻击 子域名识别 证书克隆 TCP 分析（ISN、标志） 社交网络用户名检查 Web 技术识别 还有更多！ 本软件开发由 Securetia SRL 支持 https://www.securetia.com/ 使用 Habu 进行黑客攻击 各种有用的使用场景详见 https://fportantier.github.io/hacking-with-habu/ 使用视频 以下 YouTube...

awesome

Check out my macOS app Supercharge Elevate your Mac experience My open source work is supported by the community Special thanks to: Fast remote container builds and GitHub Actions runners. Get the most out of every conversation. AI-powered meeting notes, automations, and search. Give AI agents th...

SecurityClaw

SecurityClaw — Autonomous SOC Agentic Framework A modular, skill-based autonomous Security Operations Center SOC agent that monitors OpenSearch/Elasticsearch data, builds RAG-based behavioral memory, and validates real-time anomalies using LLMs. Features Skill Modularity — Capabilities as isolate...

CVE-2022-22963

CVE-2022-22963 spring cloud function sple rce spring cloud function 一键利用工具! by charis 博客https://charis3306.top/ 已打包为exe文件开箱即用 命令主题 root@kitploit: usage: Spring-cloud-function-spel0.2.exe -h --check CHECK --route ROUTE --url URL --ip IP --port PORT --proxies PROXIES --cmd CMD spring cloud function...

matchlock

Matchlock Experimental: This project is still in active development and subject to breaking changes. Matchlock is a CLI tool for running AI agents in ephemeral microVMs - with network allowlisting, secret injection via MITM proxy, and VM-level isolation. Your secrets never enter the VM. Why...

uptux

uptux Specialized privilege escalation checks for Linux systems. Implemented so far: Writable systemd paths, services, timers, and socket units Disassembles systemd unit files looking for: References to executables that are writable References to broken symlinks pointing to writeable directories...

auth_analyzer

Auth Analyzer Table of Contents What is it? Why should I use Auth Analyzer? GUI Overview Parameter Extraction Auto Extract From To String Static Value Prompt for Input Parameter Replacement Replacement Location Parameter removement Sample Usage Auto extract session Cookie Session Header and CSRF...

lunar

LUNAR Lockdown UNix Auditing and Reporting Version Current version 15.9.1 Refer to lunar.sh and changelog for more up to date version information License CC BY-SA: https://creativecommons.org/licenses/by-sa/4.0/ Fund me here: https://ko-fi.com/richardatlateralblast NOTICE Run this code in audit...

concealed_code_execution

Concealed Code Execution Hunt& Hackett presents a set of tools and technical write-ups describing attacking techniques that rely on concealing code execution on Windows. Here you will find explanations of how these techniques work, receive advice on detection, and get sample source code for testi...

CapTipper

CapTipper v0.3 CapTipper v0.3：http://www.omriher.com/2015/08/captipper-v03-is-out.html CapTipper v0.2：http://www.omriher.com/2015/03/captipper-02-released.html CapTipper v0.1：http://www.omriher.com/2015/01/captipper-malicious-http-traffic.html CapTipper 是一款用于分析、探索和重建恶意HTTP流量的Python工具。 CapTipper...