jackhammer

Jackhammer: One Security vulnerability assessment/management tool to solve all the security team problems. What is Jackhammer? Jackhammer is a collaboration tool built with an aim of bridging the gap between Security team vs dev team, QA team and being a facilitator for TPM to understand and trac...

lsassy

lsassy Outil Python pour extraire à distance des identifiants sur un ensemble d'hôtes. Cet article de blog explique son fonctionnement. Cet outil utilise le projet impacket pour lire à distance les octets nécessaires dans le dump lsass et pypykatz pour extraire les identifiants. Chapitres|...

CVE-2026-108523

The Studio-Saelix Sencho software (up to version 0.94.1 ) contains a Server-Side Request Forgery (SSRF) vulnerability in the git-sources Browse API Endpoint component, specifically affecting the outboundTarget.ts file. Manipulation of the repo_url argument can trigger the SSRF, which may be execu...

CVE-2026-108523 Studio-Saelix Sencho git-sources Browse API Endpoint outboundTarget.ts server-side request forgery

A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git-sources Browse API Endpoint. Executing a manipulation of the argument repourl can lead to server-side request forgery. The attack may be...

CVE-2026-108523

A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git-sources Browse API Endpoint. Executing a manipulation of the argument repourl can lead to server-side request forgery. The attack may be...

EUVD-2026-96730

A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git-sources Browse API Endpoint. Executing a manipulation of the argument repourl can lead to server-side request forgery. The attack may be...

kestrel-lang

.. image:: https://github.com/opencybersecurityalliance/kestrel-lang/raw/develop/logo/logowtext.png :width: 460 :alt: Язык охоты за угрозами Kestrel |readthedocs| |pypi| |downloads| |codecoverage| |black| | Охотиться с помощью родных запросов/скриптов слева или Kestrel справа? Полноценная...

vulnx

vulnx Современный CLI для исследования данных об уязвимостях с мощными возможностями поиска, фильтрации и анализа Быстрый старт 1. Get vulnx go install github.com/projectdiscovery/vulnx/v2/cmd/vulnx@latest 2. Explore commands vulnx --help vulnx search --help 3. Start exploring vulnerabilities no...

Mr.Holmes

🔍 Mr.Holmes Mr.Holmes est un outil de collecte d'informations OSINT. Dont le but principal est d'obtenir des informations sur les domaines, les noms d'utilisateur, les e-mails et les numéros de téléphone à l'aide de ressources publiques disponibles sur le net, en utilisant également des technique...

MemorizingTrustManager

MemorizingTrustManager - поддержка приватных облаков для вашего приложения MemorizingTrustManager MTM — это проект, позволяющий сделать использование SSL на Android более безопасным и осмысленным. При обнаружении неизвестного SSL-сертификата он спрашивает пользователя, принять ли сертификат...

msmailprobe

msmailprobe Office 365 and Exchange Enumeration It is widely known that OWA Outlook Webapp is vulnerable to time-based user enumeration attacks. This tool leverages all known, and even some lesser-known services exposed by default Exchange installations to enumerate users. It also targets Office...

ADLab

Module PowerShell ADLab Introduction Ce module a pour but d'automatiser le déploiement d'un laboratoire Active Directory pour s'entraîner au test de pénétration interne. Crédits à Joe Helle et à son cours PowerShell pour pentesteurs concernant la génération des vecteurs d'attaque. Instructions...

PentestingEverything

PentestingEverything Une base de connaissances complète et consultable sur le test d'intrusion, couvrant 23 domaines de sécurité. Site web en direct : pentesting.m14r41.in Site web en direct · PentestingChecklist · Contribuer · Signaler un problème Lisez-le en ligne sur pentesting.m14r41.in :...

Gepetto

Gepetto Gepetto is a Python plugin which uses various large language models to provide meaning to functions decompiled by IDA Pro ≥ 7.6. It can leverage them to explain what a function does, and to automatically rename its variables. Here is a simple example of what results it can provide in mere...

git-wild-hunt

git-wild-hunt Un outil pour chasser les identifiants dans la nature de GitHub, alias githunt Pour commencer 1. Installer l'outil 2. Configurer votre jeton GitHub 3. Rechercher des identifiants 4. Voir les résultats cat results.json | jq 📺 Démo Installation Prérequis : virtualenv, python3 1. git...

bucket-stream

🚨 Bucket Stream is no longer maintained. If you need support or consultation for your red teaming endeavours, drop me an e-mail [email protected] 🚨 Bucket Stream Find interesting Amazon S3 Buckets by watching certificate transparency logs. This tool simply listens to various certificate...

msticpy

MSTIC Jupyter and Python Security Tools Microsoft Threat Intelligence Python Security Tools. msticpy is a library for InfoSec investigation and hunting in Jupyter Notebooks. It includes functionality to: query log data from multiple sources enrich the data with Threat Intelligence, geolocations a...

msticpy

Outils de sécurité Python et Jupyter MSTIC Outils de sécurité Python Microsoft Threat Intelligence. msticpy est une bibliothèque pour l'investigation et la chasse en sécurité informatique dans les notebooks Jupyter. Elle comprend des fonctionnalités pour : interroger des données de logs provenant...

OSXAuditor

OS X Auditor OS X Auditor — это бесплатный инструмент компьютерной криминалистики для Mac OS X. OS X Auditor анализирует и вычисляет хэши следующих артефактов на работающей системе или копии анализируемой системы: расширения ядра системные агенты и демоны агенты и демоны сторонних разработчиков...

JKS-private-key-cracker-hashcat

JKS private key cracker - Гвоздь в крышку гроба JKS Java Key Store JKS — это способ хранения одного или нескольких криптографических закрытых и открытых ключей для асимметричной криптографии в файле, принятый в Java. Хотя существуют различные форматы хранилищ ключей, Java и Android по-прежнему по...