Exploit – hacklejandría.com

SCADA – Analisis de entornos industriales

29/09/202209/05/2022 por Juan Espin

El área de superficie de ataque se puede determinar a partir del diagrama de arquitectura de la red y qué tan bien se segrega del resto de la misma. En el diagrama anterior, una red corporativa y SCADA están separadas por un firewall. Asumimos que las reglas del firewall están configuradas correctamente y no se … Leer más

Android Tools

03/11/202007/08/2020 por Juan Espin

Account Login Android 5 GAM Android 6 GAM Android 8/9 GAM FRP Bypass FRP Android 7 Test DPC QuickShortcutMaker Apex Launcher Menu Button ES File Explorer Samsung Frp Bypass Tool Settings Automatic Call Recorder HushSMS Phone Clone Root Checker WPS App WPS WPA Tester Xposed Installer SuperSU Inspeckage Google Play Services

Explotando XXE con archivos DTD locales

11/06/202011/06/2020 por Juan Espin

1.¿Qué es XXE? 2.¿Qué es un DTD? 3.Explotando XXE con archivos DTD locales 4.Referencias 1. ¿Qué es “XXE”? Concepto XXE se refiere a un ataque de falsificación de solicitud de servidor (SSRF), mediante el cual un atacante es capaz de causar: Denegación de servicio (DoS) Acceso a archivos y servicios locales o remotos Una vulnerabilidad de XXE consiste … Leer más

Poc BlueKeep

09/05/202215/05/2020 por Alejandro Gonzalez

Este documento muestra cómo realizar una explotación de la vulnerabilidad CVE-2019-0708 llamado comúnmente BlueKeep, que afecta a sistemas Windows con el servicio de Escritorio Remoto activado. Esta vulnerabilidad permite ejecutar código remoto sin necesidad de autenticarse enviando peticiones especialmente construidas. Una vez explotado este fallo, el usuario acceder a la máquina con privilegios NT Authority/System. … Leer más

Ashok - A OSINT Recon Tool, A.K.A Swiss Army Knife 26/06/2024

Reconnaissance is the first phase of penetration testing which means gathering information before any real attacks are planned So Ashok is an Incredible fast recon tool for penetration tester which is specially designed for Reconnaissance" title="Reconnaissance">Reconnaissance phase. And in Ashok-v1.1 you can find the advanced google dorker and wayback crawling machine. Main Features - Wayback […]

CloudBrute - Awesome Cloud Enumerator 25/06/2024

A tool to find a company (target) infrastructure, files, and apps on the top cloud providers (Amazon, Google, Microsoft, DigitalOcean, Alibaba, Vultr, Linode). The outcome is useful for bug bounty hunters, red teamers, and penetration testers alike. The complete writeup is available. here Motivation we are always thinking of something we can automate to make […]

Hfinger - Fingerprinting HTTP Requests 24/06/2024

Tool for Fingerprinting HTTP requests of malware. Based on Tshark and written in Python3. Working prototype stage :-) Its main objective is to provide unique representations (fingerprints) of malware requests, which help in their identification. Unique means here that each fingerprint should be seen only in one particular malware family, yet one family can have […]

VulnNodeApp - A Vulnerable Node.Js Application 23/06/2024

A vulnerable application made using node.js, express server and ejs template engine. This application is meant for educational purposes only. Setup Clone this repository git clone https://github.com/4auvar/VulnNodeApp.git Application setup: Install the latest node.js version with npm. Open terminal/command prompt and navigate to the location of downloaded/cloned repository. Run command: npm install DB setup Install and […]

XMGoat - Composed of XM Cyber terraform templates that help you learn about common Azure security issues 22/06/2024

XM Goat is composed of XM Cyber terraform templates that help you learn about common Azure security issues. Each template is a vulnerable environment, with some significant misconfigurations. Your job is to attack and compromise the environments. Here's what to do for each environment: Run installation and then get started. With the initial user and […]

Extrude - Analyse Binaries For Missing Security Features, Information Disclosure And More... 21/06/2024

Analyse binaries for missing security features, information disclosure and more. Extrude is in the early stages of development, and currently only supports ELF and MachO binaries. PE (Windows) binaries will be supported soon. Usage Usage: extrude [flags] [file]Flags: -a, --all Show details of all tests, not just those which failed. -w, --fail-on-warning Exit with a […]

BokuLoader - A Proof-Of-Concept Cobalt Strike Reflective Loader Which Aims To Recreate, Integrate, And Enhance Cobalt Strike's Evasion Features! 20/06/2024

A proof-of-concept User-Defined Reflective Loader (UDRL) which aims to recreate, integrate, and enhance Cobalt Strike's evasion features! Contributors: Contributor Twitter Notable Contributions Bobby Cooke @0xBoku Project original author and maintainer Santiago Pecin @s4ntiago_p Reflective Loader major enhancements Chris Spehn @ConsciousHacker Aggressor scripting Joshua Magri @passthehashbrwn IAT hooking Dylan Tran @d_tranman Reflective Call Stack Spoofing James […]

Volana - Shell Command Obfuscation To Avoid Detection Systems 19/06/2024

Shell command obfuscation to avoid SIEM/detection system During pentest, an important aspect is to be stealth. For this reason you should clear your tracks after your passage. Nevertheless, many infrastructures log command and send them to a SIEM in a real time making the afterwards cleaning part alone useless.volana provide a simple way to hide […]

CyberChef - The Cyber Swiss Army Knife - A Web App For Encryption, Encoding, Compression And Data Analysis 18/06/2024

CyberChef is a simple, intuitive web app for carrying out all manner of "cyber" operations within a web browser. These operations include simple encoding like XOR and Base64, more complex encryption like AES, DES and Blowfish, creating binary and hexdumps, compression and decompression of data, calculating hashes and checksums, IPv6 and X.509 parsing, changing character […]

NativeDump - Dump Lsass Using Only Native APIs By Hand-Crafting Minidump Files (Without MinidumpWriteDump!) 16/06/2024

NativeDump allows to dump the lsass process using only NTAPIs generating a Minidump file with only the streams needed to be parsed by tools like Mimikatz or Pypykatz (SystemInfo, ModuleList and Memory64List Streams). NTOpenProcessToken and NtAdjustPrivilegeToken to get the "SeDebugPrivilege" privilege RtlGetVersion to get the Operating System version details (Major version, minor version and build […]