NEW BOT Телеграм, страница - 641182950

Peneter Tools

1.27K subscribers

26 photos

4 videos

56 files

613 links

https://soheilsec.com
https://blog.peneter.com
@learnpentest
@peneter_com
@Peneter_News
@Peneter_Tools
@Peneter_Media
آموزش امنیت
https://www.youtube.com/@soheilsec
اخبار امنیت
https://www.youtube.com/@Peneter

Download Telegram

About

Blog

Apps

Platform

1.27K subscribers

MSHTML OFFICE Exploit
https://github.com/klezVirus/CVE-2021-40444
Proof on Concept Exploit for CVE-2021-38647 (OMIGOD)
https://github.com/horizon3ai/CVE-2021-38647

GitHub - klezVirus/CVE-2021-40444: CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit

CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit - klezVirus/CVE-2021-40444

58 views10:29

Pentest Tools collection
https://github.com/LuemmelSec/Pentest-Tools-Collection

GitHub - LuemmelSec/Pentest-Tools-Collection

Contribute to LuemmelSec/Pentest-Tools-Collection development by creating an account on GitHub.

66 views10:30

PoC CVE-2021-30632 - Out of bounds write in V8
"Tested against Samsung Internet Browser v15.0.2.47, which does not yet have Google's patch."
Google Chrome
https://github.com/Phuong39/PoC-CVE-2021-30632

GitHub - Phuong39/PoC-CVE-2021-30632: PoC CVE-2021-30632 - Out of bounds write in V8

PoC CVE-2021-30632 - Out of bounds write in V8. Contribute to Phuong39/PoC-CVE-2021-30632 development by creating an account on GitHub.

64 views18:34

Using CodeQL to detect client-side vulnerabilities in web applications
codeql database create example.com --language=javanoscript
codeql database analyze example.com javanoscript-lgtm.qls --format=sarif-latest --output=results.sarif
./unwebpack_sourcemap.py --detect https://example.com/auth/login example.com
https://raz0r.name/articles/using-codeql-to-detect-client-side-vulnerabilities-in-web-applications/
#codeql #vulnerability #scanner #clientside

Raz0r.name — Web Application Security

Using CodeQL to detect client-side vulnerabilities in web applications | Raz0r — Web3 Security

GitHub’s CodeQL is a robust query language originally developed by Semmle that allows you to look for vulnerabilities in the source code. CodeQL is known as a tool to inspect open source repositories, however its usage is not limited just to it. In this article…

73 views20:33

A new Chrome browser extension has been released to help bug bounty hunters find keys that have made their way into JavaScript online.
https://github.com/trufflesecurity/Trufflehog-Chrome-Extension
#Trufflehog #javanoscript #bugbounty #redteam

GitHub - trufflesecurity/Trufflehog-Chrome-Extension

Contribute to trufflesecurity/Trufflehog-Chrome-Extension development by creating an account on GitHub.

62 views12:18

EXOCET - AV-evading, undetectable, payload delivery tool
https://github.com/tanc7/EXOCET-AV-Evasion
#FUD

GitHub - tanc7/EXOCET-AV-Evasion: EXOCET - AV-evading, undetectable, payload delivery tool

EXOCET - AV-evading, undetectable, payload delivery tool - tanc7/EXOCET-AV-Evasion

82 views12:21

Free,Cross-platform,Single-file mass network protocol server simulator
https://github.com/fofapro/fapro
#blueteam

GitHub - fofapro/fapro: Fake Protocol Server

Fake Protocol Server. Contribute to fofapro/fapro development by creating an account on GitHub.

78 views16:36

A post exploitation framework designed to operate covertly on heavily monitored environments
https://blog.dylan.codes/shad0w/

82 views09:33

custom your windows client for redteaming.
https://lnkd.in/gNagi3wb
#redteam

GitHub - mandiant/commando-vm: Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual…

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@fireeye.com - GitHub - mandiant/commando-vm: Complete Mandiant O...

79 views14:35

Forwarded from Zer0Day Lab

Please open Telegram to view this post

VIEW IN TELEGRAM

18:45

https://github.com/dhondta/dronesploit

GitHub - dronesploit/dronesploit: Drone pentesting framework console

Drone pentesting framework console. Contribute to dronesploit/dronesploit development by creating an account on GitHub.

71 views10:28

disable function bypass 0day poc
https://github.com/mm0r1/exploits/tree/master/php-filter-bypass

exploits/php-filter-bypass at master · mm0r1/exploits

Pwn stuff. Contribute to mm0r1/exploits development by creating an account on GitHub.

128 views07:27

NMAP noscript for CVE-2021-41773 (Path Traversal on Apache HTTP Server 2.4.49).

https://github.com/RootUp/PersonalStuff/blob/master/http-vuln-cve-2021-41773.nse

#apache #nmap

PersonalStuff/http-vuln-cve-2021-41773.nse at master · RootUp/PersonalStuff

Upload files done during my research. Contribute to RootUp/PersonalStuff development by creating an account on GitHub.

69 views11:15

Run Powershell without software restrictions.
https://github.com/iomoath/PowerShx

GitHub - iomoath/PowerShx: Run Powershell without software restrictions.

Run Powershell without software restrictions. Contribute to iomoath/PowerShx development by creating an account on GitHub.

77 views13:11

https://github.com/jonathandata1/ios_15_rce

64 views11:38

https://github.com/x0xr00t/win-server2022-UAC-Bypass

GitHub - x0xr00t/win-server2022-UAC-Bypass: UAC BYPASS win10 win11 ws2019 ws2022

UAC BYPASS win10 win11 ws2019 ws2022. Contribute to x0xr00t/win-server2022-UAC-Bypass development by creating an account on GitHub.

69 views14:50

New version of #BurpSuite Exporter extension.
Fixed minor bugs, added support for HTML Forms, Ruby Net::HTTP, JavaScript XHR and a Tab to search HTTP Requests.
https://github.com/artssec/burp-exporter
#bugbounty #bugbountytips

GitHub - artssec/burp-exporter: Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming…

Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions. - artssec/burp-exporter

78 views14:56

Forwarded from Zer0Day Lab

Please open Telegram to view this post

VIEW IN TELEGRAM

15:05

https://github.com/ZeusBox/CVE-2021-37980/blob/main/cve-2021-37980.cpp

CVE-2021-37980/cve-2021-37980.cpp at main · ZeusBox/CVE-2021-37980

PoC CVE-2021-37980 : Inappropriate implementation in Sandbox (windows only) - ZeusBox/CVE-2021-37980

72 views06:27

Ddosify - High-performance load testing tool

https://github.com/ddosify/ddosify

#loadtesting #Ddosify

GitHub - getanteon/anteon: Anteon (formerly Ddosify): eBPF-based Kubernetes Monitoring and Performance Testing

Anteon (formerly Ddosify): eBPF-based Kubernetes Monitoring and Performance Testing - getanteon/anteon

69 views11:32

Dumping SAM / SECURITY / SYSTEM registry hives with a Beacon Object File

https://github.com/EncodeGroup/BOF-RegSave

#cobaltstrike

GitHub - EncodeGroup/BOF-RegSave: Dumping SAM / SECURITY / SYSTEM registry hives with a Beacon Object File

Dumping SAM / SECURITY / SYSTEM registry hives with a Beacon Object File - EncodeGroup/BOF-RegSave

78 views11:36