224431 matches found
refinery
Binary Refinery docs tests codecov pypi High Octane Triage Analysis || || || || || | / / / \ || ==||=====|| | / |/ \ /==| / \ ===| '======|| | \ | | \ | \ /| | || || /||/ / | | | || =========''====/=========/ /==||=====||======' \ / / Binary Refinery™ es una colección de scripts de Python que...
CVE-2026-45321-Tanstack
Simulación de Ataque a la Cadena de Suministro — CVE-2026-45321 TanStack Laboratorio educativo para comprender los ataques a la cadena de suministro de npm, el abuso de CI/CD y la ejecución de código en el momento de la instalación. Descargo de responsabilidad Este proyecto se crea únicamente par...
PT-ToolKit
PT-ToolKit Exploits, Powershell Scripts, Executables that are useful during Penetration-Testing or Red Team engagement Most of the Tools and Script are aimed to Active-Directory environment and windows platfform Table of Contents Exploits PowerShell-Scripts Windows-Binary Exploits: Some exploits...
WMIExec
WMIexec 一组Python脚本，通过WMI协议以不同方式执行命令。 博客文章 https://whiteknightlabs.com/2023/06/26/navigating-stealthy-wmi-lateral-movement/ 使用方法 wmiexecscheduledjob.py 是一个Python脚本，通过计划任务认证到远程WMI实例并执行命令。 运行脚本： python3 wmiexecscheduledjob.py -i -u -p -c wmiexecwin32process.py...
Shellshock_vuln_Exploit
🚨 Exploit RCE de Shellshock CVE-2014-6271 Este es un exploit en Python para la vulnerabilidad Shellshock CVE-2014-6271, que afecta a GNU Bash. El exploit apunta a scripts CGI en servidores web vulnerables y establece una shell reversa a la máquina del atacante. ID de CVE CVE-2014-6271 Aviso legal...
gitbleed_tools
GitBleed Tools - for extracting data from mirrorred git repositories About This repo contains shell scripts that can be used to download and analyze differences between cloned and mirror Git repositories. For more information about the underlying quirk in Git behavior, please visit read our blog...
htrace.sh
Description htrace.sh is a shell script for http/https troubleshooting and profiling. It's also a simple wrapper around several open source security tools. For a more detailed understanding of htrace.sh, its parameters, functions and how it all works, run htrace.sh --examples or see the Wiki...
AD_Enumeration_Hunt
ADEnumerationHunt 描述 欢迎使用AD渗透测试工具包！该仓库包含一系列PowerShell脚本和命令，可用于Active Directory（AD）渗透测试和安全评估。脚本涵盖AD枚举、用户和组管理、计算机枚举、网络与安全分析等多个方面。 本工具包旨在供渗透测试人员、红队成员以及希望测试和评估Active Directory环境安全性的安全专业人员使用。在生产环境中使用这些脚本之前，请确保您已获得适当的授权和权限。 每个人都在看你所看的；但每个人都能看到他所能看到的吗？你才是他们之间唯一的区别…… ——梅夫拉纳·杰拉莱丁·鲁米 功能特性...
bad_ducky
Bad Ducky 概述 Bad Ducky 是另一个 Rubber Ducky 克隆。它基于 CJMCU BadUsb（ATMEGA32u4 - Arduino Leonardo 克隆）板，带有板载读卡器，你可以在 eBay 或 aliexpress 上购买。我的目标是创建一个与 Rubber Ducky 脚本兼容，同时能够轻松选择要执行的脚本而无需修改硬件（无需添加 DIP 开关）的东西。 这个有什么特别之处？ 完全兼容 Rubber Ducky 脚本（支持所有命令） 脚本无需编译/编码 有效载荷大小无限制（唯一限制是 SD 卡大小） 它有两种操作模式（连续交付和一次性交付）...
boofuzz
.. image:: https://github.com/jtpereyda/boofuzz/raw/master/artwork/boo-logo-dark.svg :width: 60% :alt: boofuzz logo boofuzz: Network Protocol Fuzzing for Humans .. image:: https://github.com/jtpereyda/boofuzz/actions/workflows/test.yml/badge.svg?branch=master :target:...
easy_triage
easytriage Diversos scripts para triaje de sistemas comprometidos Linux, ESXi, FreeBSD/NetScaler...
sharesniffer
sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares: pyth...
mad-metasploit
Metasploit custom modules, plugins, resource script and.. awesome metasploit collection https://www.hahwul.com/p/mad-metasploit.html Awesome open awesome.md Add mad-metasploit to metasploit framework 1. config your metasploit-framework directory $ vim config/config.rb $metasploitpath =...
mad-metasploit
Metasploit 自定义模块、插件、资源脚本以及……超棒的 metasploit 合集 https://www.hahwul.com/p/mad-metasploit.html 精彩内容 打开 awesome.md 将 mad-metasploit 添加到 Metasploit 框架 1. 配置你的 metasploit-framework 目录 $ vim config/config.rb $metasploitpath = '/opt/metasploit-framework/embedded/framework/' /usr/share/metasploit-framework...
ghostrings
Ghostrings Scripts for recovering string definitions in Go binaries with P-Code analysis. Tested with x86, x86-64, ARM, and ARM64. Scripts Golang These can be found in the Golang category in the Script Manager. GoDynamicStrings.java Analyzes P-Code to find string structures created on the stack...
python-pentesting
渗透测试人员的Python 概述 对于渗透测试和红队参与，开始使用Python相当容易！这个仓库只是一个随机脚本的小集合，帮助你入门。 由以下机构提供： 示例：由Mike Felch @ustayready和Joff Thyer @joffthyer提供 此代码纯粹用于教育目的。 pivotwinrm.py: 展示如何使用Python与winrm在远程机器上执行命令 cloudawss3.py: 搜索AWS S3桶中是否存在敏感文件名 cloudawssecrets.py: 转储AWS Secrets Manager中的所有秘密 cloudazuread.py: 转储AzureAD用户...
Threat-Remediation-Scripts
Introduction Since 2021, I have developed a number of scripts to assist me with my investigations and remediation efforts. I figured, why not share them to the public, in hopes it helps you. How do these scripts work? The scripts I developed are intended to work with Crowdstrike Endpoint Detectio...
CVE-2023-23397
CVE-2023-23397 Patch for MS Outlook Critical Vulnerability - CVSS 9.8 3 PowerShell scripts are included in the Patch folder. If your patch management software uses an evaluation and a remediation script, use the respective files/scripts. The All In One script will evaluate the current version of...
yeti
Yeti Platform Yeti aims to bridge the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline for DFIR teams. It was born out of frustration of having to answer the question "where have I seen this artifact before?" or "how do I search for IOCs related t...