AzureAD-Attack-Defense

Attack and Defense Playbook for Microsoft Entra This publication is a collection of various common attack scenarios on Microsoft Entra and how they can be mitigated or detected. All of the included scenarios, insights and comments are based on experiences from the contributors during their attack...

cve-2023-43208-poc

Mirth Connect PoC Script Simple Python script for security research related to Mirth Connect vulnerabilities. Important Use this project only on systems you own or have explicit written permission to test. Unauthorized testing is illegal. Files exploit.py — main script Requirements Python 3.9+...

flumberboozle

flumberboozle Suite of programs meant to aid in bug hunting and security assessments Why this weird name? Just because I heard it first here so I thought this meaningless word would be fitting name of a repository I don't know what I'm going to do with. Contents This repository contains scripts...

PurpleLlama

🤗 Models on Hugging Face | Blog | Website | CyberSec Eval Paper | Llama Guard Paper Purple Llama Purple Llama is an umbrella project that over time will bring together tools and evals to help the community build responsibly with open generative AI models. The initial release will include tools an...

maritime-security-paper

Maritime Security Research Paper Comprehensive research on security vulnerabilities in autonomous maritime vessels and defense recommendations 📄 Overview This repository contains the complete maritime security research paper, documentation, and supplementary materials for academic publication and...

wfuzz

Wfuzz - The Web Fuzzer Wfuzz has been created to facilitate the task in web applications assessments and it is based on a simple concept: it replaces any reference to the FUZZ keyword by the value of a given payload. A payload in Wfuzz is a source of data. This simple concept allows any input to ...

kube-beacon

Kube-Beacon Project Scan your kubernetes runtime !! Kube-Beacon is an open source audit scanner who perform audit check on a deployed kubernetes cluster and output a security report. The audit tests are the full implementation of CIS Kubernetes Benchmark specification NEW !! audit result now can ...

dcpwn

dcpwn an impacket-dependent script exploiting CVE-2019-1040, with code partly borrowed from those security researchers that I'd like to say thanks to. by taking a closer look you'll find the very technique for utilising the vulnerability slightly different to what common belief is...

Damn-Vulnerable-Drone

Damn Vulnerable Drone The Damn Vulnerable Drone is an intentionally vulnerable drone hacking simulator based on the popular ArduPilot/MAVLink architecture, providing a realistic environment for hands-on drone hacking. Table of Contents About the Damn Vulnerable Drone What is the Damn Vulnerable...

CVE-2024-32002-hook

This repository does not have a README...

decider

Decider This work is licensed under a Creative Commons Attribution 4.0 International License. This project makes use of MITRE ATT&CK® - ATT&CK Terms of Use. 📰 3.0.0 - Kiosk is Here Decider is now login-less and responsive. Content updates have been simplified to copying files and restarting Docke...

fuckshell

Fuckshell Simple Webshell Scanner. Using, defined files with dictionary!...

tfc

Tinfoil Chat Tinfoil Chat TFC is a FOSS+FHD peer-to-peer messaging system that relies on high assurance hardware architecture to protect users from passive collection, MITM attacks and most importantly, remote key exfiltration. TFC is designed for people with one of the most complex threat models...

OLIMPOX Authentication Bypass

The vulnerability of the “OLIMPOX” training and control system’s software is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

Realtek RTL8762C Information Disclosure

The vulnerability of the embedded energy-independent single-write eFUSE memory in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to the fact that power is turned on before the access control mechanism is activated. Exploiting this vulnerability can allow a hacker to...

Realtek RTL8762C SWD Information Disclosure

The vulnerability of the Serial Wire Debug SWD interface in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to improper protection against voltage and clock failures. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions and...

remote-method-guesser

Remote Method Guesser remote-method-guesser rmg is a Java RMI vulnerability scanner and can be used to identify and verify common security vulnerabilities on Java RMI endpoints. remote-method-guesser was presented at Black Hat USA2021 within the Arsenal sessions. The recording of the session and...

ClamAV Insufficient Validation

The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

ClamAV Insufficient Validation

The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

ClamAV Insufficient Validation

The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...