15079 matches found
blindy
Blindy Простой скрипт для выполнения брутфорс-атаки на слепую SQL-инъекцию в MySQL Примечание: этот скрипт создан для развлечения и может быть полезен в некоторых CTF-задачах : описание Скрипт перебирает запросы, перечисленные в наборах в указанном файле, и пытается выполнить брутфорс в любом...
hyperfox
Hyperfox Hyperfox is a security auditing tool that proxies and records HTTP and HTTPS traffic between two points. Installation You can install the latest version of hyperfox to /usr/local/bin with the following command requires admin privileges: curl -sL...
dalfox
Dalfox is a powerful open-source tool that focuses on automation, making it ideal for quickly scanning for XSS flaws and analyzing parameters. Its advanced testing engine and niche features are designed to streamline the process of detecting and verifying vulnerabilities. Key features Subcommands...
PyPsPipeJack
PyPsPipeJack 이 도구는 제 다른 도구인 OpenPsPipeJack의 후속 버전입니다. 이 버전은 Python 기반이며 주로 Impacket을 사용하여 Linux에서 작동합니다. 요약하자면, 원격 호스트에 대해 로컬 관리자 권한이 있으면 해당 호스트의 원격 PowerShell 세션에 연결하여 그 세션 내에서 명령을 실행할 수 있습니다. 이는 측면 이동lateral movement의 기회를 제공할 뿐만 아니라 권한 상승privilege escalation의 기회도 제공합니다. 예를 들어, RBCD, Shadow...
kodex
Kodex Community Edition - CE is an open-source toolkit for privacy and security engineering. It helps you to automate data security and data protection measures in your data engineering workflows. It offers the following functionality: Read data items from a variety of sources such as files,...
temcrypt
The Next-gen Encryption Try temcrypt on the Web → temcrypt SDK Focused on protecting highly sensitive data, temcrypt is an advanced multi-layer data evolutionary encryption mechanism that offers scalable complexity over time, and is resistant to common brute force attacks. You can create your own...
DonPAPI
DonPAPI DonPAPI автоматизирует удаленный сбор секретов на нескольких компьютерах под управлением Windows, с учетом защиты от обнаружения. Собранные учетные данные: Учетные данные браузера Chromium, куки и Chrome Refresh Token Сертификаты Windows Диспетчер учетных данных Учетные данные и куки...
CVE-2025-5058
eMagicOne Store Manager для WooCommerce Warning: Trying to access array offset on false in /home/vagrant/research/Lab1/wp-content/plugins/store-manager-connector/classes/class-emosmcwoocommerceoverrider.php on line 324 Warning: Trying to access array offset on...
Modlishka
..Modlishka.. Modlishka — это инструмент для проведения пентестов с открытым исходным кодом, который работает как прокси-сервер типа «человек посередине». Он представляет новый технический подход к обработке HTTP-трафика в браузере, позволяя прозрачно проксировать многодоменный трафик назначения...
java-stager
java-stager A PoC Java Stager which can download, compile, and execute a Java file in memory. This is for research purposes only, do not use this where you are unauthorised to do so. What is this? This is based on the work of James Williams from his talk "Next Gen AV vs My Shitty Code" available...
Elite
Deprecated Temporarily The parent Covenant project no longer requires a client-side application. Elite has temporarily been deprecated. Please instead use the web interface included with the Covenant project. Elite may eventually be brought up-to-date with the Covenant project as an alternative...
ExtractBitlockerKeys
Системный административный или пост-эксплуатационный скрипт для автоматического извлечения ключей восстановления BitLocker из домена. Возможности Автоматически получает список всех компьютеров из LDAP контроллера домена. Многопоточные подключения для извлечения ключей BitLocker из LDAP. Перебор...
fscan
Fscan 中文 Comprehensive intranet scanning tool for automated vulnerability assessment. Version : 2.2.0 Features Scanning Host Discovery - ICMP/Ping alive detection, B/C segment statistics for large networks Port Scanning - TCP connect scan, 133 built-in ports, port groups web/db/service/all...
botb
Break out the Box BOtB BOtB — это инструмент для анализа и эксплуатации контейнеров, предназначенный для пентестеров и инженеров, а также совместимый с CI/CD, работающий с распространёнными технологиями CI/CD. Что он делает? BOtB — это CLI-инструмент, который позволяет: Эксплуатировать...
botb
Break out the Box BOtB BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies. What does it do? BOtB is a CLI tool which allows you to: Exploit common container vulnerabilities Perform commo...
CVE-2026-57827
CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE Split-Controller Upload Bypass → Direct Write Task → /downloads/shell.php → RCE Overview CVE-2026-57827 is a critical-severity CVSS 9.8 unauthenticated arbitrary file upload vulnerability in RSFiles! comrsfiles, a widely...
ffuf
ffuf - 더 빨리 퍼징해, 이 바보야 Go로 작성된 빠른 웹 퍼저. 설치 사용 예시 콘텐츠 발견 가상 호스트 발견 파라미터 퍼징 POST 데이터 퍼징 외부 뮤테이터 사용 구성 파일 도움말 인터랙티브 모드 설치 릴리스 페이지에서 사전 빌드된 바이너리를 다운로드하여 압축을 풀고 실행하세요! 또는 Windows에서 Scoop을 사용한다면 ffuf는 다음과 같이 설치할 수 있습니다: scoop install ffuf 또는 Windows에서 Winget을 사용한다면 ffuf는 다음과 같이 설치할 수 있습니다: winget insta...
dorkbot
dorkbot Scan Google or other search results for vulnerabilities. dorkbot is a modular command-line tool for performing vulnerability scans against sets of webpages returned by Google search queries or other supported sources. It is broken up into two sets of modules: Indexers - modules that retur...
bing-ip2hosts
Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...
