V3n0M-Scanner

Venom Offensive Security Framework for Vulnerability Scanning & Pentesting Warning : Version 4.3.3 now requires PROXIES/VPN. Features Cloudflare Resolver Cloudbuster LFI-RCE and XSS Scanning LFI to RCE & XSS SQL Injection Vuln Scanner SQLi Extremely Large D0rk Target Lists Detects known WAFs...

black-widow

description: - black-widow is one of the most useful, powerful and complete offensive penetration testing tool black-widow Offensive penetration testing tool Open Source black-widow provides easy ways to execute many kinds of information gatherings and attacks. Fully Open Source Written in Python...

shARP

|| || /\ | ? | ? || / \ | ? | ? || / \ | ? | ? // ||------- / \ |? |? // || || /--------\ | \ | // || || / \ | \ | // || || / \ | \ | // || || / \ | \ | // || || / \ | \ | Description- ARP spoofing allows an attacker to intercept data frames on a network, modify the traffic, or stop all traffic...

theHarvester

About theHarvester is a simple to use, yet powerful tool designed to be used during the reconnaissance stage of a red team assessment or penetration test. It performs open source intelligence OSINT gathering to help determine a domain's external threat landscape. The tool gathers names, emails,...

cve-2024-4577

cve-2024-4577 poc Check for vulnerabilities python cve-2024-4577.py -u http://172.16.128.133 After a vulnerability is detected, you can use -c to execute a custom command python cve-2024-4577.py -u http://172.16.128.133 -c '?php system'whoami';'...

nodejsscan

nodejsscan Static security code scanner SAST for Node.js applications powered by libsast and semgrep. Made with in India Support nodejsscan Donate via Paypal: Sponsor the Project: e-Learning Courses & Certifications OpSecX Node.js Security: Pentesting and Exploitation - NJS Run nodejsscan docker...

DBC2

DBC2 LAST/CURRENT VERSION: 0.2.6 Author: Arno0x0x - @Arno0x0x DBC2 DropboxC2 is a modular post-exploitation tool, composed of an agent running on the victim's machine, a controler, running on any machine, powershell modules, and Dropbox servers as a means of communication. This project was...

iocextract

iocextract Indicator of Compromise IOC extractor for some of the most commonly ingested artifacts. Table of contents Overview The Problem Our Solution Example Use Case Installation Usage Library Command Line Interface Helpful Information FAQ More Details Custom Regex Related Projects Contributing...

wifite2

Wifite This repo is a complete re-write of wifite, a Python script for auditing wireless networks. Wifite runs existing wireless-auditing tools for you. Stop memorizing command arguments & switches! Wifite is designed to use all known methods for retrieving the password of a wireless access point...

graphql-cop

GraphQL Cop - Security Audit Utility for GraphQL About GraphQL Cop is a small Python utility to run common security tests against GraphQL APIs. GraphQL Cop is perfect for running CI/CD checks in GraphQL. It is lightweight, and covers interesting security issues in GraphQL. GraphQL Cop allows you ...

uefi-firmware-parser

UEFI Firmware Parser .. image:: https://travis-ci.org/theopolis/uefi-firmware-parser.svg?branch=master :target: https://travis-ci.org/theopolis/uefi-firmware-parser The UEFI firmware parser is a simple module and set of scripts for parsing, extracting, and recreating UEFI firmware volumes. This...

Raccoon

Raccoon Offensive Security Tool for Reconnaissance and Information Gathering Features DNS details DNS visual mapping using DNS dumpster WHOIS information TLS Data - supported ciphers, TLS versions, certificate details and SANs Port Scan Services and scripts scan URL fuzzing and dir/file detection...

cve-2022-22947

CVE-2022-22947 Poc for CVE-2022-22947 DnsLog When I was writing the PoC for xray, the reverse couldn't receive DNS requests. After debugging for a long time, I decided to write a Python version of the PoC…… python3 poc-cve-2022-22947.py...

RDWAtool

A python all-in-one tool to extract information, spray and bruteforce passwords on a Microsoft Remote Desktop Web Access RDWA application. This python tool allows to extract various information from a Microsoft Remote Desktop Web Access RDWA application, such as the FQDN of the remote server, the...

amun

Amun Amun was the first python-based low-interaction honeypot, following the concepts of Nepenthes but extending it with more sophisticated emulation and easier maintenance. Requirements Pyhon = 2.6 no Python3 support yet optional Python Psyco available at http://psyco.sourceforge.net/ optional...

GeoSentinel

🌍 GeoSentinel GeoSentinel is a geospatial monitoring platform that tracks global movement in real time. It aggregates ship and flight routes, live coordinates, and geodata into a unified system, providing clear geographic and geopolitical awareness for analysis, visualization, and decision-making...

nfstream

NFStreamrepo is a multiplatform Python framework providing fast, flexible, and expressive data structures designed to make working with online or offline network data easy and intuitive. It aims to be Python's fundamental high-level building block for doing practical, real-world network flow data...

ct-exposer

Discover sub-domains by searching through Certificate Transparency logs What is CT? Certificate Transparency CT is an experimental IETF standard. The goal of it was to allow the public to audit which certificates were created by Certificate Authorities CA. TLS has a weakness that comes from the...

ctftools

CTF-Tool Database Twitter: @hydr0nium Dependencies: sudo apt install python2 Installation: git clone https://github.com/white-hood/ctftools.git cp .ctftools cd /bin ln -s ctftools /path/to/ctftools.py Usage: ./ctftools | normal use ./ctftools --remove | remove tool from database ./ctftools --add ...

YourMemory

YourMemory Your AI has the memory of a goldfish. Not anymore. Persistent, self-improving memory for AI agents — built on the science of how humans remember. ▶ Try the live interactive demo · Website · Benchmarks The problem Every morning your AI agent treats you like a stranger. Same context...