censys-python

Censys Python Library !WARNING DEPRECATION NOTICE : The Censys Search v1 and v2 APIs will be deprecated soon. Please migrate to the new Censys Platform. 📖 New API Documentation : https://docs.censys.com/reference/get-started 📦 New Python SDK : censys/censys-sdk-python 🖥️ New CLI Tool cencli:...

PANO

PANO - Platform for Analysis and Network Operations PANO is a powerful OSINT investigation platform that combines graph visualization, timeline analysis, and AI-powered tools to help you uncover hidden connections and patterns in your data. Getting Started • Features • Documentation • Contributin...

pvbrf-id

PVBRF-ID: Private, Verifiable and Byzantine-Robust Federated Intrusion Detection for Oilfield Enterprise Networks Simulation code, raw results and figure scripts for the paper Mustafa S. Aljumaily, Ali Ataeemh Allami, Mustafa N. Mnati, Nawar S. Alseelawi, Shahab Abdulla, "PVBRF-ID: Private,...

DeepZero

Automated vulnerability research pipeline engine Define pipelines as YAML. DeepZero handles orchestration, parallelism, fault tolerance, and state. English | 简体中文 | Français 🔗 Pipeline-as-YAML - chain ingest, filter, transform, and LLM-assess stages declaratively ⚡ Parallel execution -...

EntraFalcon

EntraFalcon EntraFalcon is a PowerShell-based assessment tool for pentesters, security analysts, and system administrators to evaluate the security posture of a Microsoft Entra ID environment. Designed for ease of use, EntraFalcon runs on PowerShell 5.1 and 7, supports both Windows and Linux, and...

CVE-2025-30208

中文 | English Vite Dev Server Vulnerability Scanner 一个内外网通吃的自动化扫描器 An automated tool for scanning Vite development server vulnerabilities. This tool utilizes the FOFA API to collect potential targets and automatically detects specific vulnerabilities. Features Auto Automatic target asset collectio...

Empire

Empire Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers. The Empire server is written in Python 3 and is modular to allow operator flexibility. Empire comes built-in with a client that can be used remotely to access the server...

firefox-devtools-mcp

Firefox DevTools MCP Model Context Protocol server that lets AI agents use Firefox. It has two main use cases: Agentic browsing : the agent uses the browser for regular tasks, such as reading pages, filling forms and going through multi-step flows on websites. Agent-assisted web development : the...

osint_toolkit

OSINT Toolkit Warning OSINT Toolkit is not production ready yet. This is an early prototype, that still needs some work to be done. A fullstack web application built for security analysts OSINT Toolkit is a self-hostable, on-demand analysis platform designed for security specialists. It...

CVE-2021-25735

CVE-2021-25735 Exploit CVE-2021-25735: Kubernetes Validating Admission Webhook Bypass Set the Vulnerable Environment Let's start with running the script gencerts.sh to generate TLS certificates and keys. bash gencerts.sh To deploy the admission controller you need to build the Docker container...

Grid-Mobile

Grid - Encrypted Location Sharing Be Hard to Track. mygrid.app Grid is a secure, end-to-end encrypted E2EE location sharing application integrated with the Matrix Protocol. Built using Flutter, Grid provides a privacy-focused solution for sharing your location with trusted contacts. Features...

StackRot

StackRot CVE-2023-3269: Linux kernel privilege escalation vulnerability GitHub-CI-verified exploit A flaw was found in the handling of stack expansion in the Linux kernel 6.1 through 6.4, aka "Stack Rot". The maple tree, responsible for managing virtual memory areas, can undergo node replacement...

DVWA

DAMN VULNERABLE WEB APPLICATION Damn Vulnerable Web Application DVWA is a PHP/MariaDB web application that is damn vulnerable. Its main goal is to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of...

scan4all

💬 README中文 • Compile/Install/Run • Parameter Description • How to use • Scenario • POC List • Custom Scan • Best Practices Features Free one id Multi-target web netcat for reverse shell What is scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent。red te...

social-engineer-toolkit

The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...

agentic-radar

A Security Scanner for your agentic workflows! View Demo · Documentation · Report Bug · Request Feature Table of Contents 1. Description 2. Agentic Visualizer 3. Getting Started Prerequisites Installation 4. Advanced Installation CrewAI Installation OpenAI Agents Installation 5. Usage 6. Advanced...

LSTAR-EN

LSTAR - Aggressor Translated to English! By Google Translate and Deepl For the purpose of simplifying CS right-click and facilitating self-integration, refer to a large number of post-infiltration plugins Refactored and enriched host-related credential acquisition, multi-level intranet penetratio...

CVE-2023-0386

typora-copy-images-to: ./image CVE-2023-0386 Exploit Usage: First : Upload fuse.c and exp.sh to the /tmp directory. You can use scp or python3 -m http.server to upload the file to the target. scp /Desktop/CVE-2023-0386/exp.sh [email protected]:/tmp scp /Desktop/CVE-2023-0386/fuse.c...

android-backup-extractor

Android backup extractor Utility to extract and repack Android backups created with adb backup ICS+. Largely based on BackupManagerService.java from AOSP. Building Requires Java 11. Handling encrypted backups requires the JCE unlimited strength jurisdiction policy not needed if using current Java...

FluxER

🔒 FluxER Fluxion Easy Runner for Termux Automated installer and launcher for Fluxion - a wireless security auditing toolkit for WPA/WPA2 testing and network analysis in Termux environments. 🎯 Features Automated Setup : One-command installation of Ubuntu proot and Fluxion Optimized for Termux :...