CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS

CVE-2021-27190 - PEEL Shopping, eCommerce shopping cart - Stored Cross-Site Scripting Vulnerability in 'Address' Date 2021-02-11 Exploit Author Anmol K Sachan Vendor Homepage https://www.peel.fr/ Software Link https://www.peel.fr/nos-offres-1/peel-shopping-31.html...

AzureHound

AzureHound El recopilador de datos de BloodHound para Microsoft Azure Obtener AzureHound Binarios de lanzamiento Descarga el binario adecuado para tu plataforma desde uno de nuestros Lanzamientos. Lanzamiento continuo El lanzamiento continuo contiene binarios precompilados que se mantienen...

CVE-2022-1329-WordPress-Elementor-RCE

CVE-2022-1329-WordPress-Elementor-RCE Este PoC está basado en el de AkuCyberSec. 中文版本 Uso Usa docker-compose para iniciar el entorno vulnerable: docker-compose up -d Luego puedes acceder a la página de administración de WordPress con la URL http://localhost:8000. Registra el usuario administrador...

GhidrAssist

GhidrAssist Author: Jason Tang An advanced LLM-powered plugin for interactive reverse engineering assistance in Ghidra. Description GhidrAssist integrates Large Language Models LLMs into Ghidra to provide intelligent assistance for binary exploration and reverse engineering. It supports any OpenA...

Keylogger

Inputs To Mail. Get Keyboard,Mouse,ScreenShot,Microphone Inputs and Send to your Mail. Purpose of the project is testing the security of information systems INSTALLATION You don't need to do anything for installation just run the script USAGE •Create an account on "https://mailtrap.io/" using a...

Slackor

Slackor Maintained at https://github.com/n00py/Slackor A Golang implant that uses Slack as a command and control channel. This project was inspired by Gcat and Twittor. This tool is released as a proof of concept. Be sure to read and understand the Slack App Developer Policy before creating any...

Panoptic

Panoptic Panoptic is an open source penetration testing tool that automates the search and retrieval of common log and config files through path traversal vulnerabilities. Features Async concurrent scanning with configurable worker pool --concurrency Automatic discovery of common log and...

cryptovenom

CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...

Labtainers

Labtainers: Un framework de laboratorio cibernético basado en Docker Labtainers incluye más de 50 ejercicios de laboratorio cibernético y herramientas para crear los tuyos propios. Importa una única VM appliance o instálalo en un sistema Linux y tus estudiantes habrán terminado con el...

Incident-Response-Powershell

Powershell Digital Forensics & Incident Response This repository provides PowerShell-based Incident Response scripts. DFIR Script The DFIR-Script.ps1 script collects forensic artifacts on Windows devices. Key features include: Collecting over 25 potential indicators of compromise. CSV-based expor...

CVE-2020-13942

CVE-2020-13942 Ejecute httpx o httprob en los objetivos antes de usar el script. USO ./CVE-2020-13942.sh target.txt Crédito Este script fue creado a partir del repositorio de Rohit Gautam...

ProtOSINT

ProtOSINT ProtOSINT is a Python script that helps you investigate Proton Mail accounts. Version This is ProtOSINT v2. The first version has been around for a few years, but Proton's API changed and the old checks stopped working, so this is a rewrite that brings the tool back to life. Big thanks ...

DumpBrowserSecrets

DumpBrowserSecrets Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from modern Chromium-based and Gecko-based browsers Chrome, Microsoft Edge, Firefox, Opera, Opera GX, and Vivaldi. Quick Links Maldev...

WhatsApp-OSINT

WHATS OSINT 🕵️‍♂️ Herramienta OSINT para WhatsApp que permite obtener fotos de perfil, verificar cuentas Business, consultar estado e información de usuario, analizar dispositivos vinculados, revisar ajustes de privacidad y acceder a datos completos mediante la API WhatsApp OSINT de RapidAPI...

AwesomeXSS

AwesomeXSS This repository is a collection of Awesome XSS resources. Contributions are welcome and should be submitted via an issue. Awesome contents Challenges Reads & Presentations Tools Mind maps DOM XSS Payloads Polyglots Tags and event handlers Context breaking HTML context Attribute context...

cve-2024-0230-blue

cve-2024-0230-blue Script auxiliar para la prueba de concepto PoC de CVE-2024-0230 Bluetooth git clone https://github.com/keldnorman/cve-2024-0230-blue cd cve-2024-0230-blue chmod +x poc.sh sudo ./poc.sh...

JShunter

JSHunter Professional JavaScript Security Analysis Tool Complete endpoint discovery, sensitive data detection, and advanced code analysis for security professionals About JSHunter is a comprehensive command-line tool for JavaScript security analysis and endpoint discovery. Built for security...

external_expat_AOSP10_r33_CVE-2022-23852

Expat, versión 2.2.6 Esto es Expat, una biblioteca en C para el análisis de XML, iniciada por James Clark en 1997. Expat es un analizador de XML orientado a flujo. Esto significa que usted registra manejadores con el analizador antes de comenzar el análisis. Estos manejadores se invocan cuando el...

Empire

Empire Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers. The Empire server is written in Python 3 and is modular to allow operator flexibility. Empire comes built-in with a client that can be used remotely to access the server...

Loki

🧙‍♂️ Loki Command & Control Loki is a stage-1 command and control C2 framework written in Node.js, built to script-jack vulnerable Electron apps MITRE ATT&CK T1218.015. Developed for red team operations, Loki enables evasion of security software and bypasses application controls by exploiting...