4003 matches found
ransomware-simulator
QuickBuck - Ransomware Simulator / \ / / / / / / // // // // // // '// |/ // // // '/ \\,/// ///\// ,/ ///\ Nextron Systems GmbH The goal of this repository is to provide a simple, harmless way to check your AV's protection on ransomware. This tool simulates typical ransomware behaviour,...
scopeblind-gateway
⚠️ This repository has moved. Active development continues at ScopeBlind/scopeblind-gateway. This personal fork may be behind the canonical repository. Please use the org repo for issues, pull requests, and the latest code. protect-mcp Security gateway for MCP servers. Shadow-mode logs by default,...
CVE-2024-24919_POC
CVE-2024-24919POC It's Proof of Concept on CVE-2024-24919-POC , i made it after it's discoverd CVE-2024-24919 Checkpoint security gateway information disclosure vulnerability . U can see it in Notion-CVE-2024-24919POC Shodan dork: title:"Check Point" "Server: Check Point SVN" "X-UA-Compatible:...
cve-2021-45043
cve-2021-45043 HD-Network Real-time Monitoring System 2.0 allows ../ directory traversal to read /etc/shadow via the /language/lang sLanguage parameter. initial post https://cyberguy0xd1.medium.com/my-cve-2021-45043-lfi-write-up-441dad30dd7f exploiting via burp GET /language/lang HTTP/1.1 Host:...
shadow
shadow-rs 🦀 shadow-rs is a Windows kernel rootkit written in Rust, demonstrating advanced techniques for kernel manipulation while leveraging Rust’s safety and performance features. This project is intended for educational and research purposes. Table of Contents Notice Features Installation...
CVE-2024-24919
CVE-2024-24919 nuclei template of CVE-2024-24919 This template will help detect the described vulnerability by checking if the system leaks the contents of the /etc/shadow file...
SAMDump
SAMDump Extrait les fichiers SAM et SYSTEM de Windows en utilisant le service de cliché instantané de volume VSS avec plusieurs options d'exfiltration et d'obfuscation XOR : Liste les clichés instantanés de volume à l'aide de VSS et en crée un si nécessaire Extrait les fichiers SAM et SYSTEM du...
CVE-2021-36934
CVE-2021-36934 CVE-2021-36934 PowerShell scripts Detection.ps1 This is a quick and dirty script to see if a machine may be vulnerable. It writes out a message to the shell indicating if BUILTIN\Users was detected in the permission list and includes the current permissions on the SAM path for...
doublepulsar-detection-script
Author: Luke Jennings [email protected] - @jukelennings Company: Countercept @countercept Website: https://countercept.com A set of python2 scripts for sweeping a list of IPs for the presence of both SMB and RDP versions of the DOUBLEPULSAR implant that was released by the Shadow Brokers...
red-shadow
Red-Shadow Lightspin AWS IAM Scanner de vulnérabilités Description Analysez votre configuration AWS IAM à la recherche d'administrateurs fantômes dans AWS IAM basés sur des politiques de refus mal configurées n'affectant pas les utilisateurs dans les groupes, découvertes par l'équipe de recherche...
CVE-2021-36934
CVE-2021-36934 CVE-2021-36934 HiveNightmare vulnerability checker and workaround Flow The script has the following flow: Requires it to run with Administrator privileges Check Windows 10 version is affected by the vulnerability. IF affected by vulnerability: Show Windows version may be affected b...
KrbRelay
KrbRelay Relaying 3-headed dogs. More details at https://googleprojectzero.blogspot.com/2021/10/windows-exploitation-tricks-relaying.html and https://googleprojectzero.blogspot.com/2021/10/using-kerberos-for-authentication-relay.html This should be working on most fully patched Windows systems...
libvshadow
libvshadow — это библиотека для доступа к формату Volume Shadow Snapshot VSS. Формат VSS используется Windows, начиная с Vista, для поддержания копий данных на томе запоминающего носителя. Информация о проекте: Статус: alpha Лицензия: LGPL-3.0-or-later См. также: OSDFC 2012: Статья - Windowless...
detect-CVE-2019-15107-by-pyshark
detect-CVE-2019-15107-by-pyshark I. Overview of CVE-2019-15107 Webmin is a web-based interface for system administration for Unix. Using any web browser, you can set up user accounts, Apache, DNS, file sharing, and more. On August 10, 2019, Turkish cybersecurity researcher Özkan Mustafa Akkuş...
DCSYNCMonitor
DCSYNCMonitor Description This tool is an application/service that can be deployed on Domain controllers to alert on Domain Controller Syncronization attempts. When an attempt is detected, the tool will write an event to the Windows Event Log. These events can be correlated in a SIEM. In addition...
shadow
shadow :: De Mysteriis Dom jemalloc shadow is a jemalloc heap exploitation framework. It has been designed to be agnostic of the target application that uses jemalloc as its heap allocator be it Android's libc, Firefox, FreeBSD's libc, standalone jemalloc, or whatever else. The current version 2....
noir
Chassez chaque point de terminaison dans votre code, exposez les Shadow APIs, cartographiez la surface d'attaque. Documentation • Installation • Utilisation • Contribuer • Changelog Noir est un outil SAST qui lit le code source et extrait les points de terminaison qu'une application expose —...
Whisker
Whisker Whisker is a C tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account. This tool is based on code from DSInternals by Michael Grafnetter @MGrafnetter. For this...
smbexec
smbexec A rapid psexec style attack with samba tools Original Concept and Script by Brav0Hax & PureHate Ported to ruby and modified by Smilingraccoon and Zeknox Codename - Machiavellian Written because we got sick of Metasploit PSExec getting popped Special thanks to Carnal0wnage who's blog...