noir

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface. Documentation • Installation • Usage • Github Action • Contributing • Changelog Noir is a SAST tool that reads source code and extracts the endpoints an application exposes — paths, methods, parameters, headers, cookies...

DevGuide

OWASP Foundation Developer Guide The Developer Guide is one of the original documents from OWASP and so has a long history. The original DevGuide repository has many of the previous versions going back to the very first version 1.0 release from 2002. This is the content for the Developer Guide...

fabric

|version| |python| |license| |ci| |coverage| .. |version| image:: https://img.shields.io/pypi/v/fabric :target: https://pypi.org/project/fabric/ :alt: PyPI - Package Version .. |python| image:: https://img.shields.io/pypi/pyversions/fabric :target: https://pypi.org/project/fabric/ :alt: PyPI -...

uafuzz

UAFuzz: Binary-level Directed Fuzzing for Use-After-Free Vulnerabilities Directed Greybox Fuzzing DGF like AFLGo aims to perform stress testing on pre-selected potentially vulnerable target locations, with applications to different security contexts: 1 bug reproduction, 2 patch testing or 3 stati...

shells

Shellz A script for generating common revshells fast and easy. Especially nice when in need of PowerShell and Python revshells, which can be a PITA getting correctly formatted. PowerShell revshells Shows [email protected], above the prompt and working-directory Has a partial and full...

CVE-2023-34835

CVE-2023-34835 — eScan Management Console: Reflected Cross-Site Scripting XSS Table of Contents Overview Vulnerability Details Affected Product Technical Analysis Proof of Concept Steps to Reproduce Impact Mitigation & Remediation References Disclaimer Overview A Reflected Cross-Site Scripting XS...

BeRoot

BeRoot Project BeRoot Project is a post exploitation tool to check common misconfigurations to find a way to escalate our privilege. It has been added to the pupy project as a post exploitation module so it will be executed in memory without touching the disk. This tool does not realize any...

karonte

Karonte Karonte is a static analysis tool to detect multi-binary vulnerabilities in embedded firmware. The master branch provides the latest version of Karonte, ported to python3. For the original implementation and experiments presented in our paper, please checkout the IEEE-SP-20 branch and hav...

tcconfig

.. contents:: tcconfig :backlinks: top :depth: 2 Summary tcconfig is a tc command wrapper. Make it easy to set up traffic control of network bandwidth/latency/packet-loss/packet-corruption/etc. to a network-interface/Docker-containerveth. |PyPI pkg ver| |Supported Python ver| |CI status| |CodeQL|...

kernel-hardening-checker

kernel-hardening-checker formerly kconfig-hardened-check Motivation There are plenty of security hardening options for the Linux kernel. A lot of them are not enabled by the major distros. We have to enable these options ourselves to make our systems more secure. But nobody likes checking configs...

pe-sieve

Intro PE-sieve is a tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps variety of implants within the scanned process: replaced/injected PEs, shellcodes, hooks, and other in-memory patches...

discover

Discover Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Ubuntu. Limited support for Kali Linux. Lee Baird @discoverscripts Jay "L1ghtn1ng" Townsend @jaytownsend...

trevorc2

trevorc2 TrevorC2 - Command and Control via Legitimate Behavior over HTTP Written by: Dave Kennedy @HackingDave Website: https://www.trustedsec.com Note that this is a very early release - heavy randomization and encryption to be added soon. TrevorC2 is a client/server model for masking command a...

redsnarf

. \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf is a pen-testing / red-teaming tool by Ed Williams for retrieving hashes and credentials from Windows workstations, servers and domain controllers...

brakeman

Brakeman Brakeman is a static analysis tool which checks Ruby on Rails applications for security vulnerabilities. Installation Using RubyGems: gem install brakeman Using Bundler: group :development do gem 'brakeman', require: false end Using Docker: docker pull presidentbeef/brakeman Using Docker...

webvm

WebVM This repository hosts the source code for https://webvm.io, a Linux virtual machine that runs in your browser. Try out the new Alpine / Xorg / i3 graphical environment: https://webvm.io/alpine.html What is WebVM? WebVM is a server-less virtual environment running fully client-side in...

CVE-2026-35616-check

CVE-2026-35616 Vulnerability Assessment Tool Safely detect whether a FortiClient EMS server is vulnerable to CVE-2026-35616 without causing any disruption. See the full write-up on the Bishop Fox blog. Description CVE-2026-35616 is a pre-authentication API bypass in FortiClient EMS 7.4.5 and 7.4....

CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-Check

CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-Check Check if your firewall is vulnerable to CVE-2024-21762 unauthenticated RCE For more information about the vulnerability: https://cuty.io/TKyfFh Subscribe or join my social networks for more HACKING!! Learn to detect the vulnerability and protect...

POCO-M7-Plus-Jailbreak

POCO M7 Plus SM6375 - Jailbreak Root Research Disclaimer: This document is written purely for educational and security research purposes. All testing was performed on my own device. I am not responsible for bricked devices, data loss, or misuse of this information. The vulnerabilities discussed...

zeek-agenttesla-detector

AgentTesla This is a Zeek based AgentTesla malware detector. Testing PCAPs: https://app.any.run/tasks/f9421792-7d2c-47d3-90e0-07eb54ae12fa/ https://app.any.run/tasks/db9f075c-7879-4957-923a-f79fac957a2d/ https://app.any.run/tasks/a30789ce-1e1c-4f96-a097-78c34b9fb612/...