Researchers Feed

Cymulate research team updates

  • 35 Topics
  • 6 Replies

35 Topics

idant
Community Manager
idantCommunity Manager
published in Researchers Feed

Ddosify - High-performance Load Testing Tool

Features Protocol Agnostic - Currently supporting HTTP, HTTPS, HTTP/2. Other protocols are on the way. Scenario-Based - Create your flow in a JSON file. Without a line of code! Different Load Types - Test your system's limits across different load types. Installationddosify is available via Docker, Homebrew Tap, and downloadable pre-compiled binaries from the releases page for macOS, Linux and Windows.

340
idant
Community Manager
1 year ago
idant
Community Manager
idantCommunity Manager
posted in Researchers Feed

Smuggler - An HTTP Request Smuggling / Desync Testing Tool

An HTTP Request Smuggling / Desync testing tool written in Python 3https://github.com/defparam/smuggler.git  

0
idant
Community Manager
1 year ago
R
Employee
raja_wizEmployee
posted in Researchers Feed

Agent Logs on Linux Machine

/usr/share/Cymulate/Agent/AgentLogs  

1
mike_talon
Employee
1 year ago
S
Employee
SashaGEmployee
posted in Researchers Feed

Web-Hacking-Toolkit - A Multi-Platform Web Hacking Toolkit Docker Image With Graphical User Interface (GUI) Support

A multi-platform web hacking toolkit Docker image with Graphical User Interface (GUI) support.https://github.com/signedsecurity/web-hacking-toolkit

0
S
Employee
1 year ago
S
Employee
SashaGEmployee
posted in Researchers Feed

Exploiting Redis Through SSRF Attack

https://infosecwriteups.com/exploiting-redis-through-ssrf-attack-be625682461b

0
S
Employee
1 year ago
Y
Employee
Yahav LevinEmployee
posted in Researchers Feed

PeTeReport - Open-Source Application Vulnerability Reporting Tool

https://github.com/1modm/petereport  PeTeReport (PenTest Report) is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writing and generation of reports.Focused in product security, the tool help security researchers and pentesters to provide detailed findings, appendix, attack paths and manage a finding template database to avoid wasting time spent in the reporting phase.PeTeReport (PenTest Report) is written in Django and Python 3 with the aim to help pentesters to manage a finding repository, write reports (in Markdown) and generate reports in different formats (HTML, CSV, PDF, Jupyter and Markdown). DocumentationDocumentationInstallation and deployment Docker  DjangoFeatures Customizable reports output  Customizable reports templates  Findings template database  Possibility to add appendix to findings  Possibility to add attack trees Deciduous to findings  HTML Output format  CSV Output format  PDF Ou

0
Y
Employee
1 year ago
Y
Employee
Yahav LevinEmployee
posted in Researchers Feed

DonPAPI - Dumping DPAPI Creds Remotely

https://github.com/login-securite/DonPAPI Dumping relevant information on compromised targets without AV detection DPAPI dumpingLots of credentials are protected by DPAPI.We aim at locating those "secured" credentials, and retrieve them using :User password Domaine DPAPI BackupKey Local machine DPAPI Key (protecting TaskScheduled blob) Currently gathered infoWindows credentials (Task scheduled credentials & a lot more) Windows Vaults Windows RDP credentials AdConnect (still require a manual operation) Wifi key Internet explorer Credentials Chrome cookies & credentials Firefox cookies & credentials VNC passwords mRemoteNG password (with default config)Check for a bit of complianceSMB signing status OS/Domain/Hostname/Ip of the audited scopeOperational useWith local admin account on a host, we can :Gather machine protected DPAPI secrets ScheduledTask that will contain cleartext login/password of the account configured to run the task Wi-Fi passwords Extract Masterkey's hash

0
Y
Employee
1 year ago
Y
Employee
Yahav LevinEmployee
posted in Researchers Feed

Multi-Platform Web Hacking Toolkit Docker Image With Graphical User Interface (GUI) Support

https://github.com/signedsecurity/web-hacking-toolkit InstallationDockerPull the image from Docker Hub:docker pull signedsecurity/web-hacking-toolkitRun a container and attach a shell:docker run --rm -it --name web-hacking-toolkit signedsecurity/web-hacking-toolkit /usr/bin/zshDocker ComposeDocker-Compose can also be used.version: "3.9"services: web-hacking-toolkit: image: signedsecurity/web-hacking-toolkit container_name: web-hacking-toolkit hostname: web-hacking-toolkit stdin_open: true ports: - "22:22" # exposed for GUI support sing SSH with X11 forwarding volumes: - ./data:/root/data restart: unless-stoppedBuild and run container:docker-compose upAttach shell:docker-compose exec web-hacking-toolkit /usr/bin/zshBuild from SourceClone this repository and build the image:git clone https://github.com/signedsecurity/web-hacking-toolkit.git && \cd web-hacking-toolkit && \make buildRun a container an

0
Y
Employee
1 year ago
S
Employee
SashaGEmployee
posted in Researchers Feed

Blue Team Techniques - networkit

Open-source toolkit for large-scale network analysishttps://github.com/networkit/networkit

0
S
Employee
1 year ago
S
Employee
SashaGEmployee
posted in Researchers Feed

Awesome Azure Penetration Testing - Github

Useful tools and resources for penetration testing and securing Microsoft cloud platform Azure.https://github.com/Kyuu-Ji/Awesome-Azure-Pentest

0
S
Employee
1 year ago

Badge winners

Show all badges
Terms & ConditionsCookie settings