91976 matches found
Out-FINcodedCommand
Out-FINcodedCommand v1.0 Introduction Out-FINcodedCommand is a PowerShell v2.0+ compatible PowerShell POC script designed to highlight several obfuscation techniques used by FIN threat actors. The primary obfuscation techniques highlighted in this tool are: 1. cmd.exe's variable char/string...
Invoke-Obfuscation
Invoke-Obfuscation v1.8 Introduction Invoke-Obfuscation is a PowerShell v2.0+ compatible PowerShell command and script obfuscator. Background In the Fall of 2015 I decided to begin researching the flexibility of PowerShell's language and began cataloguing the various ways to accomplish a handful ...
DNS-Persist
DNS-Persist DNS-Persist is a post-exploitation agent which uses DNS for command and control. The server-side code is in Python and the agent is coded in C++. This is the first version, more features and improvements will be made in the future. Getting Started Author 0x09AL -...
CVE-2022-31901
CVE-2022-31901 Denial Of Services DOS in Notepad++x86 in 8.4.3 and before. Description Vulnerability triggering, via opening two specially crafted text files e.g. first.txt & second.txt as input to notepad++. As an illustrative example below, as of 11/07/2022, latest version of Notepad++x86 is...
sigma-cli
Sigma Command Line Interface This is the Sigma command line interface using the pySigma library to manage, list and convert Sigma rules into query languages. Getting Started Installation The easiest way to install the Sigma CLI is via pipx or pip. For this purpose run one of the following: python...
CVE-2017-1000486
CVE-2017-1000486 Remote Code Execution exploit for PrimeFaces 5.x - EL Injection CVE-2017-1000486 This is basically the same exploit made by Mogwailabs, but edited to work in closed environments without access to the internet or with blocked firewall outbound traffic. It gives you results in HTTP...
xurlfind3r
xurlfind3r xurlfind3r is a command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly...
circuit-artist
A Digital Logic Simulation Game Every Circuit Is An Image Game Rules Little pixel triangles are NANDs. Black pixels are background. Everything else is a wire. Screenshots 👀 | | !https://raw.githubusercontent.com/lets-all...
proxy
git-pkgs proxy A caching proxy for package registries. Speeds up package downloads by caching artifacts locally, reducing bandwidth usage and improving reliability. Version Cooldown Most supply chain attacks rely on speed: a malicious version gets published and consumed by automated pipelines...
jenkinsci__perfecto-plugin_CVE-2020-2261_1-17
Perfecto Jenkins Plugin Perfecto Jenkins Plugin provides the ability to auto-create/ re-use existing Perfecto Connect tunnel-id in build environment. Table of Contents Perfecto Jenkins Plugin Table of Contents Prerequisites 1. Steps to Enable the plugin Screenshots Mac Windows Advanced Options 2...
graphql-cop
GraphQL Cop - Security Audit Utility for GraphQL About GraphQL Cop is a small Python utility to run common security tests against GraphQL APIs. GraphQL Cop is perfect for running CI/CD checks in GraphQL. It is lightweight, and covers interesting security issues in GraphQL. GraphQL Cop allows you ...
psc
PortShellCrypter -- PSC This project - as well as its sister project crash - belongs to my anti-censorship tool-set that allows to setup fully working encrypted shells and TCP/UDP forwarding in hostile censoring environments. It is also useful for forensics to dump data from devices via UART or...
nali
Nali An offline tool for querying IP geographic information and CDN provider. 中文文档 Feature Multi database support Chunzhen qqip database ZX ipv6 database Geoip2 city database IPIP free database ip2region database DB-IP database IP2Location DB3 LITE database CDN provider query Pipeline support...
ZEROScan
ZEROScan Introduction ZEROScan is a multi-threaded vulnerability detection framework. Through it, you can easily obtain or develop vulnerability detection plugins to perform penetration testing on targets. The interface and usage are inspired by the metasploit-framework, making it easy to get...
smokedmeat
SmokedMeat CI/CD Red Team Framework Like Metasploit, but for CI/CD pipelines. From the makers of thepoutine Build Pipeline SAST scanner at BoostSecurity Labs. Warning: This tool is for authorized security testing only. SmokedMeat exists because CI/CD pipeline threats are deeply underestimated...
CVE-2022-2588
CVE-2022-2588 The fix The bug is fixed in Linux v5.19 by this commit. The bug The bug was introduced in Linux v3.17 by this commit back to 2014. It requires User Namespaces to trigger. This bug is very similar to CVE-2021-3715, which was caused by improper operation on the route4filter's linked...
ICS-TestBed-Framework
ICS TestBed Framework A scalable framework for automatically deploying locally or remotely a number of virtual machines that replicate a Supervisory Control And Data Acquisition SCADA network is proposed. This includes multiple virtual hosts emulating sensors and actuators, with a Human Machine...
rayder
Rayder A lightweight tool for orchestrating and organizing your command-line workflows About • Installation • Usage • Workflow Configuration • Parallel Execution • Workflows About Rayder is a command-line tool designed to simplify the orchestration and execution of workflows. It allows you to...
caracal
Caracal Caracal is a static analyzer tool over the SIERRA representation for Starknet smart contracts. Features Detectors to detect vulnerable Cairo code Printers to report information Taint analysis Data flow analysis framework Easy to run in Scarb projects Installation Precompiled binaries...