SyntheticSun is a defense-in-depth security automation and monitoring framework which utilizes threat intelligence, machine learning, managed AWS security services and,...
I Need More InformationCheck out our RPC Firewall blog post to gain better understanding of RPC, RPC attacks and the...
Office 365 and Exchange EnumerationIt is widely known that OWA (Outlook Webapp) is vulnerable to time-based user enumeration attacks. This...
lsarelayx is system wide NTLM relay tool designed to relay incoming NTLM based authentication to the host it is running...
RIoTPot is an interoperable medium interaction honeypot, primarily focused on the emulation IoT and OT protocols, although, it is also...
Skrull is a malware DRM, that prevents Automatic Sample Submission by AV/EDR and Signature Scanning from Kernel. It generates launchers...
Welcome to the labs for Practical Cosmo?You may be wondering, why is there a picture of a handsome cat in...
As Happy New Year wishes the KitPloit team! If you like the site, please consider joining the telegram channel or...
Snap Scraper is an open source InstallationMacOSDownload the current linked binary in the most recent release. Using terminal ensure you...
SourceLeakHacker is a muilt-threads web directories scanner.Installationpip install -r requirements.txtUsage dictionary scale --output OUTPUT output folder, default: result/YYYY-MM-DD hh:mm:ss --threads THREADS,...
Feature-rich Onion Service manager for UNIX-like operating systems written in POSIX conformant shellscriptA collection of EchosystemOnion Services are the Hidden...
Playing around with the 2. Query created process to extract its base address pointer from PEB (Process Environment Block).3. Read...
Spam Scanner is the best anti-spam, email filtering, and phishing prevention service. Spam Scanner is a drop-in replacement and the...
Spray365 is a password spraying tool that identifies valid credentials for Spraying Getting StartedInstallationClone the repository, install the required Python...
A script for automatize boolean-based blind SQL injections. Works with Note: please, use it only for your own servers or...
First of all - credit to CreateProcessAsUserW with SpoolSample trigger:c:tempMultiPotato> MultiPotato.exe -t CreateProcessAsUserW -p "pwnedpipespoolss" -e "C:tempstage2.exe"And trigger it viac:tempMultiPotato>MS-RPRN.exe...
TrojanSourceFinder helps developers detect "Trojan Source" Homoglyph AlternativeAs mentioned by @ioah86 here, trojan source could also been detected w/ a one...
IoT This project provides IoT malware similarity analysis based on shared codes. It helps to identify other malwares that have...
With the State Graph WidgetShows the provenance tree for a certain state selected in the list widget. Tab can be...
Web Cache Vulnerability Scanner (WCVS) is a fast and versatile CLI scanner for web cache poisoning developed by Hackmanit.The scanner...
Enhance your RequirementsGo 1.16+jqistioInstallationgit clone https://github.com/chen-keinan/mesh-kridikcd mesh-kridikmake buildNote: mesh-kridik require root user to be executedQuick StartExecute Mesh-Kridik without any flags...
Mariana Trench is a security focused The issue tells you that Mariana Trench found a remote code execution in MainActivity.onCreate...
A fully automated, accurate, and extensive scanner for finding DescriptionWe have been researching the Log4J RCE (CVE-2021-44228) since it was...
Detects Log4J versions on your file-system within any application that are vulnerable to CVE-2021-44228 and CVE-2021-45046. It is able to...
