memoro

Memoro Memoro is a highly detailed heap profiler. Memoro not only shows you where and when your program makes heap allocations, but will show you how your program actually used that memory. Memoro collects detailed information on accesses to the heap, including reads and writes to memory and when...

SUNBURST

SUNBURST Detection for SUNBURST C2 Stage-1 using Shannon Entropy About: Using Shannon Entropy to detect Domain-Generation Algorithms DGA. It should only be fed FQDNs into the function or read from a CSV file. SYNTAX: Prefixorsubdomain.Domain.TLD Made due to APTs leveraging long-string DGA for Kil...

CVE-2024-48705

Overview During recent security research for the Wavlink AC1200 Model: WL-WN532A3 a Post-Authentication Command Injection Vulnerability was identified in the "/cgi-bin/adm.cgi" endpoint. This vulnerability could enable malicious actors who have compromise the credentials for the router, to run...

mimic

mimic mimic is a tool for covert execution on Linux x8664. What is "covert execution"? Covert execution is the art of hiding a process. In this case, mimic hides the process in plain sight. mimic can launch any program and make it look like any other program. Any user can use it. It does not...

freedomfighting

Freedom Fighting scripts This repository contains scripts which may come in handy during your freedom fighting activities. It will be updated occasionally, when I find myself in need of something I can't find online. Everything here is distributed under the terms of the GPL v3 License...

DetectPacket-CVE-2017-8464

Building a Vulnerability Detection Application for CVE-2017-8464 Source click here CONTENTS: PART 1: OVERVIEW OF CVE-2017-8464 1. CONCEPT OF LNK FILE 2. CREATING A SYSTEM VULNERABLE TO CVE-2017-8464 3. TOOLS FOR EXPLOITING CVE-2017-8464 PART 2: USING METASPLOIT TO EXPLOIT CVE-2017-8464 2.1...

bantam

Bantam An advanced PHP backdoor management tool, with a lightweight server footprint, multi-threaded communication, and an advanced payload generation and obfuscation tool. Features end to end encryption with request unique encryption keys, and payload streaming designed to bypass WAF, IDS, SIEM...

Invoke-TheHash

Invoke-TheHash Invoke-TheHash contains PowerShell functions for performing pass the hash WMI and SMB tasks. WMI and SMB connections are accessed through the .NET TCPClient. Authentication is performed by passing an NTLM hash into the NTLMv2 authentication protocol. Local administrator privilege i...

cve-2019-15107-lab

CVE-2019-15107 – Webmin Unauthenticated RCE Lab 1. Project Overview This project demonstrates CVE-2019-15107, a critical Remote Code Execution RCE vulnerability in Webmin, within a controlled and isolated Docker environment. The lab covers the complete vulnerability lifecycle from deployment and...

CVE-2024-30088

CVE-2024-30088 Bug: Bug is inside function AuthzBasepCopyoutInternalSecurityAttributes when kernel copies the AUTHZBASEPSECURITYATTRIBUTESINFORMATION of current token object to user mode, which has structure like this: //0x30 bytes sizeof struct AUTHZBASEPSECURITYATTRIBUTESINFORMATION ULONG...

CVE-2021-44228-Log4j-lookup-Rce

0x01、Environment Jdk7u21 any version works Affected versions: Apache Log4j 2.x org.apache.logging.log4j log4j-core 2.11.1 Poc import org.apache.logging.log4j.LogManager; import org.apache.logging.log4j.Logger; public class test2 private static Logger LOGGER = LogManager.getLogger; public static...

burpgpt

!IMPORTANT Announcing the launch of BurpGPT Pro, the edition specifically tailored to meet the needs of professionals and cyber boutiques. Discover a host of powerful features and a user-friendly interface that enhances your capabilities and ensures an optimal user experience. To access these...

CVE-2022-2588

CVE-2022-2588 The fix The bug is fixed in Linux v5.19 by this commit. The bug The bug was introduced in Linux v3.17 by this commit back to 2014. It requires User Namespaces to trigger. This bug is very similar to CVE-2021-3715, which was caused by improper operation on the route4filter's linked...

grapheneX

grapheneX In computing, hardening is usually the process of securing a system by reducing its surface of vulnerability, which is larger when a system performs more functions; in principle a single-function system is more secure than a multipurpose one. Reducing available ways of attack typically...

eviltree

EvilTree A standalone python3 remake of the classic "tree" command with the additional feature of searching for user provided keywords/regex in files, highlighting those that contain matches. Created for two main reasons: While searching for secrets in files of nested directory structures, being...

ppfuzz

ppfuzz Prototype Pollution Fuzzer A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀 Installation Binary Source Dependencies Demonstration Usage Basic Options Usage Supporting Materials Contributing Attribution Acknowledments License Installation Binary Simply,...

Interlace

Interlace Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support. Reviews / Howto Guides Interlace: A Tool to Easily Automate and Multithread Your Pentesting & Bug Bounty Workflow Without Any Coding Table of Contents Setup Usage -...

CVE-2017-9934

CVE-2017-9934 I am the reporter of this exploit, under name: Envo Joomla 1.7.3 - 3.7.2 CSRF exploit PoC This vulnerability works due to Joomla versions 1.7.3 to 3.7.2 not sanitizing base64 input. Headers: POST...

xencrypt

Xencrypt PowerShell crypter v 1.0 Authors Xentropy @SamuelAnttila SecForce @SECFORCELTD If you want to read about the design behind this tool and how to make your own crypter, there's an article I wrote about it here: Write a crypter in any language Note Don't be a script kiddie, I made this GPLv...

codex-security

Codex Security @openai/codex-security is a CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in your code. Features Scan repositories, selected paths, or Git changes. Deep scans run parallel discovery workers on repositories and selected paths. Validate candidate...