SMShell

SMShell PoC for an SMS-based shell. Send commands and receive responses over SMS from mobile broadband capable computers. This tool came as an insipiration during a research on eSIM security implications led by Markus Vervier, presented at Offensivecon 2023 Disclaimer This is not a complete C2 bu...

CVE-2024-57553

creationtimestamp| type| source ---|---|--- 2026-09-05 01:00:04+00:00| seen| Telegram/saF7t8033F3RaGsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4 2026-09-06 00:01:03+00:00| seen| Telegram/saF7t8033F3RaGsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4...

RTFM

RTFM RTFM. Copyright © 2013 de Ben Clark Todos los derechos reservados. Ninguna parte de esta obra puede reproducirse o transmitirse de ninguna forma ni por ningún medio, sin el permiso previo por escrito del titular de los derechos de autor. ISBN-10: 1494295504 ISBN-13: 9 7 8-1494295509 Editor...

arya

Arya - The Reverse YARA Arya is a unique tool that produces pseudo-malicious files meant to trigger YARA rules. You can think of it like a reverse YARA because it does exactly the opposite - it creates files that matches your rules. You can read more about Arya and how it works in our blog. Intro...

prowler

Prowler Prowler is a Network Vulnerability Scanner implemented on a Raspberry Pi Cluster, first developed during Singapore Infosec Community Hackathon - HackSmith v1.0. Capabilities Scan a network a particular subnet or a list of IP addresses for all IP addresses associated with active network...

Firefox-Security-Toolkit

Firefox Security Toolkit Una herramienta que transforma los navegadores Firefox en un conjunto de pruebas de penetración ¿Cómo? Descarga las extensiones más importantes y las instala en tu navegador. Las extensiones utilizadas han sido seleccionadas mediante una encuesta entre la comunidad de...

snmpwn

SNMPwn is an SNMPv3 user enumerator and attack tool. It is a legitimate security tool designed to be used by security professionals and penetration testers against hosts you have permission to test. It takes advantage of the fact that SNMPv3 systems will respond with "Unknown user name" when an...

routopsy

routopsy Routopsy is a toolkit built to attack often overlooked networking protocols. Routopsy currently supports attacks against Dynamic Routing Protocols DRP and First-Hop Redundancy Protocols FHRP. Most of the attacks currently implemented make use of a weaponised 'virtual router' as opposed t...

popeye

Popeye: Kubernetes Live Cluster Linter Popeye is a utility that scans live Kubernetes clusters and reports potential issues with deployed resources and configurations. As Kubernetes landscapes grows, it is becoming a challenge for a human to track the slew of manifests and policies that orchestra...

slicer

Slicer A tool to automate the recon process on an APK file. Slicer accepts a path to an extracted APK file and then returns all the activities, receivers, and services which are exported and have null permissions and can be externally provoked. Note : The APK has to be extracted via jadx or...

attack-surface-framework

Attack Surface Framework Overview ASF aims to protect organizations acting as an attack surface watchdog, provided an “Object” which might be a: Domain, IP address or CIDR Internal or External, ASF will discover assets/subdomains, enumerate their ports and services, track deltas and serve as a...

hawk

Hawk Documentation and Resources Visit hawkforensics.io for comprehensive documentation including: Detailed installation and permissions guides Step-by-step tutorials and "How to" videos Troubleshooting help Best practices and usage examples What is Hawk? Hawk is a free, open-source PowerShell...

ved-ebpf

VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF VED Vault Exploit Defense-eBPF leverages eBPF extended Berkeley Packet Filter to implement runtime kernel security monitoring and exploit detection for Linux systems. Introduction eBPF is an in-kernel virtual machine that allows code...

Chaya

Chaya Right To Privacy Chaya protects your privacy through steganography, cryptography and compression. It effectively encrypts your payloads using AES-256-GCM cryptography, embeds them using LSB-LPS steganography technique into images and compresses them using FLIF to evade detection by performi...

quiver

Quiver : Kali Linux के लिए एक मेटा-टूल Quiver शेल फ़ंक्शन का एक संगठित नामस्थान है जो आपके टर्मिनल में कमांड को पहले से भर देता है, जिससे आप नोट्स, कॉपी, पेस्ट, संपादन, और फिर से कॉपी-पेस्ट करने पर निर्भर नहीं रहते। Quiver आपको याद रखने में मदद करता है कि अपने हर टूल का उपयोग कैसे करें और उन्हें...

jsfinder

Features | Installation | Usage | Demo | TODOs| Contact jsFinder is a command-line tool written in Go that scans web pages to find JavaScript files linked in the HTML source code. It searches for any attribute that can contain a JavaScript file e.g., src, href, data-main, etc. and extracts the UR...

jsfinder

Características | Instalación | Uso | Demo | PENDIENTES| Contacto jsFinder es una herramienta de línea de comandos escrita en Go que escanea páginas web para encontrar archivos JavaScript enlazados en el código fuente HTML. Busca cualquier atributo que pueda contener un archivo JavaScript por...

linux-4.1.15_CVE-2018-5873

Lanzamiento del kernel de Linux 4.x http://kernel.org/ Estas son las notas de la versión 4 de Linux. Léalas detenidamente, ya que le explican de qué se trata todo esto, cómo instalar el kernel y qué hacer si algo sale mal. ¿QUÉ ES LINUX? Linux es un clon del sistema operativo Unix, escrito desde...

uncaptcha

uncaptcha Defeating Google's audio reCaptcha system with 85% accuracy. Disclaimer unCaptcha is intended to be a proof of concept. As of the time of our paper, we found it to successfully solve reCaptcha's audio challenges with 85% success. Since that time, reCaptcha appears to include some...

sharesniffer

sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares:...