threatresearch

threatresearch I wanted to call this repo "Nuclear Football Codes". I was outvoted...

xvna

XVNA Extreme Vulnerable Node Application XVNA is an extreme vulnerable node application coded in NodejsExpressjs/MongoDB that helps security enthusiasts to learn application security. it's not counseled to host this application online as it is intended to be Vulnerable. We tend to suggest hosting...

wordpress-really-simple-security-authn-bypass-vulnerable-application

wordpress-really-simple-security-authn-bypass-vulnerable-application Esta es una aplicación vulnerable para probar el exploit de la omisión de autenticación de Really Simple Security 9.1.2 CVE-2024-10924. ¡ADVERTENCIA! Esta aplicación contiene vulnerabilidades de seguridad graves. ¡Úsala bajo tu...

CVE-2025-14847

🛡️ CVE-2025-14847 - Easy Tool for MongoDB Security 📥 Download Now Download 📋 Overview CVE-2025-14847, also known as MongoBleed, is a security tool designed to identify vulnerabilities in MongoDB. This application helps users assess their MongoDB databases effectively. You do not need programming...

contrast

CodeSec by Contrast Security CodeSec delivers: The fastest and most accurate SAST scanner. Immediate and actionable results — scan code and serverless environments. A frictionless and seamless sign-in process with GitHub or Google Account. From start to finish in minutes. By running a scan on you...

yersinia

Spanning Tree 1: DOS attack sending conf BPDUs root@kitploit: Let's send some conf BPDUs claiming be root!!! By sending continously conf BPDU with root pathcost 0, randomly generated bridge id and therefore the same root id, and some default values for other fields, we try to annoy the switches...

exfilkit

exfilkit Data exfiltration utility for testing detection capabilities Description Data exfiltration utility used for testing detection capabilities of security products. Obviously for legal purposes only. Exfiltration How-To /etc/shadow - HTTP GET requests Server root@kitploit: ./exfilkit-cli.py ...

weevely3

Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...

crucible

root@kitploit: ██████╗██████╗ ██╗ ██╗ ██████╗██╗██████╗ ██╗ ███████╗ ██╔════╝██╔══██╗██║ ██║██╔════╝██║██╔══██╗██║ ██╔════╝ ██║ ██████╔╝██║ ██║██║ ██║██████╔╝██║ █████╗ ██║ ██╔══██╗██║ ██║██║ ██║██╔══██╗██║ ██╔══╝ ╚██████╗██║ ██║╚██████╔╝╚██████╗██║██████╔╝███████╗███████╗ ╚═════╝╚═╝ ╚═╝ ╚═════╝...

pytm

pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...

tengu

Tengu — Servidor MCP de Pentesting "En la mitología japonesa, el Tengu es un feroz espíritu de la montaña — maestro estratega, guerrero y entrenador de samuráis. En ciberseguridad, te guía a través de cada fase de la caza." Desde el reconocimiento hasta el informe — pentesting asistido por IA en ...

CVE-2020-9480

CVE-2020-9480...

hackbox

HackB0x v2.0 HackBox es la combinación de herramientas y técnicas increíbles. HackBox es una herramienta completa y potente que combina una variedad de técnicas de vanguardia para capacitar a los profesionales de la seguridad en su misión de identificar y corregir vulnerabilidades en aplicaciones...

CVE-2021-3019

Instrucciones de uso y descargo de responsabilidad Detección masiva de vulnerabilidad de recorrido de directorio en lanproxy CVE-2021-3019 Instrucciones de uso: Python CVE-2021-3019.py url.txt Cada URL en url.txt es una línea, las direcciones de vulnerabilidad se exportan en CVE-2021-3019.csv...

SecGen

Security Scenario Generator SecGen Summary SecGen creates vulnerable virtual machines, lab environments, and hacking challenges, so students can learn security penetration testing techniques. Boxes like Metasploitable2 are always the same, this project uses Vagrant, Puppet, and Ruby to create...

vimana-framework

Descripción general Vimana es un framework de seguridad modular para auditar APIs de Python y aplicaciones web. La arquitectura basada en plugins permite a los profesionales de seguridad evaluar, fuzzear y analizar proyectos de Python mediante técnicas automatizadas y manuales. Capacidades...

vimana-framework

Overview Vimana is a modular security framework for auditing Python APIs and Web applications. The plugin-based architecture enables security professionals to assess, fuzz, and analyze Python projects through automated and manual techniques. Core Capabilities: Vulnerability detection and...

BTPS-SecPack

El Paquete de Seguridad PowerShell del Equipo Azul Usar Microsoft Teams para Alertas en Lugar de Correo Electrónico Si deseas usar Microsoft Teams para enviar alertas en lugar de usar correo electrónico, deberás cargar la rama microsoft-teams de este repositorio, que tiene las modificaciones para...

scorecard

OpenSSF Scorecard...

setup-wordpress-with-security-best-practice

Setup WordPress With Security Best Practice This document is written with the aim of being suitable for web applications developed using WordPress that do not interact with users. It is primarily intended for corporate brand pages, various static views, recruitment pages, and similar sites. For...