TrueTree

TrueTree About Read all about the TrueTree concept here TrueTree is more than just a pstree command for macOS. It is used to display a process tree for current running processes while using a hierarchy built on additoinal pids that can be collected from the operating system. The standard process...

CISCO-CVE-2020-3452-Scanner-Exploiter

CISCO CVE-2020-3452 Scanner & Exploiter It will scan the target servers from shodan and then find the vulnerable servers to CVE-2020-3452 Cisco Adaptive Security Appliance and FTD Unauthorized Remote File Reading. About A vulnerability in the web services interface of Cisco Adaptive Security...

nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

serverless-prey

Puma Security Serverless Prey Serverless Prey is a collection of serverless functions FaaS, that, once launched to a cloud environment and invoked, establish a TCP reverse shell, enabling the user to introspect the underlying container: Panther: AWS Lambda written in Node.js Cougar: Azure Functio...

PKINITtools

PKINIT tools This repository contains some utilities for playing with PKINIT and certificates. The tools are built on minikerberos and impacket. Accompanying blogpost with more context: https://dirkjanm.io/ntlm-relaying-to-ad-certificate-services/ Installation These tools are only compatible with...

terminalphone

TerminalPhone Encrypted push-to-talk voice communication over Tor hidden services. TerminalPhone is a single, self-contained Bash script that provides anonymous, end-to-end encrypted voice and text communication between two or more parties over the Tor network. It operates as a walkie-talkie: you...

pybatfish

Got questions, feedback, or feature requests? Join our community onSlack! Pybatfish Pybatfish is a Python client for Batfish. What is Batfish? Batfish is a network validation tool that provides correctness guarantees for security, reliability, and compliance by analyzing the configuration of...

dracon-utilities

Dracon Utilities Three small Rust CLI tools that look after a Linux development machine: one keeps your git repos committed and backed up, one keeps your disk and memory from falling over, and one stops secrets from landing in your git history. They run as ordinary user-level systemd services — n...

tor-rootkit

tor-rootkit A Python 3 standalone Windows 10 / Linux Rootkit. The networking communication get's established over the tor network. This rootkit is WIP. Disclaimer Use for educational purposes only. How to use 1. Clone the repo and change directory: root@kitploit: git clone...

Remote-Desktop-Services-Remote-Code-Execution-Vulnerability-CVE-2019-0708-

Remote-Desktop-Services-Remote-Code-Execution-Vulnerability-CVE-2019-0708- rce exploit , made to work with pocsuite3 https://github.com/knownsec/pocsuite3 install the pocsuite 3 from above link. If you have any issues ,please contact knownsec-404 team Do not open any issues here as this is not mi...

rpcfirewall

I Need More Information Check out our RPC Firewall blog post or our BlackHat talk to gain better understanding of RPC, RPC attacks, and the solution: RPC Firewall. Join our |Zero| Labs Slack Community workspace for any questions, issues, or simply to shout out. We would love to hear from you also...

Persistnux

Persistnux A comprehensive Linux persistence detection tool for Digital Forensics and Incident Response DFIR investigations. Overview Persistnux is a bash-based tool designed to identify known Linux persistence mechanisms used by attackers to maintain access to compromised systems. It performs...

Onionscan

onionscan deployment note! this repo is a patched version of https://github.com/s-rah/onionscan and is designed to be run from a google cloud shell from hunchly at https://github.com/hunchly/funchly/tree/main/onionscan which has been used as the baseline and modified to also be able to deploy on ...

Cisco-ASA-FTD-Web-Services-Traversal

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Path Traversal Vulnerability CVE-2020-3452 Usage: CVE-2020-3452.py https://target Vulnerability description: A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Softwar...

Telstra-Cybersecurity-Virtual-Experience-

Telstra-Cybersecurity-Virtual-Experience-Program I participated in Telstra's Security Operations Centre as an Information Security Analyst to gain first-hand experience of the daily tasks and responsibilities of a Security Analyst at Telstra. The tasks carried out: 1. Triaged a malware attack...

beelzebub

Beelzebub Deception Runtime Framework Beelzebub is an open-source deception runtime that deploys adaptive, LLM-powered decoy services across SSH, HTTP, TCP, TELNET, and MCP protocols. It goes beyond passive honeypots by actively engaging attackers in realistic interactions, collecting high-fideli...

h8mail

h8mail is an email OSINT and breach hunting tool using different breach and reconnaissance services, or local breaches such as Troy Hunt's "Collection1" and the infamous "Breach Compilation" torrent. 📖 Table of Content Table of Content Features APIs Usage Usage examples Thanks & Credits Related...

awesome-privacy

A curated list of privacy-respecting apps, software, and providers 🌐 awesome-privacy.xyz CodeBerg Mirror | Submit an Addition | Raw data & API Intro Large data-hungry corporations dominate the digital world but with little, or no respect for your privacy. Migrating to open-source applications wit...

power-pwn

Maintained by: Secure AI Agents Everywhere. Overview Power Pwn is an offensive and defensive security toolset for Microsoft 365 Power Platform and AI services. Key Features, among others: 💾 PowerDump : Comprehensive tenant scanning and data collection 🚪 BackDoor : Deploy backdoor flows for...

norimaci

Norimaci "Norimaci" is a simple and lightweight malware analysis sandbox for macOS. This tool was inspired by "Noriben". Norimaci uses the features of OpenBSM or Monitor.app to monitor macOS system activity instead of Sysinternals Process Monitor procmon. Norimaci consists of 3 Python scripts...