EmBomber

EmBomber Python Script for Email Bombing which supports Gmail, Yahoo, Hotmail/Outlook Made with by Mazen Elzanaty Features Support Gmail Support Yahoo Support Hotmail/Outlook Usage EmBomber should work on all Linux distros running Python 2.7 First, clone it by entering the following command in th...

CVE-2023-51764

CVE-2023-51764 Postfix SMTP Smuggling - Expect Script POC send an email that is legitimate, but inside the email there is many others emails different senders, recipients, subjet, etc. The initial email is check for SPF/DKIM/DMARC, the others inside are not ! usage: ./cve-2023-51764.sh mx.fqdn po...

libpo32

libpo32 A small C99 library for Teenage Engineering PO-32 acoustic data transfers and drum synthesis. libpo32 reimplements the PO-32 Tonic transfer stack and a compatible drum voice model. It is not a full PO-32 firmware or UI emulator; it covers the packet format, acoustic modem, frame decoder,...

BaRMIe

BaRMIe BaRMIe is a tool for enumerating and attacking Java RMI Remote Method Invocation services. RMI services often expose dangerous functionality without adequate security controls, however RMI services tend to pass under the radar during security assessments due to the lack of effective testin...

mantra

「🔑」 About Mantra The tool in question was created in Go and its main objective is to search for API keys in JavaScript files and HTML pages. It works by checking the source code of web pages and script files for strings that are identical or similar to API keys. These keys are often used for...

Sooty

Overview Sooty is a tool developed with the task of aiding SOC analysts with automating part of their workflow. One of the goals of Sooty is to perform as many of the routine checks as possible, allowing the analyst more time to spend on deeper analysis within the same time-frame. Details for man...

deep-C

Deep-C Deep-C is an Android Deep Link Exploitation Framework that automatically decompiles APKs, identifies exposed and insecure deep link entry points, validates exploitability using static analysis and optional AI verification , and generates executable adb Proof-of-Concepts PoCs. Deep-C is...

typofinder

Domain typo finder Typofinder for domain typo discovery Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by: Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com Stephen Tomkinson, @neonbunny9 on twitter Matt Summers, matt dot summers at nccgroup dot com...

wigle-wifi-wardriving

WiGLE Wireless Wardriving Network stumbling client for Android, from wigle.net. This client provides geolocated detection and logging for WiFi, Bluetooth, and cellular signals using Android devices. As of January 2023, this application supports Android SDK versions 24 Nougat and up. For older...

CVE-2021-26814

CVE-2021-26814 A simple python PoC to exploit CVE-2021-26814 and gain RCE on Wazuh Manager v.4.0.0-4.0.3 through the API service. To run it, simply make the .py script executable and launch it with the required parameters. root@kitploit: PoC.py -h -user USERNAME -pwd PASSWORD -lip SRCIP -lport...

Mobile-Security-Framework-MobSF

Mobile Security Framework MobSF Mobile Security Framework MobSF is a security research platform for mobile applications in Android, iOS and Windows Mobile. MobSF can be used for a variety of use cases such as mobile application security, penetration testing, malware analysis, and privacy analysis...

CVE-2022-22947

CVE-2022-22947 poc: pocsuite -r CVE-2022-22947POCEXP.py -u url --verify exp: pocsuite -r CVE-2022-22947POCEXP.py -u url --attack --command "command" 免责声明 此工具仅用于学习、研究和自查。不应将其用于非法目的。使用本工具产生的一切风险与我无关！ Disclaimer This tool is for study, research, and self-examination only. It should not be used for...

vulscan

vulscan - Vulnerability Scanning with Nmap Introduction Vulscan is a module which enhances nmap to a vulnerability scanner. The nmap option -sV enables version detection per service which is used to determine potential flaws according to the identified product. The data is looked up in an offline...

jumpserver

An open-source PAM platform Bastion Host English · 中文简体 · 中文繁體 · 日本語 · Português Brasil · Español · Русский · 한국어 What is JumpServer? JumpServer is an open-source Privileged Access Management PAM platform that provides DevOps and IT teams with on-demand and secure access to SSH, RDP, Kubernetes,...

Pwdlyser

Pwdlyser New repo for Public release Pwdlyser P assw ord -Analyser is a multi-functional analysis tool created to provide security professionals and organisations aiming to improve their security posture with the ability to easily review and analyse passwords from Active Directory domain accounts...

github-dorks

Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...

puredns

Fast domain resolver and subdomain bruteforcing with accurate wildcard filtering Getting Started » Usage · How it works · Sponsorship · FAQ About puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries. It uses...

ezXSS

ezXSS is an easy way for penetration testers and bug bounty hunters to test blind Cross Site Scripting. ezXSS is a tool that is designed to help find and exploit cross-site scripting XSS vulnerabilities. One of the key features of ezXSS is its ability to identify and exploit blind XSS...

ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure

Threat actors are leveraging ClickFix-like lures to deliver a previously undocumented remote access trojan RAT called ChainScript. "ChainScript has appeared under multiple build names, including ComponentTask33, UpdateDigital, HostShared, and OrchidViolet66, while presenting itself as Spotify, Zo...

python-uncompyle6

|buildstatus| |Pypi Installs| |Latest Version| |Supported Python Versions| |packagestatus| .. contents:: uncompyle6 A native Python cross-version decompiler and fragment decompiler. The successor to decompyle, uncompyle, and uncompyle2. I gave a talk on this at BlackHat Asia 2024 . Introduction...