advanced-threat-research / CreosoteLinks
Creosote is our solution to searching for the tarfile vulnerability described by CVE-2007-4559.
☆84Updated 2 years ago
Alternatives and similar repositories for Creosote
Users that are interested in Creosote are comparing it to the libraries listed below
Sorting:
- Artifacts to the ALPACA attack.☆60Updated 3 years ago
- ☆169Updated 2 years ago
- CQ, a code security scanner☆100Updated last year
- Determine whether your compute is truly vulnerable to a specific vulnerability by accounting for all factors which affect *actual* exploi…☆141Updated last year
- ☆104Updated 2 years ago
- quicmap is a simple yet quic (!) QUIC protocol scanner☆87Updated last year
- GTFOArgs is a curated list of programs and their associated arguments that can be exploited to gain privileged access or execute arbitrar…☆130Updated 8 months ago
- PCAP visualization tool☆103Updated 2 years ago
- ☆206Updated 3 weeks ago
- ☆48Updated 5 months ago
- CveXplore☆41Updated 2 weeks ago
- IOCs published by Black Lotus Labs☆122Updated last month
- Tools for investigating Log4j CVE-2021-44228☆95Updated 3 years ago
- Whalescan is a vulnerability scanner for Windows containers, which performs several benchmark checks, as well as checking for CVEs/vulner…☆155Updated 2 years ago
- High signal information security sources Goggle.☆67Updated 2 years ago
- Arya is a unique tool that produces pseudo-malicious files meant to trigger YARA rules. You can think of it like a reverse YARA.☆250Updated 2 years ago
- Documentation of Semgrep: a fast, open-source, static analysis tool.☆41Updated this week
- HTTP Headers Hashing (HHHash) is a technique used to create a fingerprint of an HTTP server based on the headers it returns.☆77Updated last year
- ☆115Updated 2 years ago
- Detections for CVE-2021-44228 inside of nested binaries☆34Updated 3 years ago
- A server providing RESTful access to CyberChef☆151Updated 4 months ago
- Artifacts for the Black Hat talk.☆103Updated 4 years ago
- Tool to guess CPE name based on common software name☆100Updated 7 months ago
- Faraday's Command Line Interface☆50Updated 6 months ago
- findCDN is a tool created to help accurately identify what CDN a domain is using.☆118Updated last month
- A toolbox for extracting RSA private keys from public keys.☆185Updated 3 years ago
- CVE-2022-21449 Proof of Concept demonstrating its usage with a client running on a vulnerable Java version and a malicious TLS server☆122Updated 3 years ago
- ☆82Updated last year
- Downloads Information from NIST (CVSS), first.org (EPSS), and CISA (Exploited Vulnerabilities) and combines them into one list. Reports f…☆144Updated 2 years ago
- ☆134Updated last year