mandiant / heyserialLinks
Programmatically create hunting rules for deserialization exploitation with multiple keywords, gadget chains, object types, encodings, and rule types
☆143Updated 2 years ago
Alternatives and similar repositories for heyserial
Users that are interested in heyserial are comparing it to the libraries listed below
Sorting:
- Determine the Palo Alto PAN-OS software version of a remote GlobalProtect portal or management interface.☆128Updated last year
- This script is a multi-threaded Okta password sprayer.☆72Updated last year
- Static code analysis tool based on Elasticsearch☆129Updated 4 years ago
- ☆67Updated 6 years ago
- Posts about different topics☆36Updated last year
- BurpSuite Extension: A one-stop pen testing checklist and logger tool☆75Updated 2 years ago
- A Red Team tool for exfiltrating sensitive data from Confluence pages.☆112Updated 2 years ago
- Terraform resources for building HTTP, DNS, phishing, and mail server red team infrastructure☆95Updated 6 years ago
- Slackhound allows red and blue teams to perform fast reconnaissance on Slack workspaces/organizations to quickly search user profiles, lo…☆81Updated last year
- Vulnerable thick client applications used as examples in the Introduction to Hacking Desktop Applications blog series☆102Updated last year
- A list of "secrets" from JWT sample code and readme files.☆56Updated 4 years ago
- A Red Team tool for exfiltrating sensitive data from Jira tickets.☆85Updated 2 years ago
- Lookup for interesting stuff in SMB shares☆149Updated 2 years ago
- nse script to inject jndi payloads☆46Updated 3 years ago
- Enumerate AWS permissions and resources.☆69Updated 3 years ago
- Mindmaps allow to organize and understand information faster and better.☆2Updated 3 years ago
- A wordlist that is kept up to date with the latest headlines to provide relevant words to human society☆120Updated 3 years ago
- ☆54Updated 4 years ago
- Enumerate AD through LDAP with a collection of helpfull scripts being bundled☆145Updated last week
- Tools to assess the DNS security of web applications☆128Updated 2 years ago
- ☆90Updated 3 years ago
- GoldenSAML Attack Libraries and Framework☆73Updated last year
- Find the remote website version based on a git repository☆126Updated 4 years ago
- A Python implementation of dafthack's MSOLSpray. A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if …☆91Updated last year
- ☆70Updated last year
- Zuthaka is an open source application designed to assist red-teaming efforts, by simplifying the task of managing different APTs and othe…☆177Updated 2 years ago
- Cloud, CDN, and marketing services leveraged by cybercriminals and APT groups☆60Updated 2 years ago
- OSCP guide and Red Team assessment Guide☆35Updated 5 years ago
- An Evil OIDC Server☆53Updated 2 years ago
- Determine the running software version of a remote F5 BIG-IP management interface.☆67Updated last year