1436646 matches found
Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.12 bug fix and security update
Red Hat OpenShift Container Platform release 4.22.12 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...
sysflow
SysFlow: Pipeline de telemetría de sistemas nativos en la nube Este repositorio alberga la documentación y el rastreador de incidencias para todos los proyectos de SysFlow. Referencia rápida Documentación : la Documentación de SysFlow Dónde obtener ayuda : el Slack de la Comunidad SysFlow Dónde...
CVE-2022-23773-repro
CVE-2022-23773-repro...
XSStrike
XSStrike Advanced XSS Detection Suite XSStrike Wiki • Usage • FAQ • For Developers • Compatibility • Gallery XSStrike is a Cross Site Scripting detection suite equipped with four hand written parsers, an intelligent payload generator, a powerful fuzzing engine and an incredibly fast crawler...
CVE-2024-38856
nuclei -t CVE-2024-38856.yaml -u https://target...
CVE-2025-29927-test
CVE-2025-29927 Verification App We introduced this vulnerability at the 51st Security Study Group for Beginners. The presentation slides are available here. Usage Access the app using one of the methods below. Detailed usage is described on the app's top page. Method 1: Try with a container...
Phishing-Simulation
Phishing-Simulation Phishing Simulation mainly aims to increase phishing awareness by providing an intuitive tutorial and customized assessment without any actual setup - no domain, no infrastructure, no actual email address to assess people's action on any given situation and gives ability to...
Packer-Fuzzer
Packer Fuzzer A scanning tool for fast and efficient security detection of websites constructed by front-end packaging tools such as Webpack Proudly produced by Poc-Sir, KpLi0rn, Liucy, RachesseHS, Lupin-III...
drupwn
Drupwn v1.0.4 Description Drupwn claims to provide an efficient way to gather drupal information. Enumeration Exploitation Further explaination on our blog post article Supported tested version Drupal 7 Drupal 8 Execution mode Drupwn can be run, using two seperate modes which are enum and exploit...
androwarn
Androwarn Yet another static code analyzer for malicious Android applications Description Androwarn is a tool whose main aim is to detect and warn the user about potential malicious behaviours developped by an Android application. The detection is performed with the static analysis of the...
KNX-Bus-Dump
KNX Bus Dump KNX es un protocolo popular de automatización de edificios y se utiliza para interconectar sensores, actuadores y otros componentes de un edificio inteligente. Nuestra herramienta KNX Bus Dump utiliza la biblioteca Java Calimero, a la que contribuimos para esta herramienta, para...
cookiescanner
cookiescanner Tool for check the cookie flag in multiple sites. Intro Tool created to do more easy the process of check the cookie flag when we are analyzing multiple web servers. If you want to know for why could be useful this tools? https://www.owasp.org/index.php/SecureFlag...
CVE-2022-40146_Exploit_Jar
Apache Batik SSRF to RCE Jar Exploit Component link https://github.com/apache/xmlgraphics-batik Blog https://www.zerodayinitiative.com/blog/2022/10/28/vulnerabilities-in-apache-batik-default-security-controls-ssrf-and-rce-through-remote-class-loading Usage Modify the line 11 in...
CVE-2024-29988-exploit
CVE-2024-29988-exploit Exploit for Microsoft SmartScreen malicious execution april 2024 Description A critical vulnerability, CVE-2024-29988, has been discovered in Microsoft's April 2024 Patch Tuesday release. This vulnerability allows threat actors to bypass Microsoft's Mark of the Web MotW...
CVE-2023-22527
...
vm2 v3.11.8
vm2 vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Installation root@kitploit: npm install vm2 Quick Examples root@kitploit: import VM from 'vm2'; const vm = new VM; vm.runprocess.exit; // TypeError: process.exit is not a function root@kitploit: import Node...
security-tools-cheatsheets
Security Tools Cheatsheets...
NetSet
NetSet Operational Security utility and automator. Version 1.1.0 NetSet is designed to automate a number of operations that will help the user with securing their network traffic. It also provides an easy way to gather proxies and run utilities through Tor. All the utilities installed and used by...
gotestwaf
GoTestWAF GoTestWAF es una herramienta para la simulación de ataques API y OWASP que admite una amplia gama de protocolos API, incluyendo REST, GraphQL, gRPC, SOAP, XMLRPC y otros. Fue diseñada para evaluar soluciones de seguridad de aplicaciones web, como proxies de seguridad API, cortafuegos de...