cookiemonster

🍪 CookieMonster CookieMonster is a command-line tool and API for decoding and modifying vulnerable session cookies from several different frameworks. It is designed to run in automation pipelines which must be able to efficiently process a large amount of these cookies to quickly discover...

SimpleEmailSpoofer

SimpleEmailSpoofer A few Python programs designed to help penetration testers with email spoofing. This Project is Retired Due to improvements in email protections and anti-spam techniques, it is no longer effective to attempt to spoof emails simply because they do not have a proper DMARC record ...

essential-addons-for-elementor-xss-poc

🔍 Essential Addons for Elementor XSS Vulnerability Detector 🚨 Critical Information This tool is for security research and patching purposes only. Do not use it to harm sites. If you find vulnerable sites, report them responsibly to site owners so they can update immediately. ⚠️ Vulnerability...

Gitmails

Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...

autotimeliner

AutoTimeliner Automagically extract forensic timeline from volatile memory dumps. AutoTimeliner runs multiple Volatility3 plugins against Windows, Linux, and macOS memory images, then merges their output into a single, sorted CSV timeline: Generic Timeline Plugin Plugin| What it captures ---|---...

kali-arm

Kali-ARM Build-Scripts Kali Linux ARM build-scripts. These are the same build scripts that we use to generate the pre-generated official Kali Linux ARM images, found here: https://www.kali.org/get-kali/ There are additional scripts included in this repository, supporting more devices, but these...

lanGhost

⚠️ Warning! This project is no longer maintained and may not work as excepted. A LAN dropbox chatbot controllable via Telegram features: installation: warning: lanGhost is designed for Raspberry Pis Raspbian /Kali for RPi. Running it on other/desktop distros could cause issues and may not work as...

ScrapPY

🐕 ScrapPY: PDF Scraping Made Easy ScrapPY is a Python utility for scraping manuals, documents, and other sensitive PDFs to generate targeted wordlists that can be utilized by offensive security tools to perform brute force, forced browsing, and dictionary attacks. ScrapPY performs word frequency,...

CVE-2024-9474

PAN-OS CVE-2024-0012 and CVE-2024-9474 Python script generated from the blog post : https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/?123 It's all described there My comment on X : https://x.com/k4nfr3/status/1858993646923903103 reverse shell...

threadtear

Threadtear Threadtear is a multifunctional deobfuscation tool for java. Android application support is coming soon Currently working on a dalvik to java converter. Suitable for easier code analysis without worrying too much about obfuscation. Even the most expensive obfuscators like ZKM or String...

CVE-2023-38545

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ This script is...

ReverseHttp

ReverseHttp Python backdoor that uses http post/get requests to communicate Requirement Python 2.7 Cherrypy pip install cherrypy Requests pip install requests Usage: Fireup the listener script then the controller then send the backdoor file and wait for connections Screenshot...

dnscat2-powershell

dnscat2 is a DNS covert channel tool by @iagox86 Ron Bowes which is used to transfer data over DNS requests. This is a powershell version of the dnscat2 C client. Click here for a blog post that gives a more detailed breakdown of the purpose of this script, and how to use it. To use this script,...

See-SURF

See-SURF Security scanner now powered with AI 🤖 to find potential Server Side Request Forgery SSRF parameters in your web application. See-SURF not only helps you detect potential SSRF parameters but also helps you validate it, protecting your application with system and user data compromise. 🎓...

node9-proxy

🛡️ node9 Access control for AI agents Your AI agents can reach Slack, GitHub, email, and your database. node9 decides what they may do with each one. Credential jail · secrets and PII · destructive git, SQL and shell held for review · MCP tool pinning · network egress allowlist · loop breaker · on...

wave-share

wave-share A proof-of-concept for WebRTC signaling using sound. Works with all devices that have microphone + speakers. Runs in the browser. Nearby devices negotiate the WebRTC connection by exchanging the necessary Session Description Protocol SDP data via a sequence of audio tones. Upon...

InfoLeak-Scanner

InfoLeak-Scanner Docker First run docker run --rm -p 8000:80 siwecos/infoleak-scanner. Open your browser and use the scanner: http://localhost/?url= Install Get php5, curl and a webserver: sudo apt-get install apache2 php5 php5-curl Copy application into webserver: cp -R . /var/www/html/ What?...

pgpdump

pgpdump: a PGP packet visualizer Kazu Yamamoto [email protected] August 16, 2010 Overview pgpdump is a PGP packet visualizer which displays the packet format of OpenPGP RFC 4880 and PGP version 2 RFC 1991. Here is an example: % pgpdump test/sig1 Old: Marker Packettag 103 bytes String -...

dumpulator

dumpulator Note: This is a work-in-progress prototype, please treat it as such. Pull requests are welcome! You can get your feet wet withgood first issues An easy-to-use library for emulating code in minidump files. Here are some links to posts/videos using dumpulator: Introduction video with...

cve-2022-41352-zimbra-rce

CVE-2022-41352 Zimbra Unauthenticated RCE CVE-2022-41352 is an arbitrary file write vulnerability in Zimbra mail servers due to the use of a vulnerable cpio version. CVE-2022-41352 NIST.gov CVE-2022-41352 Rapid7 Analysis AffectedZimbra versions: Zimbra 9.0.0.p27 Zimbra 8.8.15.p34 Refer to the pat...