macphish

macphish Office for Mac Macro Payload Generator Attack vectors There are 4 attack vectors available: beacon creds meterpreter meterpreter-grant For the 'creds' method, macphish can generate the Applescript script directly, in case you need to run it from a shell. beacon On execution, this payload...

goproxy

GoProxy GoProxy는 Go일명 Golang를 사용하여 맞춤형 HTTP/HTTPS 프록시 서버를 만들 수 있는 라이브러리로, 여러 가지 구성 가능한 설정을 제공합니다. 이 프로젝트의 목표는 합리적인 트래픽 양에서 사용할 수 있는 최적화된 프록시 서버를 제공하면서도 사용자 정의가 가능하고 프로그래밍 가능하게 하는 것입니다. 프록시 자체는 단순히 net/http 핸들러이므로 그 위에 여러 미들웨어패닉 복구, 로깅, 압축 등를 추가할 수 있습니다. 다른 HTTP 네트워크 라이브러리와도 쉽게 통합할 수 있습니다. goproxy...

jarm

JARM Please read the initial JARM blog post for more information. JARM is an active Transport Layer Security TLS server fingerprinting tool. JARM fingerprints can be used to: Quickly verify that all servers in a group have the same TLS configuration. Group disparate servers on the internet by...

wanderer

Wanderer Wanderer is an open-source program that collects information about running processes. This information includes the integrity level, the presence of the AMSI as a loaded module, whether it is running as 64-bit or 32-bit as well as the privilege level of the current process. This...

santa

Santa Santa is a binary and file access authorization system for macOS. It consists of a system extension that monitors for executions & file access, and makes decisions based on the contents of a local database, a GUI agent that notifies the user in case of a block decision, a background service...

unicorn-bios

unicorn-bios About Basic BIOS emulator/debugger for Unicorn Engine. Written to debug the XEOS Operating System boot sequence. Usage: Usage: unicorn-bios OPTIONS BOOTIMG Options: --help / -h: Displays help. --memory / -m: The amount of memory to allocate for the virtual machine in megabytes...

scout

Scout Scout is a URL fuzzer and spider for discovering undisclosed VHOSTS, files and directories on a web server. A full word list is included in the binary, meaning maximum portability and minimal configuration. Aim and fire! Usage Usage: scout command Available Commands: help Help about any...

scout

Scout Scout — это фуззер URL и паук для обнаружения нераскрытых VHOST-ов, файлов и каталогов на веб-сервере. Полный список слов встроен в бинарный файл, что обеспечивает максимальную переносимость и минимальную настройку. Наводи и стреляй! Использование Usage: scout command Available Commands: he...

tirreno

tirreno tirreno is a security framework. tirreno tir.ˈrɛ.no helps understand, monitor, and protect your product from threats, fraud, and abuse. While classic cybersecurity focuses on infrastructure and network perimeter, most breaches occur through compromised accounts and application logic abuse...

nishang

Nishang Nishang is a framework and collection of scripts and payloads which enables usage of PowerShell for offensive security, penetration testing and red teaming. Nishang is useful during all phases of penetration testing. By Nikhil Mittal Founder of Altered Security - Hands-on red team and...

Reversecore_MCP

Reversecore MCP AI-Powered Reverse Engineering & Security Analysis via Model Context Protocol An MCP server that gives AI assistants like Claude and Cursor the ability to perform reverse engineering, malware analysis, vulnerability research, digital forensics, and source code auditing through...

graphql-cop

GraphQL Cop - Security Audit Utility for GraphQL About GraphQL Cop is a small Python utility to run common security tests against GraphQL APIs. GraphQL Cop is perfect for running CI/CD checks in GraphQL. It is lightweight, and covers interesting security issues in GraphQL. GraphQL Cop allows you ...

rebrowser-patches

🪄 Patches for undetectable browser automation This repo contains patches to enhance popular web automation libraries. Specifically, it targets the puppeteer and playwright packages. Some aspects of automation libraries or browser behavior cannot be adjusted through settings or command-line...

femida

Femida-xss WIP An automated blind-xss search plugin for Burp Suite. Installation Git clone https://github.com/wish-i-was/femida.git Burp - Extender - Add - find and select blind-xss.py How to use Settings First of all you need to setup your callback URL in field called "Your url" and press Enter ...

web-check

Web-Check Comprehensive, on-demand open source intelligence for any website 🌐web-check.xyz Kindly supported by: NinjaPear API to get a full B2B profiles from any URL | Hostinger Deploy Web-Check with one click on Hostinger | Warp Built for coding with multiple AI agents ---|---|--- Contents About...

godoh

🕳 godoh Концепт-доказательство командования и управления C2 через DNS-over-HTTPS Введение godoh — это концепт-доказательство фреймворка командования и управления, написанного на Golang, который использует DNS-over-HTTPS в качестве транспортного протокола. В настоящее время поддерживаются провайде...

criticality_score

오픈소스 프로젝트 중요도 점수베타 이 프로젝트는 Securing Critical Projects WG의 멤버들이 유지관리합니다. 목표 1. 모든 오픈소스 프로젝트에 대한 중요도 점수 를 생성합니다. 2. 오픈소스 커뮤니티가 의존하는 중요 프로젝트 목록을 만듭니다. 3. 이 데이터를 사용하여 이러한 중요 프로젝트의 보안 상태를 사전에 개선합니다. 중요도 점수 프로젝트의 중요도 점수는 프로젝트의 영향력과 중요성을 정의합니다. 0 최소 중요 에서 1 최대 중요 사이의 숫자이며, Rob Pike가 작성한 다음 알고리즘을 기반으로 합니...

internalblue

Broadcom chips are used in approximately a billion of devices, such as all iPhones , MacBooks , the Samsung Galaxy S series, the older Google Nexus series, older Thinkpads , Raspberry Pis , various IoT devices, and more. In 2016, Cypress acquired the IoT division of Broadcom. Since then, firmware...

internalblue

Broadcom 칩은 약 10억 대의 기기에서 사용되고 있으며, 예를 들어 모든 iPhone , MacBook , Samsung Galaxy S 시리즈, 구형 Google Nexus 시리즈, 구형 Thinkpad , Raspberry Pi , 다양한 IoT 기기 등이 있습니다. 2016년, Cypress 가 Broadcom 의 IoT 사업부를 인수했습니다. 이후 Broadcom 이 Apple 및 Samsung 과 같은 비-IoT 고객을 유지하면서 펌웨어 변형이 약간 분기되었습니다. 그러나 펌웨어 상호 작용 및 업데이트 메커니즘...

memoro

Memoro Memoro is a highly detailed heap profiler. Memoro not only shows you where and when your program makes heap allocations, but will show you how your program actually used that memory. Memoro collects detailed information on accesses to the heap, including reads and writes to memory and when...