NEW BOT Телеграм, страница

53 views08:35

another great tool for finding subdomain takeover vulnerabilities with AWS accounts.
details :
https://blog.assetnote.io/2022/02/13/dangling-eips/
Tool:
https://github.com/assetnote/ghostbuster

54 views08:44

Peneter Tools

Proof of Concept for EFSRPC Arbitrary File Upload (CVE-2021-43893) in domain
https://github.com/jbaines-r7/blankspace

GitHub

GitHub - jbaines-r7/blankspace: Proof of Concept for EFSRPC Arbitrary File Upload (CVE-2021-43893)

Proof of Concept for EFSRPC Arbitrary File Upload (CVE-2021-43893) - jbaines-r7/blankspace

379 viewsedited 08:51

Peneter Tools

در یک کار تحقیقاتی روند رسیدن به عکس با وضوح از عکس بلور شده رو پیاده سازی کرده اند.
https://arxiv.org/pdf/1702.00783.pdf
هرگز هرگز از پیکسل سازی به عنوان یک تکنیک ویرایش استفاده نکنید .
https://github.com/bishopfox/unredacter

GitHub

GitHub - BishopFox/unredacter: Never ever ever use pixelation as a redaction technique

Never ever ever use pixelation as a redaction technique - BishopFox/unredacter

397 views14:10

Peneter Tools

https://www.synacktiv.com/publications/how-to-exploit-cve-2021-40539-on-manageengine-adselfservice-plus.html
https://github.com/synacktiv/CVE-2021-40539

Synacktiv

How to exploit CVE-2021-40539 on ManageEngine ADSelfService Plus

58 views16:47

Peneter Tools

A new update with Autoruns v14.09, ProcMon v3.89, Sysmon v13.33 and ZoomIt v5.10 has now been posted!
Get the tools at http://sysinternals.com

Docs

Sysinternals - Sysinternals

Library, learning resources, downloads, support, and community. Evaluate and find out how to install, deploy, and maintain Windows with Sysinternals utilities.

51 views09:51

Peneter Tools

A python noscript to extract information from a Microsoft Remote Desktop Web Access (RDWA) application
https://github.com/p0dalirius/RDWArecon

GitHub

GitHub - p0dalirius/RDWAtool: A python noscript to extract information from a Microsoft Remote Desktop Web Access (RDWA) application

A python noscript to extract information from a Microsoft Remote Desktop Web Access (RDWA) application - GitHub - p0dalirius/RDWAtool: A python noscript to extract information from a Microsoft Remote ...

56 views12:18

Peneter Tools

Gather and update all available and newest CVEs with their PoC.
https://github.com/trickest/cve
#CVE #POC

GitHub

GitHub - trickest/cve: Gather and update all available and newest CVEs with their PoC.

Gather and update all available and newest CVEs with their PoC. - trickest/cve

54 views12:27

Peneter Tools

RCE Github Desktop <v2.9.4
https://github.com/Metnew/write-ups/tree/main/rce-github-desktop-2.9.3

GitHub

write-ups/rce-github-desktop-2.9.3 at main · Metnew/write-ups

Contribute to Metnew/write-ups development by creating an account on GitHub.

48 views18:27

Peneter Tools

WiFi Zero Click RCE Trigger PoC CVE-2021-1965
https://github.com/parsdefense/CVE-2021-1965

48 views18:28

Peneter Tools

https://0xsha.io/blog/a-samba-horror-story-cve-2021-44142
https://gist.github.com/0xsha/0859033e1777490576923a27fbcd23ac

Gist

CVE-2021-44142 PoC Samba 4.15.0 OOB Read/Write

CVE-2021-44142 PoC Samba 4.15.0 OOB Read/Write . GitHub Gist: instantly share code, notes, and snippets.

46 views18:30

Peneter Tools

A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365
https://github.com/darkquasar/AzureHunter

GitHub

GitHub - darkquasar/AzureHunter: A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365

A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365 - darkquasar/AzureHunter

48 views18:31

Peneter Tools

Macrome - Excel Macro Document Reader/Writer For Red Teamers And Analysts
https://www.ired.dev/irb/macrome-excel-macro-document-readerwriter-for-red-teamers-and-analysts-1d11

iRed.DEV

Macrome - Excel Macro Document Reader/Writer For Red Teamers And Analysts

An Excel Macro Document Reader/Writer for Red Teamers & Analysts. Blog posts describing what...

68 views18:32

Peneter Tools

Run application as system with interactive system process support (active Windows session)
https://github.com/DarkCoderSc/PowerRunAsSystem

GitHub

GitHub - PhrozenIO/PowerRunAsSystem: PowerRunAsSystem is a PowerShell noscript, also available as an installable module through the…

PowerRunAsSystem is a PowerShell noscript, also available as an installable module through the PowerShell Gallery, designed to impersonate the NT AUTHORITY/SYSTEM user and execute commands or launch ...

59 views18:32

Peneter Tools

metasploit —exploit for CVE-2022-21882 (Win32k LPE)
https://github.com/rapid7/metasploit-framework/pull/16202

GitHub

Add exploit for CVE-2022-21882 (Win32k LPE) by zeroSteiner · Pull Request #16202 · rapid7/metasploit-framework

This adds an exploit for CVE-2022-21882 which is a patch bypass for CVE-2021-1732. It updates and combines both techniques into a single mega-exploit module that will use the updated technique as n...

61 views18:33

Peneter Tools

Certipy 2.0: BloodHound, New Escalations, Shadow Credentials, Golden Certificates, and more!
شامل 8 روش برای بالا بردن سطح دسترسی در دامین با استفاده از آسیب پذیری و اشتباه در کانفیگ
https://github.com/ly4k/Certipy
https://research.ifcr.dk/certipy-2-0-bloodhound-new-escalations-shadow-credentials-golden-certificates-and-more-34d1c26f0dc6
#ceripy

GitHub

GitHub - ly4k/Certipy: Tool for Active Directory Certificate Services enumeration and abuse

Tool for Active Directory Certificate Services enumeration and abuse - ly4k/Certipy

50 viewsedited 09:57

Peneter Tools

https://github.com/gokulapap/Reconator

GitHub

GitHub - gokulapap/Reconator: Automated Recon for Pentesting & Bug Bounty

Automated Recon for Pentesting & Bug Bounty. Contribute to gokulapap/Reconator development by creating an account on GitHub.

53 views10:01

Peneter Tools

Zenith exploits a memory corruption vulnerability in the NetUSB driver to get remote-code execution on the TP-Link Archer C7 V5 router for Pwn2Own Austin 2021.
https://github.com/0vercl0k/zenith

GitHub

GitHub - 0vercl0k/zenith: Zenith exploits a memory corruption vulnerability in the NetUSB driver to get remote-code execution on…

Zenith exploits a memory corruption vulnerability in the NetUSB driver to get remote-code execution on the TP-Link Archer C7 V5 router for Pwn2Own Austin 2021. - 0vercl0k/zenith

53 views10:04

Peneter Tools

https://github.com/bleedx-93/Winphish

GitHub

GitHub - bleedx-93/Winphish

Contribute to bleedx-93/Winphish development by creating an account on GitHub.

53 views13:22

Peneter Tools

Reverse Shell
https://github.com/jafarlihi/rconn