p0dalirius / AccountShadowTakeover

Related projects ⓘ

Alternatives and complementary repositories for AccountShadowTakeover

• p0dalirius / MSRPRN-Coerce
  A python script to force authentication using MS-RPRN RemoteFindFirstPrinterChangeNotificationEx function (opnum 65).
  ☆20Updated 2 years ago
• p0dalirius / LimeSurvey-webshell-plugin
  A webshell plugin and interactive shell for pentesting a LimeSurvey application.
  ☆13Updated 3 weeks ago
• p0dalirius / http-fuzzing-scripts
  A collection of http fuzzing python scripts to fuzz HTTP servers for bugs.
  ☆14Updated last year
• p0dalirius / CVE-2022-26159-Ametys-Autocompletion-XML
  A python exploit to automatically dump all the data stored by the auto-completion plugin of Ametys CMS to a local sqlite database file.
  ☆12Updated 2 years ago
• p0dalirius / CVE-2022-30780-lighttpd-denial-of-service
  CVE-2022-30780 - lighttpd remote denial of service
  ☆16Updated 8 months ago
• Vozec / CVE-2023-22527
  This repository presents a proof-of-concept of CVE-2023-22527
  ☆13Updated 10 months ago
• p0dalirius / CodeIgniter-session-unsign
  Command line tool to fetch, decode and brute-force CodeIgniter session cookies by guessing and bruteforcing secret keys.
  ☆12Updated 8 months ago
• p0dalirius / Sprayer
  Multithreaded spraying of a password on all accounts of a domain.
  ☆17Updated 4 months ago
• p0dalirius / factorizator
  A script to factorize integers with sagemath and factordb.
  ☆11Updated last year
• p0dalirius / TargetAllDomainObjects
  A python wrapper to run a command on against all users/computers/DCs of a Windows Domain
  ☆28Updated 2 years ago
• p0dalirius / msFlagsDecoder
  Decode the values of common Windows properties such as userAccountControl and sAMAccountType.
  ☆21Updated last year
• p0dalirius / pyLootApacheServerStatus
  A script to automatically dump all URLs present in /server-status to a file locally.
  ☆23Updated last month
• p0dalirius / FindAzureDomainTenant
  A Python script to find tenant id an region from a list of domain names.
  ☆12Updated last year
• p0dalirius / ParseFortinetSerialNumber
  A Python script to parse Fortinet products serial numbers, and detect the associated model and revision.
  ☆13Updated last year
• p0dalirius / crawlersuseragents
  Python script to check if there is any differences in responses of an application when the request comes from a search engine's crawler.
  ☆20Updated last year
• horizon3ai / CVE-2024-9465
  Proof of Concept Exploit for CVE-2024-9465
  ☆26Updated last month
• HackingLZ / TomcatBackdoorPoC
  Tomcat backdoor based on CS blog
  ☆27Updated last year
• riramar / SmuggleTP
  A straightforward tool for exploiting SMTP Smuggling vulnerabilities.
  ☆15Updated 4 months ago
• p0dalirius / CVE-2016-10956-mail-masta
  MailMasta wordpress plugin Local File Inclusion vulnerability (CVE-2016-10956)
  ☆16Updated 2 years ago
• p0dalirius / JoGet-webshell-plugin
  A webshell plugin and interactive shell for pentesting JoGet application.
  ☆12Updated 2 years ago
• p0dalirius / RobotsValidator
  A python script to check if URLs are allowed or disallowed by a robots.txt file.
  ☆21Updated 2 years ago
• decoder-it / DFSCoerce-exe-2
  DFSCoerce exe revisited version with custom authentication
  ☆37Updated 10 months ago
• Hakumarachi / SQL_loose_comparison
  A list of weird comparison in SQL
  ☆14Updated 2 years ago
• p0dalirius / Hashes-Harvester
  Automatically extracts NT and LM hashes from Windows memory dumps based on volatility.
  ☆23Updated last year
• mdsecactivebreach / PleasantTools
  Tools for Attacking Pleasant Password Server
  ☆21Updated last year
• p0dalirius / CVE-2022-45771-Pwndoc-LFI-to-RCE
  Pwndoc local file inclusion to remote code execution of Node.js code on the server
  ☆46Updated last year
• 0xInfection / EPScalate
  Exploit for elevation of privilege vulnerability in QuickHeal's Seqrite EPS (CVE-2023-31497).
  ☆18Updated last year
• OtterHacker / Cerbere
  ☆46Updated last year
• p0dalirius / sectools
  A Python native library containing lots of useful functions to write efficient scripts to hack stuff.
  ☆32Updated last month
• p0dalirius / ldapconsole
  The ldapconsole script allows you to perform custom LDAP requests to a Windows domain.
  ☆61Updated 4 months ago