24127 matches found
ZeroLogon
ZeroLogon CVE-2020-1472 C++ version. This tool directly resets the machine account password. It does not have recovery functionality. Use with caution in real-world scenarios. Referencing the BOF version: ZeroLogon-BOF, this is a modified single-file EXE version. After compilation, it is only abo...
Nix-Auditor
Nix Auditor CIS Audit made easier RHEL, CentOS Usage: 1. Make it executable ...eg chmod +x filename 2. Execute it. 3. https://the-infosec.com/2017/03/20/auditing-linux-unix-os-in-120-seconds-flat/ Nix Auditor 2.0: Change Log - Credits to Metale Added color variables BLUE, RED, NC NO COLOR and GRE...
Raccoon
Raccoon Offensive Security Tool for Reconnaissance and Information Gathering Features DNS details DNS visual mapping using DNS dumpster WHOIS information TLS Data - supported ciphers, TLS versions, certificate details and SANs Port Scan Services and scripts scan URL fuzzing and dir/file detection...
CVE-2016-2107
CVE-2016-2107 Simple test for the May 2016 OpenSSL padding oracle CVE-2016-2107 Installation $ go version go version go1.6.2 darwin/amd64 $ go get github.com/FiloSottile/CVE-2016-2107 This tool only builds with Go 1.6+, and only when downloaded to the right position in the $GOPATH. Usage $...
BadAssMacros
BadAssMacros Description Proof of Concept tool to generate malicious macros leveraging techniques like VBA Purging and Shellcode Obfuscation to evade AV engines. This tool takes in raw shellcode that can be generated by popular C2 frameworks like Metasploit,Cobalt Strike etc and outputs a VBA...
nuclei-templates
Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the nuclei scanner which powers the actual scanning engine. This...
CVE-2024-23897
CVE-2024-23897 - Jenkins Arbitrary File Read Exploit Tool Installation CVE-2024-23897 requires go 1.21 to complete installation. Execute the following command: go install github.com/wjlin0/CVE-2024-23897/cmd/CVE-2024-23897@latest Or download the pre-built binary from release macOS-arm64 macOS-amd...
compaXSS
CompaXSS Bypass XSS Reflected Cross-site scripting ======= Example: python compaxss.py --url https://support.snapchat.com/login?next=-run Developers Jose Pino - @jofpin Juan Eljach - @juaneljach...
hashcracker
hashcracker Supported hashing algorithms: SHA512, SHA256, SHA384, SHA1, MD5, SHA224 Features: auto detection of hashing algorithm based on length not recommended, bruteforce, password list Arguments: type: hash algorithm must be one of the supported hashing algorithms mentioned above or AUTO if y...
CredCrack
CredCrack ⛔ DEPRECATED. This repo is no longer being maintained. Please consider using CrackMapExec. Introduction CredCrack is a fast and stealthy credential harvester. It exfiltrates credentials recusively in memory and in the clear. Upon completion, CredCrack will parse and output the credentia...
Securekit
Securekit Securekit protects what your models execute—across any AI system. Securekit is a protocol-agnostic security kernel for AI tool execution. It sits between any LLM or agent system and the tools they use, enforcing zero-trust execution, sandbox isolation, and policy-driven control. It is...
CVE-2021-31956-EXP
Working in WIN10 1903 Not a perfect exp https://bbs.pediy.com/thread-271140.htm...
custom-bytecode-analyzer
custom-bytecode-analyzer Java bytecode analyzer customizable via JSON rules. It is a command-line tool that receives a path containing one or more Jar or War files, analyzes them using the provided rules and generates HTML reports with the results. Usage usage: java -jar cba-cli.jar OPTIONS -a...
dns-spoof
This repository does not have a README...
CVE-2025-8088-Winrar-Tool
CVE-2025-8088 WinRAR Exploit Advanced WinRAR Path Traversal Exploit Tool A sophisticated GUI tool for creating malicious RAR archives that exploit the WinRAR path traversal vulnerability CVE-2025-8088 using ADS and RAR5 header manipulation. Features ADS Exploitation - NTFS Alternate Data Streams...
Royal_APT
RoyalAPT Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research Sharepoint tool Among the tools developed by the group for the victim, APT15 created a .net tool to enumerate the victim's sharepoint database. Below is an screen-shot from the decompiled binary...
XWFAcropalypse
Acropalypse CVE-2023-21036 is a security vulnerability in the Google Pixel Markup tool and Windows Snip & Sketch that allows for the recovery of cropped or edited-out data from PNG screenshots. Discovered in 2023, it enables attackers to reconstruct original images, potentially exposing+ sensitiv...
PortGuard
Port-Guard Port-Guard is a USB port management and security tool designed for Debian. It allows you to control access to USB devices , maintain a custom whitelist , and run an automatic background scan to detect any unauthorized connection. ⚠️ Beta version : The software is functional, but...
BlueBox
BlueBox Malware analysis Box and Cyber threat Hunting What is it? Threat intelligence data about a malware, an IP or a domain , URL ? a Quick Analysis suspicious File or Malware ! BlueBox is an Open Source Intelligence, or OSINT solution to get threat intelligence data about a specific file, an I...