The BoB Web Application Security Project (BWASP) is an open-source, analysis tool to support for Web Vulnerability Manual Analysis hackers. …
NodeSecurityShield – A Developer And Security Engineer Friendly Package For Securing NodeJS Applications
A Developer and Security Engineer friendly package for Securing NodeJS Applications. Inspired by the log4J vulnerability (CVE-2021-44228) which can be …
RogueAssemblyHunter – Rogue Assembly Hunter Is A Utility For Discovering ‘Interesting’ .NET CLR Modules In Running Processes
Rogue Assembly Hunter is a utility for discovering ‘interesting’ .NET CLR modules in running processes. Background .NET is a very …
Microsoft: The Ransomware ware is Changing, Here’s What You Need to Know
Microsoft has highlighted RaaS, also known as ransomware as a service, as a criminal company relying on freelancers and is …
Heyserial – Programmatically Create Hunting Rules For Deserialization Exploitation With Multiple Keywords, Gadget Chains, Object Types, Encodings, And Rule Types
Programmatically create hunting rules for deserialization exploitation with multiple keywords (e.g. cmd.exe) gadget chains (e.g. CommonsCollection) object types (e.g. ViewState, …
DuplicateDump – Dumping LSASS With A Duplicated Handle From Custom LSA Plugin
DuplicateDump is a fork of MirrorDump with following modifications: DInovke implementation LSA plugin DLL written in C++ which could be …
Spring4Shell-Poc – Spring Core RCE 0-day Vulnerability
Description of the vulnerability: https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html Construction of the POC: https://github.com/BobTheShoplifter/Spring4Shell-POC Steps to Build/Run Tested with JDK 11.0.14, Spring Boot 2.6.5, …
Vulnerabilities That Allow Hijacking of Most Ransomware to Prevent File Encryption
A cyber-attack is a malicious attack undertaken by cybercriminals against single or numerous computers, computer systems, networks, or infrastructures utilizing …
AutoResponder – Carbon Black Response IR Tool
AutoResponder is a tool aimed to help people to carry out their Incident Response tasks WITH the help of Carbon …
CVE-Tracker – With The Help Of This Automated Script, You Will Never Lose Track Of Recently Released CVEs
With the help of this automated script, you will never lose track of newly released CVEs. What does this powershell …