SysmonConfigPusher2

SysmonConfigPusher v2 Una herramienta web para gestionar configuraciones de Sysmon en endpoints Windows — compatible con despliegues sin agente WMI/SMB y basados en agente. Características...

trufflehog-explorer

TruffleHog Explorer 🕵️‍♂️ 欢迎使用 TruffleHog Explorer，一个用户友好的基于网页的工具，用于可视化和分析通过 TruffleHog 提取的数据。TruffleHog 是最强大的开源密钥发现、分类、验证和分析工具之一。在此上下文中，密钥是指机器用于向另一台机器进行身份验证的凭据，包括 API 密钥、数据库密码、私钥等。 凭借改进的 UI/UX、强大的过滤选项和导出功能，该工具可帮助安全专业人员高效审查存储库中发现的潜在密钥和凭据。 ⚠️ 此仪表板仅针对 GitHub TruffleHog JSON 输出进行了测试。预计很快会更新以支持更多格式和平台。...

CVE-2018-18852

CERIO router Authenticated RCE backdoor vendor creds CVE-2018-18852 Python PoC hook-s3c github.com/hook-s3c, @hooks3c on twitter Working Python PoC for CVE-2018-18852, originally appearing on; https://github.com/hook-s3c/CVE-2018-18852 What's up CERIO Router models and variants of, DT300N, DT100G...

recon-ng

Das Recon-ng Framework Recon-ng-Inhalte jetzt auf Pluralsight verfügbar! Recon-ng ist ein voll ausgestattetes Aufklärungs-Framework, das mit dem Ziel entwickelt wurde, eine leistungsstarke Umgebung für die Durchführung von Open-Source-Web-basierter Aufklärung schnell und gründlich bereitzustellen...

Moriarty-Project

Moriarty Project Remastered V4.1.2. Página de Documentação https://azizkpln.github.io/moriartyproject/ Sobre Moriarty Project é uma poderosa ferramenta de investigação de números de telefone baseada na web. Possui 6 funcionalidades e permite que você escolha todas as funcionalidades ou as que...

OSRipper

OSRipper v0.4.2 Generatore di payload e cryptor cross-platform avanzato con capacità FUD Caratteristiche • Avvio Rapido • Interfaccia Web • Tipi di Payload • Documentazione Panoramica OSRipper è un sofisticato generatore di backdoor e cryptor completamente non rilevabile FUD, progettato per test ...

c2-cloud

Informazioni sul Progetto C2 Cloud è un robusto framework C2 basato sul web, progettato per semplificare la vita dei penetration tester. Permette un facile accesso alle backdoor compromesse, proprio come accedere a un'istanza EC2 nel cloud AWS. Può gestire diverse sessioni di backdoor simultanee...

CVE-2023-48842

CVE-2023-48842 المصدر : تم اكتشاف أن جهاز D-Link Go-RT-AC750 revAv101b03 يحتوي على ثغرة حقن أوامر عبر معامل service في hedwig.cgi. https://drive.google.com/file/d/1y5omf2SAhNmcPqDxCSRTvJVAWwPcH/view ترقية صغيرة : قمت بتحديث السكربت ليصبح أكثر قوة، حيث يقبل السكربت قائمة من ip:port أو ip فقط إذا ل...

windiff

WinDiff About WinDiff is an open-source web-based tool that allows browsing and comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the operating system. The binary database is automatically updated to include information from the latest Windo...

OWASP-mth3l3m3nt-framework

Framework OWASP Mth3l3mnt Framework Uma atualização ligeiramente grande perdoe o trocadilho está em andamento. Isto traz coisas como: Padrão de codificação mais fácil Suporte para PHP 8 Funcionalidades mais robustas Corrigir pedidos de bugs enviados. Esta ferramenta é distribuída sob a GNU Affero...

AD_Miner

AD Miner è uno strumento di audit per Active Directory on-premise e Entra ID che: Utilizza query Cypher per analizzare i dati del database grafico BloodHound Neo4j. Fornisce una panoramica completa delle vulnerabilità esistenti attraverso un report statico basato sul web. Caratteristiche dei repo...

injectify

Injectify Esegui attacchi MiTM avanzati sui siti web con facilità. ✨ Supporta lo sviluppo su Patreon o con una donazione una tantum via Paypal Prova | Installazione | Documentazione | Trello | Discord Visualizza cosa c'è sullo schermo delle vittime Possibilità di interagire e cliccare pulsanti Lo...

ESP32-Bit-Pirate

ESP32 Bit Pirate ESP32 Bit Pirate è un firmware open-source che trasforma il tuo dispositivo in uno strumento di sviluppo e analisi multi-protocollo, ispirato al leggendario Bus Pirate. Supporta lo sniffing, l'invio, lo scripting e l'interazione con vari protocolli digitali I2C, UART, 1-Wire, SPI...

ntopng

ntopng Introduction ntopng® is a web-based network traffic monitoring application released under GPLv3. It is the new incarnation of the original ntop written in 1998, and now revamped in terms of performance, usability, and features. While you can read more about ntopng on the ntop web site...

Auerswald COMfortel 1400/2600/3600 IP - Authentication Bypass

Auerswald COMfortel 1400/2600/3600 IP is susceptible to an authentication bypass vulnerability. Inserting the prefix "/about/../" allows bypassing the authentication check for the web-based configuration management interface. This enables attackers to gain access to the login credentials used for...

1Panel SQL Injection - Authenticated

1Panel is a web-based linux server management control panel. There are many sql injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs. These sql injections have been resolved in version 1.10.12-tls. Users are advised to...

erlvulnscan

Scanner web concorrente per CVE-2015-1635. Implementazione live in esecuzione qui. Questo sito web dimostrativo viene utilizzato per lo sviluppo di questo progetto e la sua stabilità non è garantita. Le informazioni su questo progetto sono scritte qui. Poiché la lista "TODO" documentata lì è stat...

recon-ng

The Recon-ng Framework Recon-ng content now available on Pluralsight! Recon-ng is a full-featured reconnaissance framework designed with the goal of providing a powerful environment to conduct open source web-based reconnaissance quickly and thoroughly. Recon-ng has a look and feel similar to the...

c2-cloud

About The Project The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cloud. It can manage several simultaneous backdoor sessions with a user-friendly...

patch-checker

PatchChecker This is the code base for the service running on: https://patchchecker.com. In short, PatchChecker is a web application running on flask that provides output similar to that of Watson. However by using PatchChecker, one is not required to execute a binary on the target machine...