cve-2023-43208-poc

Script PoC de Mirth Connect Script simple en Python para investigación de seguridad relacionada con vulnerabilidades de Mirth Connect. Importante Use este proyecto solo en sistemas que posea o para los que tenga permiso explícito por escrito para realizar pruebas. Las pruebas no autorizadas son...

darts

Time Series Made Easy in Python Darts is a Python library for user-friendly forecasting and anomaly detection on time series. It contains a variety of models, from classics such as ARIMA to deep neural networks. The forecasting models can all be used in the same way, using fit and predict...

ADEL

ADEL - Android Data Extractor Lite This Python script dumps all important SQLite Databases from a connected Android smartphone to the local disk and analyzes these files in a forensically accurate workflow. If no smartphone is connected you can specify a local directory which contains the databas...

metta

Metta Metta is an information security preparedness tool. This project uses Redis/Celery, python, and vagrant with virtualbox to do adversarial simulation. This allows you to test mostly your host based instrumentation but may also allow you to test any network based detection and controls...

neto

Project Neto: 브라우저 플러그인 분석 도구 키트 개요 Project Neto는 Firefox 및 Chrome과 같은 잘 알려진 브라우저의 플러그인 및 확장 기능의 숨겨진 기능을 분석하고 파헤치기 위해 고안된 Python 3 패키지입니다. 패키지된 파일의 압축을 풀고 manifest.json, 지역화 폴더 또는 Javascript 및 HTML 소스 파일과 같은 확장 기능의 관련 리소스에서 이러한 기능을 추출하는 과정을 자동화합니다. 설치 패키지를 설치하려면 pip3를 사용할 수 있습니다. pip3 install -e...

neto

Project Neto: A Toolkit for Analysing Browser Plugins Overview Project Neto is a Python 3 package conceived to analyse and unravel hidden features of browser plugins and extensions for well-known browsers such as Firefox and Chrome. It automates the process of unzipping the packaged files to...

sqlifinder

Escáner de inyección SQL hecho con Python. Características • Instalación • Uso • sqlifinder es una herramienta con la función de detectar vulnerabilidades de inyección SQL basadas en GET en aplicaciones web utilizando waybackurls, rastreadores web y payloads de inyección SQL. Características...

wp_drupal_timing_attack

wpdrupaltimingattack Python scripts to exploit CVE-2014-9016 and CVE-2014-9034. For legal purposes only...

pentestagent

PentestAgent AI Penetration Testing https://github.com/user-attachments/assets/a67db2b5-672a-43df-b709-149c8eaee975 Requirements Python 3.10+ API key for OpenAI, Anthropic, or other LiteLLM-supported provider Install Clone git clone https://github.com/GH05TCREW/pentestagent.git cd pentestagent...

socid-extractor

socidextractor Turn any public profile page into a structured account record — usernames, display names, bios, avatars, locations, joined-at dates, follower counts, external links, and the stable internal identifiers that uniquely pin an account across renames, redesigns, and deletions...

socid-extractor

socidextractor Convierte cualquier página de perfil público en un registro estructurado de cuenta: nombres de usuario, nombres mostrados, biografías, avatares, ubicaciones, fechas de registro, recuentos de seguidores, enlaces externos y los identificadores internos estables que identifican de for...

GitHarvest3r

Herramienta simple de recolección de exploits CVE escrita en python. Instalación git clone https://github.com/34zY/GitHarvest3r cd GitHarvest3r/ pip install -r requirements.txt Configurar clave de API 1. Obtén tu clave de API de Github gratuita = 2. Establécela en la variable TOKEN ;...

opencve

¿Qué es OpenCVE? OpenCVE es una plataforma de inteligencia de vulnerabilidades que te ayuda a monitorear y gestionar CVEs de manera eficiente. Agrega vulnerabilidades de múltiples fuentes MITRE, NVD, RedHat, Vulnrichment... y te permite filtrar, rastrear y organizarlas por proveedor, producto,...

Scrapling

Effortless Web Scraping for the Modern Web Métodos de selección · Elegir un fetcher · Spiders · Rotación de proxy · CLI · Modo MCP Scrapling es un framework de Web Scraping adaptativo que se encarga de todo, desde una sola solicitud hasta un rastreo a gran escala. Su parser aprende de los cambios...

maigret

Maigret English · 简体中文 · Français 📖 Documentation Maigret collects a dossier on a person by username only , checking for accounts on a huge number of sites and gathering all the available information from web pages. No API keys required. AI profiling demo. Sponsors Noimosiny is a comprehensive...

maigret

Maigret English · 简体中文 · Français 📖 Documentation Maigret collects a dossier on a person by username only , checking for accounts on a huge number of sites and gathering all the available information from web pages. No API keys required. AI profiling demo. Sponsors Noimosiny is a comprehensive...

binwally

binwally Binary and Directory tree comparison tool using the Fuzzy Hashing concept ssdeep For more information: http://w00tsec.blogspot.com/2013/12/binwally-directory-tree-diff-tool-using.html Prerequisites: Python 2.7+ gcc and build essentials libffi apt-get install libffi-dev libfuzzy-dev apt-g...

CamOver

CamOver CamOver es una herramienta de explotación de cámaras que permite revelar la contraseña de administrador de la cámara de red. Características Explota vulnerabilidades en los modelos de cámaras más populares como CCTV, GoAhead y Netwave. Optimizada para explotar múltiples cámaras a la vez...

pmkidcracker

PMKID WPA2 Cracker This program is a tool written in Python to recover the pre-shared key of a WPA2 WiFi network without any de-authentication or requiring any clients to be on the network. It targets the weakness of certain access points advertising the PMKID value in EAPOL message 1. Program...

dnstwist

See what sort of trouble users can get in trying to type your domain name. Find lookalike domains that adversaries can use to attack you. Can detect typosquatters, phishing attacks, fraud, and brand impersonation. Useful as an additional source of targeted threat intelligence. DNS fuzzing is an...