Intel-Linux-Processor-Microcode-Data-Files

Intel Processor Microcode Package for Linux About The Intel Processor Microcode Update MCU Package provides a mechanism to release updates for security advisories and functional issues, including errata. In addition, MCUs are responsible for starting the SGX enclave on processors that support the...

user-agent-desktop

This project is discontinued. We recommend to use Ghostery Tracker and Ad Blocker in Firefox. Ghostery Private Browser The Ghostery Desktop Browser is a minimal fork of Firefox optimised for privacy. The main extra features are: The Ghostery Privacy Blocker extension is included and enabled by...

ActiveMQ-CVE-2023-46604

CVE-2023-46604 ActiveMQ Safe Validator A single-file, non-destructive validator for Apache ActiveMQ CVE-2023-46604. It starts its own HTTP callback server, generates target-specific Spring XML in memory, sends the crafted OpenWire packet, correlates callbacks with unique tokens, and writes CSV/JS...

CVE-2023-22515

Red Team Tool - Confluence Unauthorized Add Admin User CVE-2023-22515 Exploit Tool Vulnerability Scope 8.0.0 = Confluence Data Center and Confluence Server = 8.0.4 8.1.0 = Confluence Data Center and Confluence Server = 8.1.4 8.2.0 = Confluence Data Center and Confluence Server = 8.2.3 8.3.0 =...

hacktricks-cloud

HackTricks Cloud Hacktricks logos & motion designed by @ppieranacho .1 Run HackTricks Cloud Locally The workflow below follows Git's documented clone, checkout, and pull operations and the repository's published language branches and container setup.238910 Download latest version of hacktricks...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

LACheck

LACheck Multithreaded C .NET Assembly Local Administrative Privilege Enumeration Arguments ./LACheck.exe help | | /\ / | | | | | | / \ | | | | | | | | / /\ \ | | | ' \ / / | |/ / | | / \ | || | | | / | |// \ || |||||\ Usage: LACheck.exe smb rpc /targets:hostname,fqdn.domain.tld,10.10.10.10...

resterm

Resterm An API-as-code workbench for the terminal. resterm.app · docs Resterm is a code-first API client built around plain .http/.rest files. A request is a few lines of text you can read, diff and keep in git, and the same goes for workflows and local mocks. You send them from the terminal UI...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

CVE-2019-19012

Integer overflow in Oniguruma An integer overflow in the searchinrange function in regexec.c in Oniguruma 6.x before 6.9.4rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker. This only affects the 32-bit compiled version. Remote attackers can...

CVE-2018-1000529

CVE-2018-1000529 NVD CVE-2018-1000529: https://nvd.nist.gov/vuln/detail/CVE-2018-1000529 MITRE CVE-2018-1000529: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-1000529 Stored XSS in Grails Fields Plugin =2.2.7 This repository was used to demonstrate a proof of concept of the vulnerability fo...

osint-tools-mcp-server

🔍 OSINT Tools MCP Server A comprehensive MCP server that exposes multiple OSINT tools to AI assistants like Claude. This server allows AI to perform sophisticated reconnaissance and information gathering tasks using industry-standard OSINT tools. 🛠️ Available Tools 🔍 Sherlock - Username Search...

C3

C3 Build C3 MSVC/badge.svg?branch=master Build C3 Clang/badge.svg?branch=master C3 Custom Command and Control is a tool that allows Red Teams to rapidly develop and utilise esoteric command and control channels C2. It's a framework that extends other red team tooling, such as the commercial Cobal...

redknife

A Swiss Army knife for offensive security. Features DNS DNS Query : Query DNS servers. FTP FTP Server : A minimal FTP server. HTTP HTTP Callback Server : Receive and log incoming HTTP requests. HTTP Proxy : Inspect, intercept, modify, and forward/drop HTTP requests. HTTP Send : Send and replay HT...

msprobe

msprobe About Installing Usage Examples Coming Soon Acknowledgements About Finding all things on-prem Microsoft for password spraying and enumeration. The tool will used a list of common subdomains associated with your target apex domain to attempt to discover valid instances of on-prem Microsoft...

krie

KRIe KRIe is a research project that aims to detect Linux Kernel exploits with eBPF. KRIe is far from being a bulletproof strategy: from eBPF related limitations to post exploitation detections that might rely on a compromised kernel to emit security events, it is clear that a motivated attacker...

Grafana-CVE-2021-43798

CVE-2021-43798 Grafana Unauthorized arbitrary file reading vulnerability 8.3.1 2021-12-07 Security: Fixes CVE-2021-43798 . For more information, see our blog https://grafana.com/blog/2021/12/07/grafana-8.3.1-8.2.7-8.1.8-and-8.0.7-released-with-high-severity-security-fix/ Example: get db password...

cdncheck

cdncheck Features • Installation • Usage • Join Discord cdncheck is a tool for identifying the technology associated with dns / ip network addresses. Features CDN , CLOUD and WAF Detection Easy to use as library Easily extendable providers IP, DNS input support Text, JSONL output Filters on outpu...

CBM

Car Backdoor Maker The Car Backdoor Maker is a software for making attack templates and load them into The Bicho. Before starting, please read how to Get The Bicho hardware. Screnshot Install and Usage This project has its wiki where you will find the following useful documentation: Installation...

ShadowClone

ShadowClone ShadowClone allows you to distribute your long running tasks dynamically across thousands of serverless functions and gives you the results within seconds where it would have taken hours to complete. You can make full use of the Free Tiers provided by cloud providers and supercharge...