unicorn

unicorn Written by: Dave Kennedy @HackingDave Website: https://www.trustedsec.com Magic Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David...

NetAlertX

NetAlertX - Network Visibility & Asset Intelligence Framework 📷 Click for more screenshots Head to https://netalertx.com/ for even more gifs and screenshots 📷. NetAlertX is a network visibility and asset intelligence platform for homelabs, IT teams, MSPs, and distributed environments. It provides...

cosign

cosign Signing OCI containers and other artifacts using Sigstore! Cosign aims to make signatures invisible infrastructure. Cosign supports: "Keyless signing" with the Sigstore public good Fulcio certificate authority and Rekor transparency log default Hardware and KMS signing Signing with a cosig...

CakeFuzzer

CakeFuzzer 最新版本 : 1.0 许可证 : GNU GPL v3.0 Cake Fuzzer 是一个项目，旨在帮助自动且持续地发现基于特定框架的 Web 应用程序中的漏洞，且假阳性率极低。目前它已实现支持 Cake PHP 框架。 如果您想了解更多关于研究过程的信息，请查看这篇文章系列：CakePHP 应用程序网络安全研究 🏆 已报告的漏洞 🏆 以下是 Cake Fuzzer 发现的部分漏洞列表： 标题| 严重性| 链接 ---|---|--- Cerebrate 中的盲 SQL 注入| 9.8 严重|...

proxmark3

Iceman Fork - Proxmark3 The Proxmark3 is the swiss-army tool of RFID, allowing for interactions with the vast majority of RFID tags on a global scale. Originally built by Jonathan Westhues, the device is now the goto tool for RFID Analysis for the enthusiast. Iceman repository is considered to be...

security-research

Исследования в области безопасности Этот проект содержит отчёты об уязвимостях и сопровождающие их PoC-эксплойты proof-of-concept, связанные с исследованиями, проводимыми в Google и затрагивающими код, не принадлежащий Google. Мы считаем, что раскрытие информации об уязвимостях — это дорога с...

security-research

Security Research This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code. We believe that vulnerability disclosure is a two-way street. Vendors, as well as researchers, must act responsibly. This i...

GPT_Vuln-analyzer

GPTVuln-analyzer 这是一个概念验证应用程序，演示了如何利用人工智能生成准确的漏洞分析结果，并能进一步利用已经非常实用的 ChatGPT。该程序基于 openai-api、python-nmap、dnsresolver 等 Python 模块构建，其 GUI 版本还使用了 customtkinter 和 tkinter。该项目同时提供 CLI 和 GUI 界面，能够执行网络漏洞分析、DNS 枚举以及子域名枚举。 依赖要求 Python 3.10 或更高版本 requirements.txt 文件中列出的所有软件包 OpenAI API Bard API MakerSuite...

VIBE-VAULT

⚡ VibeVault: OWASP Top 10 Web Security & Patching Lab VibeV...

reflector

reflector Description Burp Suite extension is able to find reflected XSS on page in real-time while browsing on web-site and include some features as: Highlighting of reflection in the response tab. Test which symbols is allowed in this reflection. Analyze of reflection context. Content-Type...

SharpDPAPI

SharpDPAPI SharpDPAPI 是 @gentilkiwi 的 Mimikatz 项目中部分 DPAPI 功能的 C 移植版本。 我并未构思此逻辑，它仅仅是 Mimikatz 的移植，旨在更好地理解流程并将其操作化以适应我们的工作流程。 SharpChrome 子项目改编自 @gentilkiwi 和 @djhohnstein 的工作，特别是其 SharpChrome 项目。然而，此版本的 SharpChrome 使用了支持无锁打开的不同版本的 C SQL 库。由于所使用的 SQLite 库体积较大，SharpChrome 在 SharpDPAPI 中被构建为一个单独的项目。...

camoufox

Camoufox Camoufox is an open source anti-detect browser built for webscraping & AI agents. 🦊 ⚠️ This project is under development. It may not be suitable for stable production use. ⚠️ !NOTE All of the latest documentation is available atcamoufox.com. !NOTE Browser development is active at...

LeakValue

Android 13 introduces many enhancements in order to harden Parcel serialization mechanism Here's presentation from Android Security and Privacy team on enhancements made That is great, definitely eliminates or makes unexploitable many vulnerabilities. Also they describe breaking my previous...

beagle

Beagle 1. About Beagle 2. Installation 1. Docker 2. Python Package 3. Configuration 3. Web Interface 1. Uploading Data 2. Browsing Existing Graphs 3. Graph Interface 1. Inspecting Nodes and Edges 2. Expanding Neighbours 3. Hiding Nodes 4. Running Mutators 5. Toggling Node and Edge Types 6...

ESFileExplorerOpenPortVuln

Vulnerabilidad de puerto abierto en ES File Explorer - CVE-2019-6447 Según su descripción en Google Play: ES File Explorer File Manager es un administrador de archivos imágenes, música, películas, documentos, aplicaciones con todas las funciones, tanto para uso local como en red! Con más de 500...

log4j-detect

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading The script "log4j-detect.py" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228. To do so, it sends a G...

Pachine

Pachine 针对 CVE-2021-42278（Active Directory 权限提升）的 Python 实现。 安装 root@kitploit: $ pip3 install impacket 用法 root@kitploit: Impacket v0.9.23 - Copyright 2021 SecureAuth Corporation usage: pachine.py -h -scan -spn SPN -impersonate IMPERSONATE -domain-netbios NETBIOSNAME -computer-name...

netzob

=========================================================== Netzob : Protocol Reverse Engineering, Modeling and Fuzzing .. image:: https://img.shields.io/badge/Python-3-brightgreen.svg :target: https://github.com/netzob/netzob :alt: Python3 See complete documentation here:...

ipa-medit

ipa-medit Ipa-medit is a memory search and patch tool for resigned ipa without jailbreaking. It supports iOS apps running on iPhone and Apple Silicon Mac. It was created for mobile game security testing. Many mobile games have jailbreak detection, but ipa-medit does not require jailbreaking, so...

ipa-medit

ipa-medit Ipa-medit 是一款无需越狱即可对重签名的 ipa 进行内存搜索和修补的工具。 它支持运行在 iPhone 和 Apple Silicon Mac 上的 iOS 应用。 该工具是为移动游戏安全测试而创建的。 许多移动游戏都有越狱检测，但 ipa-medit 不需要越狱，因此无需绕过越狱检测即可进行内存修改。 动机 内存修改是游戏作弊最简单的方法之一，也是安全测试中需要检查的项目之一。 还有一些像 GameGem 和 iGameGuardian 这样的简易作弊工具。 然而，对于非越狱设备和 CUI（命令行界面）以及 Apple Silicon...