NEW BOT Телеграм, страница - 471170983

Peneter Tools

1.27K subscribers

26 photos

4 videos

56 files

613 links

https://soheilsec.com
https://blog.peneter.com
@learnpentest
@peneter_com
@Peneter_News
@Peneter_Tools
@Peneter_Media
آموزش امنیت
https://www.youtube.com/@soheilsec
اخبار امنیت
https://www.youtube.com/@Peneter

Download Telegram

About

Blog

Apps

Platform

1.27K subscribers

Windows Defender Application Guard DoS via Long Hostname
https://github.com/jdgregson/Disclosures/tree/master/microsoft/wdag-dos-long-hostname

Disclosures/microsoft/wdag-dos-long-hostname at master · jdgregson/Disclosures

My publically disclosed vulnerability reports. Contribute to jdgregson/Disclosures development by creating an account on GitHub.

73 views03:33

Restricted Admin Mode was introduced in Windows 8.1 as an attempt to prevent credential exposure via RDP. While well intentioned, this unfortunately introduced the ability to pass-the-hash to RDP.

https://github.com/GhostPack/RestrictedAdmin

#RestrictedAdmin #PTH

GitHub - GhostPack/RestrictedAdmin: Remotely enables Restricted Admin Mode

Remotely enables Restricted Admin Mode. Contribute to GhostPack/RestrictedAdmin development by creating an account on GitHub.

78 views03:43

OffensivePipeline
OffensivePipeline allows to download, compile (without Visual Studio) and obfuscate C# tools for Red Team exercises.
https://github.com/Aetsu/OffensivePipeline
#redteam

GitHub - Aetsu/OffensivePipeline: OfensivePipeline allows you to download and build C# tools, applying certain modifications in…

OfensivePipeline allows you to download and build C# tools, applying certain modifications in order to improve their evasion for Red Team exercises. - Aetsu/OffensivePipeline

74 views14:27

Raider - Web authentication testing framework
https://github.com/DigeeX/raider
#raider #framework

GitHub - DigeeX/raider: DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider

DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider - GitHub - DigeeX/raider: DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider

85 views08:35

🔥🔥🔥Free,Open-Source,Cross-platform agent and Post-exploiton tool written in Golang and C++, the architecture and usage like Cobalt Strike
https://github.com/geemion/Khepri
#post-Exploit

GitHub - roadwy/RIP

Contribute to roadwy/RIP development by creating an account on GitHub.

98 views21:22

CVE-2021-40444 PoC
https://github.com/lockedbyte/CVE-2021-40444
#office_Exploit #POC

GitHub - lockedbyte/CVE-2021-40444: CVE-2021-40444 PoC

CVE-2021-40444 PoC. Contribute to lockedbyte/CVE-2021-40444 development by creating an account on GitHub.

83 views13:20

spook.js POC
https://news.1rj.ru/str/Peneter_News/23
https://github.com/spookjs/spookjs-poc
#spookjs #Chrome

یک حمله Side channel با نام spook.js که قابلیت دور زدن مکانیسم امنیت Google Chrome که برای حملات Spectre طراحی شده بود را دارد .
https://www.spookjs.com/files/spook-js.pdf
spook.js = transient execution side-channel attack
پ.ن:
حمله Side channel : در واقع…

67 views09:58

A shellcode function to encrypt a running process image when sleeping
https://github.com/SolomonSklash/SleepyCrypt
https://www.solomonsklash.io/SleepyCrypt-shellcode-to-encrypt-a-running-image.html
#obfuscation #sleepycrypt

GitHub - SolomonSklash/SleepyCrypt: A shellcode function to encrypt a running process image when sleeping.

A shellcode function to encrypt a running process image when sleeping. - SolomonSklash/SleepyCrypt

65 views17:33

MSHTML OFFICE Exploit
https://github.com/klezVirus/CVE-2021-40444
Proof on Concept Exploit for CVE-2021-38647 (OMIGOD)
https://github.com/horizon3ai/CVE-2021-38647

GitHub - klezVirus/CVE-2021-40444: CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit

CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit - klezVirus/CVE-2021-40444

58 views10:29

Pentest Tools collection
https://github.com/LuemmelSec/Pentest-Tools-Collection

GitHub - LuemmelSec/Pentest-Tools-Collection

Contribute to LuemmelSec/Pentest-Tools-Collection development by creating an account on GitHub.

