http-breakout-proxy

HTTP Breakout Proxy A lightweight HTTP/HTTPS intercepting proxy and traffic analysis tool written in Go, with a web-based UI for inspecting, filtering, coloring, and annotating captured traffic in real time. Overview HTTP Breakout Proxy functions as both an HTTP and HTTPS MITM proxy and a live...

xpfarm

XPFarm An open-source vulnerability scanner that wraps well-known open-source security tools behind a single web UI. Index Section| Description ---|--- Why| Motivation and philosophy behind XPFarm Wrapped Tools| The 10 open-source tools orchestrated by XPFarm Architecture Map| Full system...

Cisco_CVE-2023-20198

CiscoCVE-2023-20198 Cisco CVE-2023-20198 👉 Cisco warned of a critical authentication bypass zero-day vulnerability CVE-2023-20198 in its IOS XE software that allows unauthenticated attackers to gain full administrative privileges. 👨‍💻 The vulnerability only affects devices with the Web User...

scoringengine

Scoring Engine Scoring Engine is an open-source platform for running Red/White/Blue team cybersecurity competitions. It automates service checks each round and provides a web-based scoreboard and configuration interface. Features Automated scheduling and execution of service checks Distributed...

evtx

EVTX A cross-platform parser for the Windows XML EventLog format Features 🔒 Implemented using 100% safe rust - and works on all platforms supported by rust that have stdlib. ⚡ Fast - see benchmarks below. It's faster than any other implementation by orders of magnitude! 🚀 Multi-threaded. ✨ Suppor...

IotShark

cs219-f19-final-project IoTShark This is our final project for CS 219 for the Fall 2019 quarter. IoTShark is a IOT monitoring service that allows users to monitor their IOT devices for trends in data sent/received. Ordinarily, setting up a man in the middle attack with proper configurations can...

RedbloodC2

Public version of Redblood C2 root@kitploit: This is a simple command and control server to handle sessions and your victims installation root@kitploit: $ git clone https://github.com/kira2040k/RedbloodC2.git $ cd RedbloodC2 $ npm install $ node server.js Usage root@kitploit: After install node.j...

permission-manager

Permission manager Welcome to the Permission Manager! 🎉 🎉 Permission Manager is an application developed by SIGHUP that enables a super-easy and user-friendly RBAC management for Kubernetes. If you are looking for a simple and intuitive way of managing your users within a Kubernetes cluster, this...

SteppingStones

Stepping Stones Purpose A hub for Red Team activity to aid in record keeping, situational awareness and reporting. Stepping Stones provides a web based UI for the team to log activity and generate report snippets. The UI is intended to be rapid enough to be used throughout the engagement, not jus...

jaeles

!IMPORTANT This repository has been archived and is no longer maintained. Check out github.com/vigolium/vigolium — a brand new scanner that I made that's better in every way. Jaeles is a powerful, flexible and easily extensible framework written in Go for building your own Web Application Scanner...

CVE-2017-6640-POC

CVE-2017-6640-POC Prueba de concepto para CVE-2017-6640 como extensión de Burp Cisco Prime Data Center Network Manager DCNM implementa credenciales estáticas. Ver también: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm2 Más específicamente, la interfa...

xpfarm

XPFarm An open-source AI-augmented offensive security platform that wraps well-known security tools behind a unified web UI — with distributed scanning, AI-generated reports, a smart scan planner, an interactive attack graph, and a community Plugin SDK. Also check out ObsidianBox Modern on Google...

cve-2023-20198-poc-cisco

CVE-2023-20198-poc CVE-2023-20198 es una vulnerabilidad grave en la función de interfaz web del software Cisco IOS XE que permite a atacantes remotos no autenticados crear cuentas con nivel de privilegio 15 en sistemas afectados, lo que les otorga control total del dispositivo. Esta vulnerabilida...

vulnerablecode

============== VulnerableCode VulnerableCode is a database of software package vulnerabilities with Web UI and API. Why Use VulnerableCode? VulnerableCode provides a Web UI and API to access a database of known software package vulnerabilities with comprehensive information from upstream and...

Exihibitor-RCE

Exhibitor-RCE Exhibitor Web Ui 1.7.1 RCE, CVE-2019-5029 Paso 1: $ git clone https://github.com/thehunt1s0n/Exihibitor-RCE/ Paso 2: $ cd Exihibitor-RCE/ Paso 3 opcional: Es posible que necesites editar la carga útil de datos json en el script. Para ello, simplemente captura la solicitud usando Bur...

CVE-2023-20198

CVE 2023-20198 Introduction The web UI component of Cisco IOS XE Software has a previously undiscovered vulnerability that, when exposed to the internet or untrusted networks, is already being actively exploited, according to Cisco. Due to this vulnerability, a remote, unauthenticated attacker is...

CVE-2023-20198

🔍 Escáner de Vulnerabilidad de la Interfaz Web de Cisco IOS XE - CVE-2023-20198 🚨 🚫 Riesgo Crítico | CVSS: 10.0 | 📅 Actualizado: 17 Oct 2023 Resumen: Un escáner rápido y potente para detectar vulnerabilidades críticas en la interfaz web del software Cisco IOS XE. ¡Proteja su sistema del acceso de...

SnitchDNS

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/SnitchDNS for the latest version. SnitchDNS SnitchDNS is a database driven DNS Server with a Web UI, written in Python and Twisted, that makes DNS administration easier with all configuration changed applied instantly without...

dp_crypto

dpcrypto Base64-based encryption oracle exploit for CVE-2017-9248 Telerik UI for ASP.NET AJAX dialog handler Published on exploit-db Update 2020 - Please note that the version on exploit-db is now very out of date compared to the latest version here on GitHub...

Simple-Ansible-for-CVE-2023-20198

Simple-Ansible-for-CVE-2023-20198 Este es un playbook muy sencillo para detectar y deshabilitar el servidor http/https para prevenir la vulnerabilidad. Comenzando Simplemente use el sandbox Always on de Cisco para probar el ejemplo 1. Inicie sesión en el router sandbox y active el servidor...