Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

25 results

NoPacScan

knightswd/nopacscan

Scans Active Directory domain controllers for CVE-2021-42287 and CVE-2021-42278 by querying DNS for all DCs and analyzing PAC structures for the 0x10…

authenticationexploitationnetwork-security+2

874 years ago

Samba-CVE-2021-44142

hrsman/samba-cve-2021-44142

Python tool to check Samba servers for CVE-2021-44142 by leaking heap cookies and pointers via a single SMB connection, demonstrating exploitability.

exploitationnetwork-securitypenetration-testing+2

4 years ago

Metabase_Nmap_Script

grey-master-a/metabase_nmap_script

It is a nmap script for metabase vulnerability (CVE-2021-41277)

exploitationinformation-gatheringnetwork-security+2

4 years ago

GravCMS_Nmap_Script

grey-master-a/gravcms_nmap_script

It is a nmap script for GravCMS vulnerability (CVE-2021-21425)

exploitationnetwork-securitypenetration-testing+2

4 years ago

printnightmare-detection-mitigation-lab

karitamw/printnightmare-detection-mitigation-lab

Sanitised Windows security lab demonstrating Active Directory administration, host and network detection, and layered mitigation of CVE-2021-34527.

digital-forensicseducationidentity-access-management+5

2 months ago

CVE-2021-24086-exp

lisinan988/cve-2021-24086-exp

Proof-of-concept exploit for CVE-2021-24086, a NULL dereference in tcpip.sys causing remote denial of service via malicious UDP packets over IPv6.

exploitationnetwork-securityvulnerability-analysis

15 years ago

CVE-2021-21975

guayoyocyber/cve-2021-21975

Nmap script to check vulnerability CVE-2021-21975

information-gatheringnetwork-securityreconnaissance+3

275 years ago

sdwan-cve-2021-1480

xmco/sdwan-cve-2021-1480

PoC materials to exploit the CVE-2021-1480 on Cico SD-WAN.

command-and-controlexploitationnetwork-security+3

45 years ago

log4j-quick-scan

metodidavidovic/log4j-quick-scan

Scan your IP network and determine hosts with possible CVE-2021-44228 vulnerability in log4j library.

exploitationinformation-gatheringnetwork-security+3

4 years ago

CVE-2021-31166-detection-rules

mvlnetdev/cve-2021-31166-detection-rules

Different rules to detect if CVE-2021-31166 is being exploited

exploitationintrusion-detectionnetwork-security+3

34 years ago

cve-2021-44228

kimobu/cve-2021-44228

CVE-2021-44228 investigation toolkit with Log4j RCE PoC, JNDIExploit payload runner, Snort detection rules, and PCAP analysis for red and blue team…

exploitationincident-responseintrusion-detection+3

14 years ago

nmap-log4shell

giterlizzi/nmap-log4shell

Nmap NSE script for detecting Apache Log4j RCE (CVE-2021-44228) by injecting JNDI exploit payloads via HTTP headers or TCP/UDP sockets across…

exploitationnetwork-securitypayload-generation+4

794 years ago

cve-2021-1675-printnightmare

initconf/cve-2021-1675-printnightmare

Zeek package to detect CVE-2021-1675 (PrintNightmare) by monitoring named pipes and RPC operations for spoolss exploitation attempts.

exploitationids-ips-evasionintrusion-detection+2

5 years ago

cve-2021-44228

corelight/cve-2021-44228

Zeek package for detecting Log4j CVE-2021-44228 exploit attempts via HTTP header payloads, LDAP Java class downloads, and second-stage Java class…

exploitationintrusion-detectionlog-analysis+3

1911 months ago

CVE-2021-42292

corelight/cve-2021-42292

Zeek package detecting CVE-2021-42292 Microsoft Excel local privilege escalation exploit via network traffic analysis of spreadsheet downloads.

exploitationincident-responseintrusion-detection+3

194 years ago

CVE-2021-41773

corelight/cve-2021-41773

Zeek package detecting Apache HTTP Server path traversal/RCE exploits (CVE-2021-41773, CVE-2021-42013) with payload capture and server header…

exploitationincident-responseintrusion-detection+3

14 years ago

CVE-2021-38647-noimages

corelight/cve-2021-38647-noimages

Zeek package detecting CVE-2021-38647 (OMIGOD) exploit attempts by monitoring OMI/WMI traffic for missing Authorization headers and malicious SOAP…

cloud-securityexploitationincident-response+3

2 years ago

CVE-2021-38647

corelight/cve-2021-38647

CVE-2021-38647 AKA "OMIGOD" vulnerability in Windows OMI

exploitationincident-responseintrusion-detection+3

54 years ago