CVE-2019-0708

CVE-2019-0708 sup pry0cc :3 test: vote for thugcrowd in eu cyber something or other...

JSONBee

JSONBee A ready to use JSONP endpoints to help bypass content security policy of different websites. The tool was presented during HackIT 2018 in Kiev. The presentation can be found here not sure why format of the slides is screwed :D:...

cookie_crimes

Chrome Cookie Extraction Without Root This will print out a user's Chrome cookies. You don't need to have their password or be root to use it. nice nice nice nice nice. If you are not the kind of person who regularly gets the ability to execute code on other people's computers, you probably don't...

vulpy

Vulpy - Web Application Security Lab Vulpy is a web application developed in Python / Flask / SQLite that has two faces. GOOD : Tries to code with secure development best practices in mind. BAD : Tries to code like possibly you. :p Is developed has a laboratory for the following courses: Secure...

BADministration

BADministration What is BADministration? BADministration is a tool which interfaces with management or administration applications from an offensive standpoint. It attempts to provide offsec personnel a tool with the ability to identify and leverage these non-technical vulnerabilities. As always:...

hash-identifier

hash-identifier Software to identify the different types of hashes used to encrypt data and especially passwords. Encryption formats supported: ADLER-32 CRC-32 CRC-32B CRC-16 CRC-16-CCITT DESUnix FCS-16 GHash-32-3 GHash-32-5 GOST R 34.11-94 Haval-160 Haval-192 110080 ,Haval-224 114080 ,Haval-256...

drs-malware-scan

Perform malware scan analysis of on-prem servers using AWS services Challenges with on-premises malware detection It can be difficult for security teams to continuously monitor all on-premises servers due to budget and resource constraints. Signature-based antivirus alone is insufficient as moder...

BadBlood

BadBlood BadBlood by Secframe fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an...

BadBlood

BadBlood BadBlood de Secframe llena un dominio de Microsoft Active Directory con una estructura y miles de objetos. La salida de la herramienta es un dominio similar a un dominio del mundo real. Después de ejecutar BadBlood en un dominio, los analistas e ingenieros de seguridad pueden practicar e...

CVE-2023-4549

ID de CVE : CVE-2023-4549 Tipo de Vulnerabilidad : Cross-Site Scripting Descripción : El plugin DoLogin Security para WordPress es vulnerable a Cross-Site Scripting Almacenado a través del encabezado 'X-Forwarded-For' en versiones hasta la 3.6 inclusive, debido a una insuficiente sanitización de...

uafuzz

UAFuzz: Binary-level Directed Fuzzing for Use-After-Free Vulnerabilities Directed Greybox Fuzzing DGF like AFLGo aims to perform stress testing on pre-selected potentially vulnerable target locations, with applications to different security contexts: 1 bug reproduction, 2 patch testing or 3 stati...

trape

trape stable v2.0 People tracker on the Internet: Learn to track the world, to avoid being traced. Trape is an OSINT analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time. It was created with the aim of teaching the world how larg...

CVE-2020-5902

CVE-2020-5902 CVE-2020-5902...

matano

Lago de datos de seguridad de código abierto para AWS Matano Open Source Security data lake es un lago de datos de seguridad nativo en la nube de código abierto, construido para equipos de seguridad en AWS...

MASTG-Hacking-Playground

MASTG Hacking Playground Welcome to the MASTG Hacking Playground which is part of the OWASP Mobile Application Security MAS project. The MASTG Hacking Playground is a collection of educational iOS and Android mobile apps, that are intentionally build insecure in order to give practical guidance t...

ROOT-APP-PYPI-CVE-2025-54121 CVE-2025-54121 in starlette - Patched by Root

Root has patched CVE-2025-54121 in the starlette package for Root:PyPI. Multiple fixed versions available...

NodeGoat

NodeGoat Al ser ligero, rápido y escalable, Node.js se está convirtiendo en una plataforma ampliamente adoptada para el desarrollo de aplicaciones web. Este proyecto proporciona un entorno para aprender cómo se aplican los riesgos de seguridad del OWASP Top 10 a las aplicaciones web desarrolladas...

WebGoat.NET

Webgoat.NET Código fuente: https://github.com/jerryhoff/WebGoat.NET Descargar zip: https://github.com/jerryhoff/WebGoat.NET/zipball/master Esta aplicación web es una plataforma de aprendizaje que intenta enseñar sobre fallos comunes de seguridad web. Contiene fallos de seguridad genéricos que...

bootmodechecker

bootmodechecker This app checks if your Nexus 6/6P is still vulnerable to CVE-2016-8467 and/or if your bootmode property has been tampered with. Also available under Google Play: https://play.google.com/store/apps/details?id=roeeh.bootmodechecker...

CVE-2019-0708

CVE-2019-0708 CVE-2019-0708 Sorry Everyone. This is our team's testing program, not click bait. If you think we have others purpose, reconsider yourself. If you want to busfame, I don't care. Thanks @testanull, sorry for my English. I don't understand what people want in this repo?...