Acunetix Premium is a web application security solution for managing the security of multiple websites, web applications, and APIs. Integration features allow you to automate your DevOps and issue management infrastructures. Acunetix Premium: A Comprehensive Web Application Security Solution Web applications are crucial for businesses and organizations to connect with their customers, partners, and employees. As
Loading
All posts in "Tools"
Predator Crypter Simple Obfuscation Tool An obfuscation tool for .Net + Native files. Main Features Prerequisites To open project you need: 1- Visual Studio 2019+2022 2 – requires Guna UI
Note:This code needs to be developed, those who have the ability to develop the code can do this✍️✍️✍️✍️✔️ This code provides options for various processes related to managing and protecting APK files. When the user runs the program, they can choose one of the following operations:❤️ Encrypt APK:Task: This operation encrypts the APK file using
112Invicti Professional Edition Full Activated Password: Pwn3rzs Some of the basic security tests should include testing: NEW FEATURES Added the ability to force authentication verifier agents to use incognito mode by default on Chromium browsers NEW SECURITY CHECKS Added detection for ActiveMQ RCE to the OOB RCE Attack Pattern (CVE-2023-46604) FIXES Added a Cookie Source
Tools for analyzing UEFI firmware and checking UEFI modules with FwHunt rules. Dependencies rizin (v0.6.2) Installation Install with pip (tested on python3.6 and above): Install manually:
– It has more options than the previous release, look like VIP version Advertised Features:– Spoof ANY extension– 300+ different icons available (Microsoft Office ones included) – (Mainly icons from System)– UAC Bypass (VIP license and above only)– Implementation of the dogwalk n-day exploit, more info below (Private license only)– Bypass Windows Smartscreen, EV certs
116Positive Technologies MaxPatrol 10 (MaxPatrol 10) is a system that collects, stores, and analyzes data about events that occur in a company’s IT infrastructure. This ensures information security monitoring for both the entire IT infrastructure and individual subdivisions, hosts, and applications. MaxPatrol 10 provides the following basic features: Asset inventory. The system regularly collects data about network hosts and
An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x) and ZTA gateways which allows an attacker to access certain restricted resources without authentication.
Let’s start, as expected, with a tedious theory. Unfortunately, without it, the essence of what is happening in the future will not be clear, so I will try to tell you as briefly as possible and in an understandable language. Privilege tokens are permissions given by the system to a process. For example, if a
125This app is a tool for analyzing Bluetooth (BLE) environments. Scans the BLE ether in the background, notifying you if the device you are looking for is near you or if some unknown device has been following you for for a long time. The app allows you to create flexible filters for the radar with
Description The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the ‘id’ parameter in all versions up to, and including, 3.7.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append
You can use the Tenable Core operating system to run an instance of Tenable Web App Scanning in your environment. After you deploy Tenable Core + Tenable Web App Scanning, you can monitor and manage your Tenable Web App Scanning processes through the secure Tenable Core platform. To get started quickly with Tenable Core + Tenable Web App Scanning, see Get Started. Features Other Tenable Core Configurations To
Simple scanner for scanning a list of ip-addresses for vulnerable Ivanti Pulse Secure devices
Demonized Features Pending Features And other types of features that will come in the future.
Themida 3.1.4.18 CrackedIt is preinstalled. Double click Themida to run it. Themida is a powerful software protection and licensing system designed for Windows-based applications. It provides developers with an advanced level of protection against reverse engineering, debugging, and tampering attempts. Themida combines advanced anti-debugging, anti-tracing, anti-reversing, and anti-cracking techniques to create robust protection for software
A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the file server/application/api/controller/File.php of the component HTTP POST Request Handler. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may
Gitlab CVE-2023-7028: Account Takeover via Password Reset without user interactions A critical vulnerability in GitLab CE/EE (CVE-2023-7028) can be easily exploited by attackers to reset GitLab user account passwords. While also vulnerable, users who have two-factor authentication enabled on their account are safe from account takeover. Also LDAP logins are safe too! About CVE-2023-7028 CVE-2023-7028
CVE-2024-20656 is a security vulnerability that affects Visual Studio and was released on January 9, 2024. It is a local privilege escalation vulnerability in the VSStandardCollectorService150 service. With this we have all pieces for our exploit, to summarise:
XAML Diagnostics Elevation of Privilege Vulnerability This is a POC (Proof of Concept) of a privilege escalation vulnerability using the XAML diagnostics API. The vulnerability was patched in December’s Patch Tuesday, and the CVE assigned to it is CVE-2023-36003. Usage The POC is a C++ project that can be compiled using Visual Studio. After compiling, the
103An aggressor script that can help automate payload building in Cobalt Strike RequirementsVisual Studio 2022 with .NET Framework 4.8 UsageThe aggressor will only work in a predetermined path which is C:\Tools\cobaltstrike\aggressors\PG, When adding the new aggressor script a new menu button would be added to Cobalt Strikes Menu Bar This sample payload will get detected
Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraft easier, and serve as a collaborative command and control platform for red teamers. Covenant is an ASP.NET Core, cross-platform application that includes a web-based interface that allows for multi-user collaboration. Features
Subscribe & Follow
