52291 matches found
vsaudit
vsaudit This is an opensource tool to perform attacks to general voip services It allows to scans the whole network or single host to do the gathering phase, then it is able to search for most known vulnerabilities on the founds alive hosts and try to exploit them. Install dependencies To start...
asf__cxf_CVE-2016-6812_3-0-11
Welcome to Apache CXF! Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of...
poc_proxylogon
pocproxylogon Microsoft Exchange ProxyLogon PoC CVE-2021-26855 This is script was originaly made by celesian to exploit this CVE. Then i updated it to exploit an exchange server vulnerable to SSRF but it got a Shell exploiting the EWS feature, because a client company patched it's exchange server...
norimaci
Norimaci "Norimaci" is a simple and lightweight malware analysis sandbox for macOS. This tool was inspired by "Noriben". Norimaci uses the features of OpenBSM or Monitor.app to monitor macOS system activity instead of Sysinternals Process Monitor procmon. Norimaci consists of 3 Python scripts...
MSSQL-Analysis-Coerce
MSSQL Analysis Services - Coerced Authentication A technique to coerce a Windows SQL Server to authenticate on an arbitrary machine. This proof of concept is co-authored by : Podalirius: Worty: Proof of concept In order to trigger the authentification as the local machine account, we need to...
xtor
xtor Python library for managing Tor instances programmatically. Features Launch new Tor processes or connect to existing ones Pre-configured httpx clients sync + async with SOCKS5 proxy Identity rotation with optional wait-for-new-IP Stream isolation for traffic separation Circuit and stream...
capsulecorp-pentest
Blog Twitter: Discord: Book: 1. Capsulecorp Pentest The Capsulecorp Pentest is a small virtual network managed by Vagrant and Ansible. It contains five virtual machines, including one Linux attacking system running Xubuntu and 4 Windows 2019 servers configured with various vulnerable services...
CVE-2019-6340
Drupal Drupal 8.6.x RCE Exploit exploit CVE: CVE-2019-6340 CMS: Drupal CMS Version: Drupal 8.6.x tested condition: -Drupal 8.6.x, 8.6.10 OR Drupal 8.5.11 -RESTful Web Services module is enabled...
sap_bo_launchpad-ssrf-timing_attack
SAP BusinessObjects Launchpad SSRF & Timing Attack PoC This Python script is a proof-of-concept PoC for executing SSRF Server-Side Request Forgery and Timing Attacks against SAP BusinessObjects Launchpad. It is designed to help security researchers and professionals identify open ports on a targe...
martian
Martian Proxy Martian Proxy is a programmable HTTP proxy designed to be used for testing. Martian is a great tool to use if you want to: Verify that all or some subset of requests are secure Mock external services at the network layer Inject headers, modify cookies or perform other mutations of...
Hijack-service-binaries
Hijack-service-binaries A PowerShell security auditing tool that identifies Windows service binaries that can be modified by the current user—a potential privilege escalation vector. Overview This script scans all Windows services except system32 and svchost and checks if the current user has...
CVE-2021-46702
CVE-2021-46702 Description: Tor Browser 9.0.7 on Windows 10 build 10586 is vulnerable to information disclosure. This could allow local attackers to bypass the intended anonymity feature and obtain information regarding the onion services visited by a local user. This can be accomplished by...
skylift
SkyLift V0.4 Will be posted June 15 python3 click easier to use CLI parser workflow fix timestamp SkyLift V0.3 SkyLift is a low-cost geolocation spoofing device. It currently uses the ESP8266 to broadcast WiFi Beacon Frames to exploit a longstanding 2008 vulnerability in WiFi geolocation services...
CVE-2024-54330
CVE-2024-54330 Hurrakify bfdibc85r04ky96cie05dfzjjgigz...
CVE-2023-34468-PoC
CVE-2023-34468 PoC for Apache NiFi Educational proof-of-concept PoC for CVE-2023-34468 affecting Apache NiFi versions prior to 1.22.0. This repository demonstrates how abuse of H2 JDBC URL configuration can lead to authenticated remote code execution RCE in vulnerable Apache NiFi installations...
CVE-2019-0708
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction...
Wincrash
Wincrash I'm not responsible for what you use this to accomplish and should only be used for education purposes. CVE-2019-0708 - when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution...
PKINITtools
PKINIT tools This repository contains some utilities for playing with PKINIT and certificates. The tools are built on minikerberos and impacket. Accompanying blogpost with more context: https://dirkjanm.io/ntlm-relaying-to-ad-certificate-services/ Installation These tools are only compatible with...
spring-data-rest-CVE-2017-8046
image:https://spring.io/badges/spring-data-rest/ga.svgSpring Data REST, link="http://projects.spring.io/spring-data-rest/quick-start" image:https://spring.io/badges/spring-data-rest/snapshot.svgSpring Data REST, link="http://projects.spring.io/spring-data-rest/quick-start" = Spring Data REST The...