tivoli-poc

tivoli-poc CVE-2017-1635 PoC code CVEID: CVE-2017-1635 CVSS Base Score: 8 Affected Products and Versions: KDH component of IBM Tivoli Monitoring Basic Services KGL,KAX for Version 6.2.2.0 through 6.2.2.9 A vulnerability exists in the internal web server provided by IBM Tivoli Monitoring basic...

rocket-lms-shell-upload-auto-register

rocket-lms-shell-upload-auto-register Rocket LMS Shell Upload Vulnerability Python 2.7 Buy Coffee : Bitcoin $: 14nXhmRiQx5joCXFTdR8ydm3T8et7MFDXC How To Use? Install Python 2.7 Download Here python file.py Sauce? https://medium.com/@naxtarrr/rocket-lms-shell-upload-vulnerability-c400665702f3...

clairvoyance

🔮 clairvoyance Clairvoyance /klɛərˈvɔɪəns /; from French clair meaning clear and voyance meaning vision from Wikipedia. Overview clairvoyance creates a colorful visualization of the page protection of an entire 64-bit process address space user and kernel running on a Windows 64-bit kernel. To...

ROPgadget

ROPgadget Tool This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF/PE/Mach-O/Raw formats on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures. Install The easiest way is installing ROPgadget...

ProcessHider

ProcessHider Created by M00nRise IMPORTANT NOTE This tools is allowed to use only for penetration testing and other white-hat activities. Illegal use is absoloutly frobidden! About ProcessHider is a post-exploitation tool designed to hide processes from monitoring tools such as Task Manager and...

Yasso

Yasso Powerful intranet penetration auxiliary toolset - let Yasso be like the wind. Supports brute-forcing of RDP, SSH, Redis, PostgreSQL, MongoDB, MSSQL, MySQL, WinRM and other services, fast port scanning, powerful web fingerprint recognition, one-click exploitation of various built-in services...

Orchestrated-Powershell-for-CVE-2023-24932

Secure Boot Orchestrator CVE-2023-24932 Automates the full Secure Boot mitigation for CVE-2023-24932 BlackLotus. Handles all registry changes, reboots, and verification automatically. Requirements Windows 10/11 or Server 2016+ Administrator privileges Secure Boot enabled Cumulative Update = July...

Powermad

PowerShell MachineAccountQuota and DNS exploit tools Wiki https://github.com/Kevin-Robertson/Powermad/wiki Blog Post Beyond LLMNR/NBNS Spoofing - Exploiting Active Directory-Integrated DNS Functions MachineAccountQuota Functions DNS Functions Dynamic Updates Functions ADIDNS Functions Miscellaneo...

CANToolz

H1 PROJECT IS MOVED HERE: https://github.com/CANToolz/CANToolz More details: https://asintsov.blogspot.de/2017/08/next-page-in-cantoolz-life.html...

maskphish

👨‍💻️ Author : jaykali 🔥 MaskPhish MaskPhish is not any Phishing tool. It's just a proof of concept of "URL Making Technology". It is a simple Bash Script to hide phishing URL under a normal looking URL google.com or facebook.com. It can be integrated into Phishing tools with proper credits to look...

pysho

pysho Python based tool to perform Shodan queries via the Shodan API Get the tool: git clone https://github.com/Kr0ff/pysho python -m pip install -r requirements.txt chmod +x pysho.py ./pysho Example usage: Perform a check on your Shodan API key python pysho.py --info Perform search for a service...

pydbg

This repository does not have a README...

CVE-2023-29489

CVE-2023-29489 Mass Scaning vulnerability in Cpanel XSS KALI LINUX sudo pip install BeautifulSoup sudo pip install shodan sudo pip install pystyle git clone https://github.com/0-d3y/CVE-2023-29489.git cd CVE-2023-29489 python cve202329489.py TERMUX pkg install BeautifulSoup pkg instaal shodan pkg...

AttackSurfaceMapper

AttackSurfaceMapper AttackSurfaceMapper ASM is a reconnaissance tool that uses a mixture of open source intelligence and active techniques to expand the attack surface of your target. You feed in a mixture of one or more domains, subdomains and IP addresses and it uses numerous techniques to find...

frida-wshook

frida-wshook frida-wshook is an analysis and instrumentation tool which uses frida.re to hook common functions often used by malicious script files which are run using WScript/CScript. The tool intercepts Windows API functions and doesn't implement function stubs or proxies within the targeted...

Reachability-Check

Reachability Check 🌐 EN | TR Browser-based reachability checker — test network connectivity, firewall rules and access restrictions. Single HTML file. Zero dependencies. No web server required to run. Features Dual measurement: HTTP Fetch + Image Ping via each service's own favicon Service packs:...

Google-Dorker

nDorker Automate Dorking Faster and Better than Ever. What can it do? 1. Google Dorking 2. Vendor Dorking 3. Github Dorking 4. Shodan Dorking Get nDorker git clone https://github.com/nerrorsec/nDorker cd nDorker Usage python3 nDorker.py -d example.com Found a bug? Feel free to open an issue Found...

CVE-2024-45507_Behinder_Webshell

This repository does not have a README...

CVE-2020-1472

CVE-2020-1472 Packaged py files used in reproducing CVE-2020-1472 The examples path contains the directory where the exp files are located; the rest are import packages, just ignore them Corresponding blog post: https://www.svenbeast.com/post/fu-xian-cve-2020-1472-netlogon-te-quan-ti-sheng-lou-do...

mnemosyne

Mnemosyne is a generic Windows-based memory scraping tool. It scans a process memory space for a search string or regex unicode and ascii then if found, spits these out either to stdout, a file or a socket to a remote listener. The utility is useful for memory scraping a process, as a...