vapi

vAPI vAPI 是一个脆弱性敌对编程接口，它是一个可自行托管的 API，以练习形式模拟 OWASP API Top 10 场景。 要求 PHP MySQL PostMan MITM Proxy 安装（Docker） docker-compose up -d 安装（手动） 复制代码 cd git clone https://github.com/roottusk/vapi.git 设置数据库 将 vapi.sql 导入 MySQL 数据库 在 vapi/.env 中配置数据库凭据 启动 MySQL 服务 运行以下命令（Linux） service mysqld start 启动...

CryKeX

Properties: Cross-platform Minimalism Simplicity Interactivity Compatibility/Portability Application Independable Process Wrapping Process Injection Dependencies: Unix - should work on any Unix-based OS BASH - the whole script root privileges optional Limitations: AES and RSA keys only Fails most...

hermes-osint

Hermes OSINT v3.0 🏛️🧠 智能体 OSINT 分析师 对话式 AI 驱动的调查。自然语言。专家级结果。🤖✨ v3.0 新增内容 🎉 Hermes 3.0 代表了从基于管道的工具编排到对话式 AI 驱动调查平台 的彻底范式转变。通过 Ollama 提供本地 LLM 支持，Hermes 现在能够理解自然语言查询，自主选择并执行工具，并将发现综合为连贯的情报报告。 🧠 智能体智能 自然语言界面 - 提出诸如“查找关于 @johndoe 的一切”之类的问题，而无需记忆 CLI 参数 ReAct 模式 - 思考 → 行动 → 观察循环，实现智能、迭代的调查 自主工具选择 -...

festin

FestIN the powered S3 bucket finder and content discover What is FestIn Why Festin Install Using Python Using Docker Full options Usage Configure search domains Concurrency HTTP Crawling configuration Manage results Proxy usage DNS Options Full Text Support Running as a service or watching mode...

machofile

machofile machofile es un módulo para analizar archivos binarios Mach-O, con un enfoque en el análisis de malware y la ingeniería inversa. Inspirado en el pefile de Ero Carrera, este módulo pretende ofrecer capacidades similares pero para binarios Mach-O. El material de referencia y la...

obfuscation_detection

Obfuscation Detection v2.4 Author: Tim Blazytko Automatically detect obfuscated code and other interesting code constructs Description: Obfuscation Detection is a Binary Ninja plugin to detect obfuscated code and interesting code constructs e.g., state machines in binaries. Given a binary, the...

uefi-firmware-parser

UEFI Firmware Parser .. image:: https://travis-ci.org/theopolis/uefi-firmware-parser.svg?branch=master :target: https://travis-ci.org/theopolis/uefi-firmware-parser The UEFI firmware parser is a simple module and set of scripts for parsing, extracting, and recreating UEFI firmware volumes. This...

evilginx2

Evilginx 3.0 Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which in turn allows to bypass 2-factor authentication protection. This tool is a successor to Evilginx, released in 2017, which used a custom version of nginx HTTP server...

skyjack

SkyJack SkyJack is a drone engineered to autonomously seek out, hack, and wirelessly take full control over any other drones within wireless or flying distance, creating an army of zombie drones under your control. Update: Proof of Concept of SkyJack for 3D Robotics drones using the TI CC1111...

security-research

Investigación de Seguridad Este proyecto alberga avisos de seguridad y sus correspondientes pruebas de concepto relacionadas con la investigación realizada en Google que afecta a código que no es propiedad de Google. Creemos que la divulgación de vulnerabilidades es una vía de doble sentido. Tant...

krbrelayx

Krbrelayx - Kerberos relaying and unconstrained delegation abuse toolkit Toolkit for abusing Kerberos. Requires impacket, ldap3 and dnspython to function. It is recommended to install impacket from git directly to have the latest version available. More info about this toolkit available in my blo...

sniffglue

sniffglue sniffglue is a network sniffer written in rust. Network packets are parsed concurrently using a thread pool to utilize all cpu cores. Project goals are that you can run sniffglue securely on untrusted networks and that it must not crash when processing packets. The output should be as...

c2-cloud

About The Project The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cloud. It can manage several simultaneous backdoor sessions with a user-friendly...

threagile

Threagile 敏捷威胁建模工具包 Threagile（详细信息请参见threagile.io）是一个用于敏捷威胁建模的开源工具包： 它允许以敏捷的方式直接在IDE内将架构及其资产建模为YAML文件。 执行Threagile工具包时，所有标准风险规则（以及存在的个别自定义规则）都会针对架构模型进行检查。 您可以在此处了解更多关于模型模式的信息：here。 该工具具有多种命令，并且可以通过标志和配置进行高度配置。 我们知道通过文本编辑器修改yaml文件可能很困难，为了简化，我们引入了： includes macros...

msprobe

msprobe About Installing Usage Examples Coming Soon Acknowledgements About Finding all things on-prem Microsoft for password spraying and enumeration. The tool will used a list of common subdomains associated with your target apex domain to attempt to discover valid instances of on-prem Microsoft...

slither

Slither, the smart contract static analyzer Join the Empire Hacking Slack - Discussions and Support Slither is a Solidity & Vyper static analysis framework written in Python3. It runs a suite of vulnerability detectors, prints visual information about contract details, and provides an API to...

jsql-injection

Description jSQL Injection is a lightweight application used to find database information from a server. It's free , open source and cross-platform for Windows, Linux and Mac, and it works with Java from version 21 to 25. jSQL Injection is also part of the official penetration testing distributio...

spiderfoot

SpiderFoot is an open source intelligence OSINT automation tool. It integrates with just about every data source available and utilises a range of methods for data analysis, making that data easy to navigate. SpiderFoot has an embedded web-server for providing a clean and intuitive web-based...

tracee

Before moving on, please consider giving us a GitHub star ⭐️. Thank you! About Tracee Tracee is a runtime security and observability tool that helps you understand how your system and applications behave. It is using eBPF technology to tap into your system and expose that information as events tha...

nikto

nikto Nikto web server scanner - https://cirt.net/Nikto2 完整文档 - https://github.com/sullo/nikto/wiki 正常运行： git clone https://github.com/sullo/nikto Main script is in program/ cd nikto/program Run using the shebang interpreter ./nikto.pl -h http://www.example.com Run using perl if you forget to chm...