WinFlesher
mindsflee/winflesherAutomated attack surface assessment framework for Active Directory and local infrastructures, correlating vulnerabilities with attack paths to domain…
configuration-auditinglateral-movementpenetration-testing+4
25
mindsflee/winflesherAutomated attack surface assessment framework for Active Directory and local infrastructures, correlating vulnerabilities with attack paths to domain…
itzexploit/cve-2017-8056Python-based exploit for CVE-2017-8056 targeting XML-RPC denial-of-service vulnerability in web applications.
jas502n/cve-2019-11043php-fpm+Nginx RCE
arcanum-sec/wraithBrowser-hooking framework for authorized red teams and educators. Hooks browsers via XSS, provides interactive post-exploitation control, blind-XSS…
noraj/oscp-exam-report-template-markdown:orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report
nodauf/girshAutomatically spawn a reverse shell fully interactive for Linux or Windows victim
hacip/cve-2023-33405Proof-of-concept exploit for an open redirect vulnerability (CVE-2023-33405) in BlogEngine.NET CMS versions 3.3.8.0 and earlier, demonstrating…
intuitem/ciso-assistant-communityGRC platform for risk management, compliance, and audit with 200+ frameworks, automatic control mapping, vulnerability management, and incident…
praetorian-inc/wasmforgeWasmForge — compile Go and C# programs to single-binary, WASM-sandboxed native executables with polymorphic output.
digitalruby/ipbanAutomated IP ban service that detects failed login attempts from event logs and files, blocking attackers on Windows and Linux via firewall…
owasp/wrongsecretsVulnerable app with examples showing how to not use secrets
cloudfuzz/android-kernel-exploitationHands-on workshop for learning Android kernel vulnerability analysis and exploitation, with Docker-based build environment and practical exercises.
tomiwa-ot/mouktharAndroid remote administration tool
santoku/santoku-linuxLinux Distro for Mobile Security, Malware Analysis, and Forensics
dgtlmoon/changedetection.ioBest and simplest tool for website change detection, web page monitoring, and website change alerts. Perfect for tracking content changes, price…
activecm/ritaReal Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
aydinnyunus/wifipassword-stealerGet All Registered Wifi Passwords from Target Computer.