c2-cloud

About The Project The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cloud. It can manage several simultaneous backdoor sessions with a user-friendly...

patch-checker

PatchChecker This is the code base for the service running on: https://patchchecker.com. In short, PatchChecker is a web application running on flask that provides output similar to that of Watson. However by using PatchChecker, one is not required to execute a binary on the target machine...

SysmonConfigPusher2

SysmonConfigPusher v2 A web-based tool for managing Sysmon configurations across Windows endpoints — supports both agentless WMI/SMB and agent-based deployments. Features Screenshots Dashboard| Inventory ---|--- | Config View| Config Editor ---|--- | Deployment Wizard| Deployment Pr...

OSRipper

OSRipper v0.4.2 Generador y encriptador de payloads multiplataforma avanzado con capacidades FUD Características • Inicio Rápido • Interfaz Web • Tipos de Payload • Documentación Resumen OSRipper es un generador y encriptador de backdoors sofisticado y completamente indetectable FUD, diseñado par...

trufflehog-explorer

TruffleHog Explorer 🕵️‍♂️ Bienvenido a TruffleHog Explorer, una herramienta web fácil de usar para visualizar y analizar datos extraídos con TruffleHog. TruffleHog es una de las herramientas open source más potentes para el descubrimiento, clasificación, validación y análisis de secretos. En este...

ESP32-Bit-Pirate

ESP32 Bit Pirate ESP32 Bit Pirate is open-source firmware that turns your device into a multi-protocol development and analysis tool, inspired by the legendary Bus Pirate. It supports sniffing, sending, scripting, and interacting with various digital protocols I2C, UART, 1-Wire, SPI, etc. via a...

Moriarty-Project

Moriarty Project Remastered V4.1.2. Documentation Page https://azizkpln.github.io/moriartyproject/ About Moriarty Project is a powerful web based phone number investigation tool. It has 6 features and it allows you to choose either all features, or the features you like. You can visit documentati...

CVE-2023-48842

CVE-2023-48842 Source : D-Link Go-RT-AC750 revAv101b03 was discovered to contain a command injection vulnerability via the service parameter at hedwig.cgi. https://drive.google.com/file/d/1y5omf2SAhNmcPqDxCSRTvJVAWwPcH/view Little upgrade : I updated the script which is now on steroids, the scrip...

ntopng

ntopng Introduction ntopng® is a web-based network traffic monitoring application released under GPLv3. It is the new incarnation of the original ntop written in 1998, and now revamped in terms of performance, usability, and features. While you can read more about ntopng on the ntop web site...

frida-ui

Frida UI A modern, lightweight, web-based user interface for Frida, designed for Android application penetration testing. It allows you to interact with devices, processes, and scripts directly from your browser. Quick Start root@kitploit: Install using uv recommended or pipx/pip uv tool install...

Auerswald COMfortel 1400/2600/3600 IP - Authentication Bypass

Auerswald COMfortel 1400/2600/3600 IP is susceptible to an authentication bypass vulnerability. Inserting the prefix "/about/../" allows bypassing the authentication check for the web-based configuration management interface. This enables attackers to gain access to the login credentials used for...

1Panel SQL Injection - Authenticated

1Panel is a web-based linux server management control panel. There are many sql injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs. These sql injections have been resolved in version 1.10.12-tls. Users are advised to...

Bastillion

Bastillion A modern, web-based SSH console and SSH key management tool. Bastillion gives you a clean, browser-based way to manage SSH access across all your systems — like a bastion host with a friendly dashboard. It does two things: 1. Web-based SSH terminal — once a host is registered, authoriz...

AD_Miner

AD Miner es una herramienta de auditoría de Active Directory on-premise y Entra ID que: Utiliza consultas Cypher para analizar datos de la base de datos de grafos BloodHound Neo4j. Proporciona una visión general completa de las debilidades existentes a través de un informe estático basado en web...

windiff

WinDiff About WinDiff is an open-source web-based tool that allows browsing and comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the operating system. The binary database is automatically updated to include information from the latest Windo...

recon-ng

The Recon-ng Framework Recon-ng content now available on Pluralsight! Recon-ng is a full-featured reconnaissance framework designed with the goal of providing a powerful environment to conduct open source web-based reconnaissance quickly and thoroughly. Recon-ng has a look and feel similar to the...

recon-ng

El Framework Recon-ng ¡Contenido de Recon-ng ya disponible en Pluralsight! Recon-ng es un framework de reconocimiento completo diseñado con el objetivo de proporcionar un entorno potente para realizar reconocimiento web basado en fuentes abiertas de manera rápida y exhaustiva. Recon-ng tiene una...

OWASP-mth3l3m3nt-framework

OWASP Mth3l3m3nt Framework A slightly major forgive pun upgrade is on going. This is to bring in things like: Easier coding standard Support for PHP 8 More robust features Fix bug requests sent in. This tool is released under GNU Affero General Public License v3. Modules Packed in so far are:...

injectify

Injectify Realiza ataques MiTM avanzados en sitios web con facilidad. ✨ Apoya el desarrollo en Patreon o de una sola vez a través de Paypal Pruébalo | Instalación | Documentación | Trello | Discord Ver lo que hay en la pantalla de la víctima Capacidad de interactuar y hacer clic en botones El...

CVE-2018-18852

CERIO router RCE autenticado credenciales de vendor backdoor CVE-2018-18852 PoC en Python hook-s3c github.com/hook-s3c, @hooks3c en Twitter PoC funcional en Python para CVE-2018-18852, originalmente apareció en; https://github.com/hook-s3c/CVE-2018-18852 ¿Qué hay? Los modelos y variantes de route...