66 views10:30

PoC CVE-2021-30632 - Out of bounds write in V8
"Tested against Samsung Internet Browser v15.0.2.47, which does not yet have Google's patch."
Google Chrome
https://github.com/Phuong39/PoC-CVE-2021-30632

GitHub - Phuong39/PoC-CVE-2021-30632: PoC CVE-2021-30632 - Out of bounds write in V8

PoC CVE-2021-30632 - Out of bounds write in V8. Contribute to Phuong39/PoC-CVE-2021-30632 development by creating an account on GitHub.

64 views18:34

Using CodeQL to detect client-side vulnerabilities in web applications
codeql database create example.com --language=javanoscript
codeql database analyze example.com javanoscript-lgtm.qls --format=sarif-latest --output=results.sarif
./unwebpack_sourcemap.py --detect https://example.com/auth/login example.com
https://raz0r.name/articles/using-codeql-to-detect-client-side-vulnerabilities-in-web-applications/
#codeql #vulnerability #scanner #clientside

Raz0r.name — Web Application Security

Using CodeQL to detect client-side vulnerabilities in web applications | Raz0r — Web3 Security

GitHub’s CodeQL is a robust query language originally developed by Semmle that allows you to look for vulnerabilities in the source code. CodeQL is known as a tool to inspect open source repositories, however its usage is not limited just to it. In this article…

73 views20:33

A new Chrome browser extension has been released to help bug bounty hunters find keys that have made their way into JavaScript online.
https://github.com/trufflesecurity/Trufflehog-Chrome-Extension
#Trufflehog #javanoscript #bugbounty #redteam

GitHub - trufflesecurity/Trufflehog-Chrome-Extension

Contribute to trufflesecurity/Trufflehog-Chrome-Extension development by creating an account on GitHub.

62 views12:18

EXOCET - AV-evading, undetectable, payload delivery tool
https://github.com/tanc7/EXOCET-AV-Evasion
#FUD

GitHub - tanc7/EXOCET-AV-Evasion: EXOCET - AV-evading, undetectable, payload delivery tool

EXOCET - AV-evading, undetectable, payload delivery tool - tanc7/EXOCET-AV-Evasion

82 views12:21

Free,Cross-platform,Single-file mass network protocol server simulator
https://github.com/fofapro/fapro
#blueteam

GitHub - fofapro/fapro: Fake Protocol Server

Fake Protocol Server. Contribute to fofapro/fapro development by creating an account on GitHub.

78 views16:36

A post exploitation framework designed to operate covertly on heavily monitored environments
https://blog.dylan.codes/shad0w/

82 views09:33

custom your windows client for redteaming.
https://lnkd.in/gNagi3wb
#redteam

GitHub - mandiant/commando-vm: Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual…

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@fireeye.com - GitHub - mandiant/commando-vm: Complete Mandiant O...

79 views14:35

Forwarded from Zer0Day Lab

Please open Telegram to view this post

VIEW IN TELEGRAM

18:45

https://github.com/dhondta/dronesploit

GitHub - dronesploit/dronesploit: Drone pentesting framework console

Drone pentesting framework console. Contribute to dronesploit/dronesploit development by creating an account on GitHub.

71 views10:28

disable function bypass 0day poc
https://github.com/mm0r1/exploits/tree/master/php-filter-bypass

exploits/php-filter-bypass at master · mm0r1/exploits

Pwn stuff. Contribute to mm0r1/exploits development by creating an account on GitHub.

128 views07:27

NMAP noscript for CVE-2021-41773 (Path Traversal on Apache HTTP Server 2.4.49).

https://github.com/RootUp/PersonalStuff/blob/master/http-vuln-cve-2021-41773.nse

#apache #nmap

PersonalStuff/http-vuln-cve-2021-41773.nse at master · RootUp/PersonalStuff

Upload files done during my research. Contribute to RootUp/PersonalStuff development by creating an account on GitHub.

69 views11:15