Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user
Known issues
- it will not work outside kali , i will update it later on :)
Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user
Overview
A Docker based LDAP RCE exploit demo for CVE-2021-44228 Log4Shell
log4j-poc An LDAP RCE exploit for CVE-2021-44228 Log4Shell Description This demo Tomcat 8 server has a vulnerable app deployed on it and is also vulne
60 Dec 10, 2022
A python script to decrypt media files encrypted using the Android application 'Decrypting 'LOCKED Secret Calculator Vault''. Will identify PIN / pattern.
A python script to decrypt media files encrypted using the Android application 'Decrypting 'LOCKED Secret Calculator Vault''. Will identify PIN / pattern.
3 Sep 26, 2022
Facebook Fast Cracking Tool With Python
Pro-Crack Facebook Fast Cracking Tool This is a multi-passwordโ cracking tool that can help you hack facebook accounts very quickly Installation On Te
5 Feb 19, 2022
This tool allows to automatically test for Content Security Policy bypass payloads.
CSPass This tool allows to automatically test for Content Security Policy bypass payloads. Usage [cspass]$ ./cspass.py -h usage: cspass.py [-h] [--no-
30 Nov 22, 2022
Whois-Python - Get Whois Domain with Python GUI
Whois-Python-GUI Get Whois Domain with Python - GUI :) WARNING Dont Copy ! - W
3 Feb 21, 2022
Providing DevOps and security teams script to identify cloud workloads that may be vulnerable to the Log4j vulnerability(CVE-2021-44228) in their AWS account.
We are providing DevOps and security teams script to identify cloud workloads that may be vulnerable to the Log4j vulnerability(CVE-2021-44228) in their AWS account. The script enables security teams
13 Jan 04, 2022
Metal Gear Online 2 (MGO2) stage files decryption
Metal Gear Online 2 decryption tool Metal Gear Online 2 (MGO2) has an additional layer of encryption for stage files. I was not able to find info abou
4 Sep 02, 2022
Open-source jailbreaking tool for many iOS devices
Open-source jailbreaking tool for many iOS devices *Read disclaimer before using this software. checkm8 permanent unpatchable bootrom exploit for hund
6.7k Jan 05, 2023
Fast and customizable vulnerability scanner For JIRA written in Python
Fast and customizable vulnerability scanner For JIRA. ๐ค What is this? Jira-Lens ๐ is a Python Based vulnerability Scanner for JIRA. Jira is a propri
185 Dec 25, 2022
Everything I needed to understand what was going on with "Spring4Shell" - translated source materials, exploit, links to demo apps, and more.
springcore-0day-en These are all my notes from the alleged confirmed! 0day dropped on 2022-03-29. This vulnerability is commonly referred to as "Sprin
105 Nov 26, 2022
Compilation of resources and insights that helped me on my journey to data scientist
Compilation of resources and insights that helped me on my journey to data scientist
1.5k Jan 02, 2023
ไฝฟ็จgolang้ๅๅผๆบๅทฅๅ ทwafw00f
GO-WAFW00F ไป็ป WAFW00Fๆฏไธๆฌพไผ็ง็webๅบ็จ้ฒ็ซๅข่ฏๅซๅผๆบๅทฅๅ ท๏ผhttps://github.com/EnableSecurity/wafw00f ไฝฟ็จGolang้ๅ็ๅๅ ๏ผPython็ฏๅข้ ็ฝฎไธไพฟๅฉ๏ผGolangๆๅ ็ๆๅฏๆง่กๆไปถ็ดๆฅ่ฟ่ก ็ฎๅ่ฟๅจๅผๅ้ถๆฎต๏ผ่งๅ่งฃๆๅญๅจๅฐ้ฎ้ข
80 Dec 30, 2021
A honeypot for the Log4Shell vulnerability (CVE-2021-44228)
Log4Pot A honeypot for the Log4Shell vulnerability (CVE-2021-44228). License: GPLv3.0 Features Listen on various ports for Log4Shell exploitation. Det
79 Dec 27, 2022
Extendable payload obfuscation and delivery framework
NSGenCS What Is? An extremely simple, yet extensible framework to evade AV with obfuscated payloads under Windows. Installation Requirements Currently
123 Dec 19, 2022
2022-bridge - Example code belonging to the Bridge pattern video
Let's Take The Bridge Pattern To The Next Level This video covers how the bridge
11 Jun 14, 2022
SSH Tool For OSINT and then Cracking.
sshmap SSH Tool For OSINT and then Cracking. Linux Systems Only Usage: Scanner Syntax: scanner start/stop/status - Sarts/stops/sho
5 Apr 04, 2022
xp_CAPTCHA(็ฝๅซ็) burp ้ช่ฏ็ ่ฏๅซ burpๆไปถ
xp_CAPTCHA(็ฝๅซ็) ่ฏดๆ xp_CAPTCHA (็ฝๅซ็) ้ช่ฏ็ ่ฏๅซ burpๆไปถ ๅฎ่ฃ ้่ฆpython3 ๅฐไบ3.7็็ๆฌ ๅฎ่ฃ muggle_ocr ๆจกๅ๏ผๅคงๆฆ400Mๅทฆๅณ๏ผ python3 -m pip install -i http://mirrors.aliyun.com/
588 Jan 09, 2023
TightVNC Vulnerability.
CVE-2022-23967 In TightVNC 1.3.10, there is an integer signedness error and resultant heap-based buffer overflow in InitialiseRFBConnection in rfbprot
15 Jul 11, 2022
Discord exploit allowing you to be unbannable.
Discord-Ban-Immunity Discord exploit allowing you to be unbannable. 9/3/2021 Found in late August. Found by Passive and Me. Explanation If a user gets
9 Nov 23, 2022
๐พ๐๐๐ ๐๐๐๐๐๐ ๐๐๐๐๐๐ - ๐ฝ๐ ๐ฒ๐๐๐ข๐๐๐๐๐ - ๐๐๐๐ ๐๐๐๐ - ๐๐๐๐๐๐ ๐ฟ๐ข๐๐๐๐ ๐ฟ๐๐๐๐๐๐ - ๐ฒ๐๐๐๐๐๐ ๐ฑ๐ข : ๐ฐ๐๐ ๐๐๐๐ - ๐ฒ๐๐๐ข๐ฟ๐๐๐ ๐ฒ๐๐ ๐ฝ๐๐ ๐ผ๐๐๐ ๐๐๐ ๐๐๐๐ ๐ฟ๐๐๐๐๐๐๐๐๐
๐พ๐๐๐ ๐๐๐๐๐๐ ๐๐๐๐๐๐ - ๐ฝ๐ ๐ฒ๐๐๐ข๐๐๐๐๐ - ๐๐๐๐ ๐๐๐๐ - ๐๐๐๐๐๐ ๐ฟ๐ข๐๐๐๐ ๐ฟ๐๐๐๐๐๐ - ๐ฒ๐๐๐๐๐๐ ๐ฑ๐ข : ๐ฐ๐๐ ๐๐๐๐ - ๐ฒ๐๐๐ข๐ฟ๐๐๐ ๐ฒ๐๐ ๐ฝ๐๐ ๐ผ๐๐๐ ๐๐๐ ๐๐๐๐ ๐ฟ๐๐๐๐๐๐๐๐๐
2 Oct 27, 2022