openssl

Welcome to the OpenSSL Project !openssl logowww.openssl.org !github actions ci badgegithub actions ci OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations ar...

AdvPhishing

Check For Mp4: https://www.instagram.com/tukbuck/reel/DTBBBknj-nd/ Note: If you want to activate this tool or want same project with working condition then first pay: ETHERC20 wallet address: 0xe48df3c0e1713518096c7d2d0a2dce70aa85cd33 Follow on Social Media Platforms Contribute us Want to Learn t...

dnsrecon

DNSRecon DNSRecon is a Python port of a Ruby script that I wrote to learn the language and about DNS in early 2007. This time I wanted to learn about Python and extend the functionality of the original tool and in the process re-learn how DNS works and how could it be used in the process of a...

BabySploit

Made For Kali Linux. No Support For Other Distros If There Are Problems. Tested and Working on MacOS for most Tools. Developed by @maxbridgland Donate BabySploit is a penetration testing toolkit aimed at making it easy to learn how to use bigger, more complicated frameworks like Metasploit. With ...

WhatWeb

WhatWeb - Next generation web scanner Developed by Andrew Horton urbanadventurer and Brendan Coles bcoles Latest Release: v0.6.4. April 3, 2026 License: GPLv2 This product is subject to the terms detailed in the license agreement. For more information about WhatWeb visit...

fuxi

Fuxi 2.1 - developing Fuxi is cross-platform compatible and works in any Python 3.x environment including Linux, Mac OSX and Windows. Getting Started Docker docker pull jeffzh3ng/fuxi docker run -itd --name fuxidocker -p 5000:50020 jeffzh3ng/fuxi:latest Wait about 15 seconds for the service to...

detux

Detux: The Multiplatform Linux Sandbox Introduction: Detux is a sandbox developed to do traffic analysis of the Linux malwares and capture the IOCs by doing so. QEMU hypervisor is used to emulate Linux Debian for various CPU architectures. The following CPUs are currently supported: x86 x86-64 AR...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

magescan

Mage Scan The idea behind this is to evaluate the quality and security of a Magento site you don't have access to. The scenario when you're interviewing a potential developer or vetting a new client and want to have an idea of what you're getting into. Installation .phar Download the magescan.pha...

barrido

barrido Console utility to find web application paths. Still in alpha version. Examples Multiple URLs bruteforcing: $ cat urls.txt https://target.a.com https://target.b.com https://target.c.com $ barrido urls.txt wordlists/quickhits.txt -se | tee curiouspaths.txt https://target.c.com/manager/ 401...

juumla

🦁 Juumla 🦁 Juumla Juumla is a python tool created to identify Joomla version, scan for vulnerabilities and sensitive files. ⚡ Installing / Getting started A quick guide on how to install and use Juumla. 1. Clone the repository - git clone https://github.com/oppsec/juumla.git 2. Install the...

MaFrida

MaFrida A simple yet powerful Magisk module that automates starting the Frida server on boot and provides a convenient command-line interface to manage different Frida versions on Android. Features Automatically starts frida-server at boot. Easily switch between different Frida versions...

haaukins

Haaukins Haaukins is a highly accessible and automated virtualization platform for security education, it has three main components Docker, Virtualbox and Golang, the communication and orchestration between the components managed using Go programming language. The main reason of having Go...

social-engineer-toolkit

The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...

ChaseHQ

Pulling apart Chase H.Q. for the ZX Spectrum Reverse engineering by David Thomas, 2023-2024 Project started: March 2023 This is an in-progress disassembly of the ZX Spectrum conversion of Chase H.Q. by Ocean Software. So far this only covers the 48K version and the first stage of the game. The 12...

CVE-2019-5029

CVE-2019-5029 هذا هو برنامج Python النصي لإثبات المفهوم PoC لـ CVE-2019-5029. وهو استغلال لتنفيذ الأوامر عن بُعد RCE في واجهة Exhibitor Web UI 1.7.1. طريقة الاستخدام قم باستنساخ هذا المستودع git clone https://github.com/yZ1337/CVE-2019-5029.git نفذ الأمر التالي python3 CVE-2019-5029.py تأكد من أن...

CVE-2014-91371-Wordpress-

CVE-2014-91371-Wordpress الوصف wordpress with Plugin Slider REvolution 4.1.4...

Next.js-RSC-RCE-Scanner-CVE-2025-66478

ماسح RSC RCE لـ Next.js ومجموعة إثبات/استغلال CVE-2025-66478 ماسح سطر أوامر للكشف الدفعي عن إصدارات تطبيقات Next.js وتحديد ما إذا كانت متأثرة بثغرة CVE-2025-66478. هذا الماسح لا يستغل الثغرة وصف الثغرة https://nextjs.org/blog/CVE-2025-66478 التثبيت المتطلبات الأساسية Go 1.19 أو أحدث متصفح...

Linux_Exploit_Suggester

LinuxExploitSuggester Linux Exploit Suggester؛ أداة اقتراح استغلالات Linux استنادًا إلى رقم إصدار نظام التشغيل. عند تشغيل هذا البرنامج بدون وسائط، سينفّذ الأمر 'uname -r' للحصول على رقم إصدار نظام التشغيل Linux، ثم يعرض قائمة مقترحة بالاستغلالات المحتملة. لا شيء معقد؛ لذا فإن أي تصحيح مطبّق أو...

CVE-2024-28995

CVE-2024-28995 إخلاء مسؤولية هذه الأداة مخصّصة للاستخدام في البحث والتعلم الأمني الشخصي فقط. أي عواقب أو خسائر مباشرة أو غير مباشرة ناتجة عن نشر هذه الأداة أو استخدامها تقع على عاتق المستخدم وحده، ولا يتحمل مؤلف الأداة أي مسؤولية عن ذلك. version = 15.4 NAME: Serv-U - قراءة ملفات تعسفية USAGE:...