walterjia Goto Github PK

apache-struts-shodan-exploit

This tool takes advantage of CVE-2018-11776 and Shodan to perform mass exploitation of verified and vulnerable Apache Struts servers.

apiclarity

An API security tool to capture and analyze API traffic, test API endpoints, reconstruct Open API specification, and identify API security risks. 

aria2

aria2 is a lightweight multi-protocol & multi-source, cross platform download utility operated in command-line. It supports HTTP/HTTPS, FTP, SFTP, BitTorrent and Metalink.

asus-cmd

ASUS Router infosvr UDP Broadcast root Command Execution

attackdetection

Attack Detection

autofocus-client-library

A python client library for interfacing with the autofocus rest services

badkernel

Full exploit of CVE-2016-6754(BadKernel) and slide of SyScan360 2016

badtunnel

Attack program in server endpoint for BadTunnel

bashlex

Python parser for bash

bat

Bro Analysis Tools (BAT): Processing and analysis of Bro network data with Pandas, scikit-learn, and Spark

bcc

BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more

bro

Bro is a powerful network analysis framework that is much different from the typical IDS you may know. Official mirror of git.bro.org/bro.git .

c2concealer

C2concealer is a command line tool that generates randomized C2 malleable profiles for use in Cobalt Strike.

chakra-2016-11

Proof-of-Concept exploit for Edge bugs (CVE-2016-7200 & CVE-2016-7201)

cobaltstrike

Code and yara rules to detect and analyze Cobalt Strike

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

cowrie

Cowrie SSH/Telnet Honeypot

cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system

cuckoo-linux

Linux malware analysis based on Cuckoo Sandbox.

cve-2016-4438

cve-2017-0199

Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.

cve-2017-10271

CVE-2017-10271 WEBLOGIC RCE (TESTED)

cve-2017-11882

Proof-of-Concept exploits for CVE-2017-11882

cve-2017-11882-metasploit

This is a Metasploit module which exploits CVE-2017-11882 using the POC released here : https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about.

cve-2017-7494

Proof-of-Concept exploit for CVE-2017-7494(Samba RCE from a writable share)

cve-2017-8759

CVE-2017-8759

cve-2018-1002105

Test utility for cve-2018-1002105

cve-2018-11788

Apache Karaf XXE Vulnerability (CVE-2018-11788)

cve-2018-2628

CVE-2018-2628