RpcInvestigator

RPC Investigator Please read our blog post announcement. RPC Investigator RPCI is a .NET/C Windows Forms UI application that provides an advanced discovery and analysis interface to Windows RPC endpoints. The tool provides a visual interface around the existing core RPC capabilities of the...

nginx_log_check

nginxlogcheck Nginx log security analysis script Features Top 20 address statistics SQL injection analysis Scanner alert analysis Vulnerability exploitation detection Sensitive path access File inclusion attack Webshell Find Top 20 URLs by response length Find rare script file access Find 302...

userefuzz

...

dvna

Damn Vulnerable NodeJS Application DVNA Damn Vulnerable NodeJS Application DVNA is a simple NodeJS application to demonstrate OWASP Top 10 Vulnerabilities and guide on fixing and avoiding these vulnerabilities. The fixes branch will contain fixes for the vulnerabilities. Fixes for vulnerabilities...

dvna

Damn Vulnerable NodeJS Application DVNA Damn Vulnerable NodeJS Application DVNA 是一个简单的 NodeJS 应用程序，用于演示 OWASP Top 10 漏洞 并提供修复和避免这些漏洞的指南。fixes 分支包含漏洞的修复代码。OWASssP Top 10 2017 漏洞的修复在 fixes-2017 分支。 该应用程序由常用的库驱动，例如 express、passport、sequelize 等。 开发者安全指南书 该应用程序附带一本 开发者友好的全面指南书 ，可用于学习、避免和修复漏洞。该指南位于 doc...

masq

Sit where the model sits. See what it can see. MASQ MASQ is a local security CLI for AI agent stacks. It sits in the same seat the model sits in: it reads MCP tool catalogs, completes the MCP handshake, looks through session logs, and probes local model HTTP ports. Then it prints findings and...

CVE-2026-66422

A flaw was found in Apache Tomcat. This improper authorization vulnerability occurs because security-role-ref definitions are incorrectly used as role aliases within the Realm, in addition to their correct usage with Request.isUserInRole. This misconfiguration allows for a bypass of declarative...

bypass-403

Bypass-403 A simple script just made for self use for bypassing 403 It can also be used to compare responses on verious conditions as shown in the below snap Usage ./bypass-403.sh https://example.com admin ./bypass-403.sh website-here path-here Features Use 24 known Bypasses for 403 with the help...

Super-UEFIinSecureBoot-Disk

Super UEFIinSecureBoot Disk Super UEFIinSecureBoot Disk is a proof-of-concept not actively maintained or enhanced bootable image with GRUB2 bootloader designed to be used as a base for recovery USB flash drives. Key feature: disk is fully functional with UEFI Secure Boot mode activated. It can...

CVE-2021-33739_PoC_Analysis

This is what I analyzed and studied about CVE-2021-33739 PoC. You can get the full resources from here: https://github.com/freeide2017/CVE-2021-33739-POC...

log4j2burpscanner

SOLO PARA PRUEBAS, NO ATAQUES A NADIE SOLO PARA PRUEBAS, NO ATAQUES A NADIE SOLO PARA PRUEBAS, NO ATAQUES A NADIE Grupo de discusión Si el código QR no funciona, agrega WeChat f-f0ng, comentario log4j2burpscanner para intercambio Sigue la cuenta oficial de WeChat only security, responde...

trivy

📖 ドキュメント Trivy（発音）は、包括的で多用途なセキュリティスキャナーです。 Trivyには、セキュリティ問題を探す スキャナー と、それらの問題が見つかる ターゲット があります。 ターゲット（Trivyがスキャンできるもの）： コンテナイメージ ファイルシステム Gitリポジトリ（リモート） 仮想マシンイメージ Kubernetes...

otseca

Herramienta de auditoría de seguridad de código abierto para buscar y volcar la configuración del sistema. Introducción | Descripción | Requisitos | Salida | Parámetros | Informes | Cómo funciona | Otros Introducción El objetivo principal La premisa principal de crear esta herramienta fue la...

otseca

Open source security auditing tool to search and dump system configuration. Introduction | Description | Requirements | Output | Parameters | Reports | How it works | Other Introduction...

DEBIAN-CVE-2026-19953

URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep. nameprep lowercases each host label but performs no Unicode normalization. IDNA requires a label to be normalized to Form C before it is encoded RFC 5891, so a label...

CVE-2026-19953

URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep. nameprep lowercases each host label but performs no Unicode normalization. IDNA requires a label to be normalized to Form C before it is encoded RFC 5891, so a label...

br0w

br0w Hack The Br0w | Play your browser and learn more, hack fun !! The Br0w is a simple web to learn about and about web security with a browser as a tool that sometimes people forget about more benefits. Maybe it's more like Capture The Flag CTF. One of the challenges is, disable css and base64...

Tools

Tools Cyber Security Tools SecTools.Org: Top 125 Network Security Tools List of SecTools.Org: Top 125 Network Security Tools - For more than a decade, the Nmap Project has been cataloguing the network security community's favorite tools. Kali Tools Kali Tool List - Kali Linux Tools Listing...

nishang

Nishang Nishang 是一个框架和脚本及 payload 集合，支持使用 PowerShell 进行 offensive security、渗透测试和 red teaming。Nishang 在渗透测试的所有阶段都很有用。 作者：Nikhil Mittal Altered Security - 动手红队和企业安全培训！ 创始人 使用 在当前的 PowerShell 会话中导入所有脚本（PowerShell v3 及以上版本）。 root@kitploit: PS C:\nishang Import-Module .\nishang.psm1 使用点加载（dot...

electronegativity

Electronegativity ⚠️ 我们已不再积极维护此项目 ⚠️ 什么是 Electronegativity？ Electronegativity 是一个用于识别基于 Electron 的应用中的配置错误和安全反模式的工具。 它利用 AST 和 DOM 解析来查找与安全相关的配置，如白皮书《Electron 安全清单——开发者和审计者指南》中所述。 软件开发者和安全审计员可使用此工具来检测和减轻使用 Electron 开发应用时潜在的弱点及实现漏洞。使用 Electronegativity 仍需对 Electron（不）安全性有良好理解，因为该工具检测到的某些潜在问题需要手动调查。...