CVE-2021-40444

CVE-2021-40444 PoC Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution Creation of this Script is based on some reverse engineering over the sample used in-the-wild: 938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52 docx file You need to...

CloakBin

CloakBin Zero-Knowledge Encrypted Pastebin Your data is encrypted before it leaves your browser. We can't read it. No one can. Live Demo • Report Bug • Request Feature Why Zero-Knowledge? Traditional pastebins store your data in plaintext. Server admins, hackers, or anyone with database access ca...

HLF_TxTime_spoofing

HLFTxTimespoofing HLFTxTimespoofing - a PoC covering the problem of transaction time manipulation using GetTxTimestamp or GetHistoryForKey in the Hyperledger Fabric blockchain. Tested on v 2.5.5 and v3.0.0-beta The project consists of several parts: 1. timeinsecure - vulnerable chaincode variant...

dashbuilder

Dashbuilder Dashbuilder is a general purpose dashboard and reporting web app which allows for: Visual configuration and personalization of dashboards Support for different types of visualizations using several charting libraries Full featured editor for the definition of chart visualizations...

AbxOverflow

Fixes for issue described here appeared under CVE-2024-34740 / A-307288067: Bulletin Patch linked from bulletin Two other patches: 1 2 Android Binary XML Inside Android systemserver, many services store their state across reboots in XML files root@kitploit: $ adb shell su 0 find /data/system -nam...

GPT_Vuln-analyzer

GPTVuln-analyzer Esta es una aplicación de Prueba de Concepto que demuestra cómo la IA puede ser utilizada para generar resultados precisos para el análisis de vulnerabilidades y también permite una mayor utilización del ya súper útil ChatGPT hecho usando openai-api, python-nmap, dnsresolver...

-CVE-2024-3094-Vulnerability-Checker-Fixer-Public

Show Your Support If you find this script useful and it has helped you safeguard your systems against CVE-2024-3094, please consider giving it a star ⭐ . Starring this repository not only shows your support but also helps more people discover and benefit from our collective effort to improve...

cracken

Cracken Cracken is a fast password wordlist generator, Smartlist creation and password hybrid-mask analysis tool written in pure safe Rust more on talk/. Inspired by great tools like maskprocessor, hashcat, Crunch and 🤗 HuggingFace's tokenizers. What? Why? Woot?? At DeepSec2021 we presented a new...

apimspray

apimspray apimspray is a specialized Entra ID Passwordspraying Toolkit designed for authorized security research and Red Teaming. It utilizes Azure API Management APIM gateways as a distributed, rotating proxy layer for IP Rotating. Read Blog Post for more Details about this project Prerequisites...

nmlinux

NMLinux · v1.7.12 A unified network toolkit for Linux and macOS — inspect, connect, diagnose. NMLinux is a single, unified GUI that brings together 29 network modules in one window: interface monitoring, Wi-Fi, DNS, SSH terminal, firewall viewer, topology map, traceroute, and more. Built from...

dnstwist

See what sort of trouble users can get in trying to type your domain name. Find lookalike domains that adversaries can use to attack you. Can detect typosquatters, phishing attacks, fraud, and brand impersonation. Useful as an additional source of targeted threat intelligence. DNS fuzzing is an...

Counterfeit installers to system compromise: Tracking a deceptive software download campaign

In this article 1. Attack chain overview 2. Campaign scope and targeting 3. Mitigation and protection guidance 4. References 5. Learn more Microsoft Defender Experts is tracking an active malware campaign that uses counterfeit software-download websites to impersonate trusted vendors and distribu...

AirmonGUI

AirmonGUI A local web interface for the aircrack-ng wireless toolkit. Screenshots · Quick start · Features · Roadmap · Contributing !WARNING Use this only on networks you own or have written permission to test. Scanning, deauthenticating, or capturing traffic from networks you don't control is...

CVE-2024-25503

CVE-2024-25503 Vulnerability type : Cross Site Scripting XSS Product: Advanced REST Client desktop application Vulnerable Version: 17.0.9 Vendor of the products:https://www.advancedrestclient.com/ 1. Description Cross-Site Scripting XSS vulnerability in Advanced REST Client v.17.0.9 allows a...

ActiveDirectoryEnumeration

ADE - ActiveDirectoryEnum root@kitploit: python -m ade usage: ade -h --dc DC -o OUTFILE -u USER -s -smb -kp -bh -spn -sysvol --all --no-creds --dry-run --exploit EXPLOIT / | / / / \ / / / / / /| |/ / / / | / / / / / / / / / / / / / / / / / / / / / / \ / / // // /| |/ / / // / /...

jsdeob-workbench

jsdeob-workbench A visual workbench for deobfuscating JavaScript. Build transform chains, step through them, write your own plugins. YouTube Demo https://www.youtube.com/watch?v=7zuqKoJT2BM https://www.youtube.com/watch?v=bOVnPIfjoco What is this? This application reveals the Abstract Syntax Tree...

jailer

Jailer - Control de Acceso Obligatorio eBPF Advertencia : Este proyecto está en desarrollo intensivo y NO está listo para uso en producción. Las APIs, formatos de políticas y el comportamiento pueden cambiar sin previo aviso. Úselo solo para pruebas y experimentación. Agradecimientos Nota : Esta ...

PROMPTPurify

promptpurify Tiny prompt-injection firewall for LLM chat apps. 14 MB. CPU-only. Drop-in guard between your user input and your LLM — runs on the same box, no GPU, no API, no extra service. Built by the SecureLayer7 red-team. Most OSS guardrails are hundreds of MB, want a GPU, and still miss the...

mssqlbof

mssqlbof Un conjunto de Beacon Object Files para Microsoft SQL Server que habla directamente TDS 7.4 en el cable, en C. Sin msodbcsql.dll, sin sqloledb.dll, sin .NET CLR, sin PowerShell. Un COFF por arquitectura, se carga en cada beacon que respeta la API Beacon canónica. Por qué SQL Server apare...

SSH-User-Enum-Python3-CVE-2018-15473

SSH-User-Enum-Python3-CVE-2018-15473 SSH User Enumerator in Python3, CVE-2018-15473, I've updated the code of this exploit https://www.exploit-db.com/exploits/45939 to work with python3 instead of python2, and I'm trying to implement functionalities to enumerate more users instead of only one...