Change-Lockscreen

Change-Lockscreen Change-Lockscreen is a tool to trigger network authentications as SYSTEM by changing the Windows lock screen image from the command line to perform privilege escalation attacks such as the one described in the post linked below:...

redis-poc

Redis Authenticated RCE stream NACK double free, TDigest & TopK module bugs Non-destructive RCE exploits for Redis 6.2.22, 7.4.9, 8.6.4 via the stream consumer-group shared-NACK double free a patch bypass of CVE-2026-25243, 8.8.0 via a TDigest heap-overflow in bundled RedisBloom, and 8.8.1 via a...

FluxER

🔒 FluxER Fluxion Easy Runner for Termux Automated installer and launcher for Fluxion - a wireless security auditing toolkit for WPA/WPA2 testing and network analysis in Termux environments. 🎯 Features Automated Setup : One-command installation of Ubuntu proot and Fluxion Optimized for Termux :...

ssh-tpm-agent

SSH agent for TPM ssh-tpm-agent is a ssh-agent compatible agent that allows keys to be created by the Trusted Platform Module TPM for authentication towards ssh servers. TPM sealed keys are private keys created inside the Trusted Platform Module TPM and sealed in .tpm suffixed files. They are bou...

hashcobra

hashcobra hashcobra Hash Cracking tool. Description This tool uses a new method to crack hashes. With the help of rainbow tables concept this tool generates rainbow tables from wordlists to heavily optimize the cracking process. Usage $ ./hashcobra -H --== hashcobra by sepehrdad ==-- usage:...

sharingan

Sharingan Sharingan is a recon multitool for offensive security / bug bounty WIP, will I ever finish? Who knows Cloning for development Outside of your gopath git clone https://github.com/leobeosab/sharingan Installing go get github.com/leobeosab/sharingan/cmd/sharingancli Dependencies NMap Go...

Dome

DOME - A subdomain enumeration tool Check the Spanish Version Dome is a fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports. This tool is recommended for bug bounty hunters and pentester in their reconnaissance phase. the more surfa...

Chaos-Rootkit

Chaos-Rootkit Chaos-Rootkit is an x64 Ring 0 rootkit i wrote to better understand kernel internals and rootkit techniques. Gui version Features Hide process: This feature allows you to hide processes from listing tools via DKOM. Elevate specific process privileges : This feature enables you to...

TOPAZ Metron PTS Time Synchronization Command Injection

The vulnerability of the TOPAZ Metron PTS time synchronization device is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to inject arbitrary OS commands...

Chaya

Chaya Right To Privacy Chaya protects your privacy through steganography, cryptography and compression. It effectively encrypts your payloads using AES-256-GCM cryptography, embeds them using LSB-LPS steganography technique into images and compresses them using FLIF to evade detection by performi...

ADSyncDump-BOF

ADSyncDump BOF The ADSyncDump BOF is a port of Dirkjan Mollema's adconnectdump.py / ADSyncDecrypt into a Beacon Object File BOF for use with Cobalt Strike, Sliver and Havoc. !NOTE The tool has been tested on a Windows Server 2019 with Azure AD Connect version 2.2.1.0. The 32 bit version of the BO...

fileintel

fileintel This is a tool used to collect various intelligence sources for a given file. Fileintel is written in a modular fashion so new intelligence sources can be easily added. Files are identified by file hash MD5, SHA1, SHA256. The output is in CSV format and sent to STDOUT so the data can be...

Test IT testing system Command Execution

The vulnerability of the Test IT testing system relates to the use of externally controlled input data for class selection. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

moukthar

Moukthar Remote adminitration tool for android Demo Features Permissions bypass android 12 below Keylogger Notifications listener SMS listener Phone call recording Image capturing and screenshots Video recording Persistence Read & write contacts List installed applications Download & upload files...

zi

Zi Manage your Zsh plugins, snippets, and command-line tools. Quick start · Documentation · Releases · Discussions Zi is the Z-Shell ecosystem's plugin manager, formerly known as zplugin and zinit. Features Responsive startup: defer plugin loading until after the first prompt with Turbo mode...

Platypus.js Auth Bypass Command Execution

The vulnerability of the Platypus.js platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Shwmae

Shwmae Shwmae shuh-my is a Windows Hello abuse tool that was released during DEF CON 32 as part of the Abusing Windows Hello Without a Severed Hand talk. The purpose of the tool is to abuse Windows Hello from a privileged user context. Shwmae Copyright C 2024 Shwmae enum Default Verb Enumerate...

raven

Raven Currently is not being maintained Raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin. Disclaimer Please do not use this program to do stupid things. The author does not keep any responsibility of...

ShellShockHunter

ShellShockHunter v1.0 It's a simple tool for test vulnerability shellshock Autor: MrCl0wn Blog: http://blog.mrcl0wn.com GitHub: https://github.com/MrCl0wnLab Twitter: https://twitter.com/MrCl0wnLab Email: mrcl0wnlab@\gmail.com Shellshock software bug Shellshock, also known as Bashdoor, is a famil...

ntlmv1-multi

NTLMv1 Multi Tool This tool reverses NTLMv1 hashes to NTLM, or more specifically it formats NTLMv1 challenge responses into a format that can be cracked with hashcat mode 14000 CT3 calculation If you specify --ct3 it will calculate the the final 4 digits of the NTLM for you, if you specify --json...