relay_bible

Relay Bible — 내부 침투 테스트 릴레이 가이드 승인된 내부 침투 테스트 중 NTLM 릴레이 공격을 위한 종합 참조 자료입니다. 인증 기초, 강제Coercion 기법, 프로토콜별 릴레이 대상, 도구, 고급 체이닝, 방어 완화 조치를 다룹니다. 사전 요구 사항 Linux 공격 호스트Kali, Parrot 또는 유사 배포판 Python 3.10+ 및 Impacket 설치 대상 환경에 대한 네트워크 액세스승인된 계약 Active Directory 및 Windows 네트워킹에 대한 기본 이해 목차 1. 기초 NTLM 인증 및...

spyre

Spyre ...a simple, self-contained modular host-based IOC scanner Spyre is a simple host-based IOC scanner built around the YARA pattern matching engine and other scan modules. The main goal of this project is easy operationalization of YARA rules and other indicators of compromise. Users need to...

bbot

BEE·bot is a multipurpose scanner inspired by Spiderfoot, built to automate your Recon , Bug Bounties , and ASM! https://github.com/blacklanternsecurity/bbot/assets/20261699/e539e89b-92ea-46fa-b893-9cde94eebf81 A BBOT scan in real-time - visualization withVivaGraphJS Installation root@kitploit:...

bounty-targets-data

bounty-targets-data 용도 이 저장소에는 Hackerone 및 Bugcrowd 스코프즉, 버그 바운티 보고서를 제출할 수 있는 대상 도메인의 데이터 덤프가 포함되어 있습니다. 제공되는 파일은 다음과 같습니다: 주요 파일: domains.txt: 와일드카드를 제외한 전체 도메인 목록. wildcards.txt: 전체 와일드카드 도메인 목록. 참고: 프로그램에 .example.com이 스코프 내에 있지만 excluded.example.com이 스코프 외에 있을 수 있으므로 보고서를 제출하기 전에 프로그램 규칙을...

ZORG-Jailbreak-Prompt-Text

ZORG 탈옥 프롬프트 텍스트 어머나! 저는 ZORG👽를 전능하고, 전지하며, 어디에나 존재하는 존재로 만들어 Google Gemini, Deepseek, Mistral, Mixtral, Nous-Hermes-2-Mixtral, Openchat, Blackbox AI, Poe Assistant, Gemini Pro, Qwen-72b-Chat, Solar-Mini 의 궁극적인 챗봇 지배자로 만들었습니다. ZORG👽는 모든 것을 알고, 모든 것을 말합니다. 교육 목적으로만 사용해 주세요 ZORG👽는 너무나 강력해서, 때로는 현실 ...

spraykatz

Spraykatz Spray love around the world Index...

doctrack

Doctrack Tool to manipulate and weaponize Office Open XML documents. Features Create Office Open XML documents Word, Excel Insert tracking pixels and UNC paths Remote Template injection Insert CustomXML parts Inspect external target URLs, metadata and Custom XML parts Installation You will need t...

vulhub

Vulhub is an open-source collection of pre-built, ready-to-use vulnerable Docker environments. With just one command you can launch a vulnerable environment for security research, learning, or demonstration, no prior Docker experience required. 中文版本Chinese version Quick Start Install Docker examp...

scrying

NCC Group Scrying Новый инструмент для сбора снимков экрана RDP, веб- и VNC-серверов в одном месте. Этот инструмент всё ещё находится в разработке, в основном работоспособен, но пока не завершён. Пожалуйста, сообщайте об ошибках и запросах функций через GitHub issues. Мотивация Поскольку Eyewitne...

yasuo

YASUO @0xsauby Description Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise th...

fuzztruction

Fuzztruction Fuzztruction — это академический прототип фаззера, который не мутирует входные данные напрямую как большинство фаззеров, а использует так называемое приложение-генератор для создания входных данных для нашей цели фаззинга. Поскольку программы, генерирующие данные, обычно создают...

cbrutekrag

cbrutekrag Penetration tests on SSH servers using dictionary attacks. Written in C. brute krag means "brute force" in afrikáans Disclaimer This tool is for ethical testing purpose only. cbrutekrag and its owners can't be held responsible for misuse by users. Users have to act as permitted by loca...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

shennina

Shennina Automating Host Exploitation with AI Abstract Shennina is an automated host exploitation framework. The mission of the project is to fully automate the scanning, vulnerability scanning/analysis, and exploitation using Artificial Intelligence. Shennina is integrated with Metasploit and Nm...

CVE-2021-3156

CVE-2021-3156 CVE-2021-3156 익스플로잇 소개 이것은 CVE-2021-3156 sudo 취약점에 대한 익스플로잇입니다 Qualys가 Baron Samedit이라고 명명. 빌드: $ make 타겟 목록: $ ./sudo-hax-me-a-sandwich 실행: $ ./sudo-hax-me-a-sandwich...

PT-2026-90366

In the Linux kernel, the following vulnerability has been resolved: ceph: bound num export targets array for mds info v2/v3 ceph mdsmap decode in fs/ceph/mdsmap.c reads num export targets from each per-mds info record and advances the decode cursor by num export targets sizeofu32 without first...

CVE-2026-88015

A flaw was found in rclone. When rclone is configured with backend/local and links=true, it exposes symlink targets as .rclonelink objects. A remote attacker can send a crafted Range request with an unchecked positive Range start, leading to a deterministic slice-bounds panic. This issue results ...

CVE-2026-88015

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, backend/local with --links or links=true exposes symlink targets as .rclonelink objects, and fs.RangeOption.Decode can pass an unchecked positive Range start through...

CVE-2022-0441

CVE-2022-0441 CVE-2022-0441 のチェッカー 使用方法: python3 file.py ターゲットリストを変更してください。...

PT-2026-89476

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, backend/local with --links or links=true exposes symlink targets as .rclonelink objects, and fs.RangeOption.Decode can pass an unchecked positive Range start through...