synacktiv-contrib Goto Github PK

ajpy

AJPy aims to craft AJP requests in order to communicate with AJP connectors. Reference documentation: https://tomcat.apache.org/connectors-doc/ajp/ajpv13a.html

axsuite

AxSuite is a toolset aimed to retrieve in-memory secrets saved by AxCrypt 1.0

cve-2018-4193

exploit for CVE-2018-4193

exploiting-cve-2017-5123

Source code and configuration files related to our article in MISC96

grehack

inyourface

InYourFace is a software used to patch unencrypted and unsigned JSF ViewStates.

jimmix

JimmX provides a good way to interact with the JMXInvokerServlet and EJBInvokerServlet servlets exposed by JBoss servers <= 6.x (versions 4.x and 5.x are currently supported).

kerberom

Kerberom is a tool aimed to retrieve ARC4-HMAC'ed encrypted Tickets Granting Service (TGS) of accounts having a Service Principal Name (SPN) within an Active Directory. Works on Linux and Windows and support Windows implicit authentication

kernelcache-laundering

load iOS12 kernelcaches and PAC code in IDA

lightspeed

PoC for the iOS 11.4.1 and MacOS 10.13 kernel vulnerability in lio_listio

metasploit-framework

Metasploit Framework

modmobjam

A smart jamming proof of concept for mobile equipments that could be powered with Modmobmap tool

modmobmap

Map 2G/3G/4G and more cellular networks in real live with a simple smart phone, pretty much like osmocomBB monitoring feature.

nmap-scrap

nmap-scrap is an HTTP exploration utility based on Nmap XML outputs. This tool aims to address discovering issues when dealing with large scopes by parsing Nmap XML outputs and extracting only required information.

pcileech

Direct Memory Access (DMA) Attack Software

pcileech_hpilo4_service

PCILeech HP iLO4 Service

rdp2tcp

rdp2tcp is a tunneling tool on top of remote desktop protocol (RDP). It uses RDP virtual channel capabilities to multiplex several ports forwarding over an already established rdesktop session.

stuffz

Repository containing many useful scripts