fuzzilli

Fuzzilli A coverage-guided fuzzer for dynamic language interpreters based on a custom intermediate language "FuzzIL" which can be mutated and translated to JavaScript. Usage The basic steps to use this fuzzer are: 1. Download the source code for one of the supported JavaScript engines. See the...

kube-score

kube-score kube-score is a tool that performs static code analysis of your Kubernetes object definitions. The output is a list of recommendations of what you can improve to make your application more secure and resilient. You can test kube-score out in the browser with the...

dvna

Damn Vulnerable NodeJS Application DVNA Damn Vulnerable NodeJS Application DVNA is a simple NodeJS application to demonstrate OWASP Top 10 Vulnerabilities and guide on fixing and avoiding these vulnerabilities. The fixes branch will contain fixes for the vulnerabilities. Fixes for vulnerabilities...

gophish

Gophish Gophish: Open-Source Phishing Toolkit Gophish is an open-source phishing toolkit designed for businesses and penetration testers. It provides the ability to quickly and easily setup and execute phishing engagements and security awareness training. Install Installation of Gophish is...

evtx

EVTX A cross-platform parser for the Windows XML EventLog format Features 🔒 Implemented using 100% safe rust - and works on all platforms supported by rust that have stdlib. ⚡ Fast - see benchmarks below. It's faster than any other implementation by orders of magnitude! 🚀 Multi-threaded. ✨ Suppor...

festin

FestIN the powered S3 bucket finder and content discover What is FestIn Why Festin Install Using Python Using Docker Full options Usage Configure search domains Concurrency HTTP Crawling configuration Manage results Proxy usage DNS Options Full Text Support Running as a service or watching mode...

xray

XRay has been reimplemented in Rust and expanded with more features, this repository is LEGACY code. Usehttps://github.com/evilsocket/legba XRAY XRay is a tool for network OSINT gathering, its goal is to make some of the initial tasks of information gathering and network mapping automatic. How Do...

goscan

GoScan is an interactive network scanner client, featuring auto-completion, which provides abstraction and automation over nmap. Although it started as a small side-project I developed in order to learn @golang, GoScan can now be used to perform host discovery, port scanning, and service...

aztarna

This repository has been archived and is not maintained any further. Refer to alurity for future progress on robot footprinting and fingerprinting. aztarna This repository contains Alias Robotics' aztarna, a footprinting tool for robots. Alias Robotics supports original robot manufacturers...

docker-tor-hiddenservice-nginx

Easily create and run hidden services Easily run a hidden service inside the Tor network with this container Generate the skeleton configuration for you hidden service, replace for your hidden service pattern name. Example, if you want to your hidden service contain the word 'boss', just use this...

honssh

!!! This project is no longer maintained. !!! HonSSH https://github.com/tnich/honssh Copyright C 2016 Thomas Nicholson HonSSH is designed to be used in conjunction with a high interaction honeypot. HonSSH sits between the attacker and the honey pot and creates two separate SSH conncetions. Read t...

ssh_scan

sshscan A SSH configuration and policy scanner ⚠️ Deprecation Notice ⚠️ Mozilla is no longer maintaining the SSH Scan project. Please fork it to continue development. Key Benefits Minimal Dependencies - Uses native Ruby and BinData to do its work, no heavy dependencies. Not Just a Script -...

CVE-2014-6271

CVE-2014-6271 Beschreibung Dieses Projekt ermöglicht die Reproduktion der Sicherheitslücke CVE-2014-6271 , auch bekannt als Shellshock. Shellshock ist eine Sicherheitslücke in Bash, die die Ausführung von bösartigem Code über Umgebungsvariablen ermöglicht. Ziel dieses Projekts ist es, die...

CVE-2023-7028-Docker

CVE-2023-7028 mit Docker 🎯 Möchtest du mit der neuen gitlab CVE üben? Folge den Anweisungen Baue das Labor 1. Installiere Docker: https://docs.docker.com/get-docker/ 2. Klone das Projekt: git clone https://github.com/Trackflaw/CVE-2023-7028-Docker.git. 3. Gehe in das Projekt: cd...

web-threat-mitigation

web-threat-mitigation Laboratorio pratico per rilevare e mitigare le minacce alle applicazioni web utilizzando OWASP ZAP, Burp Suite e ModSecurity WAF con OWASP CRS. Caso di studio: Spring4Shell CVE-2022-22965. Setup locale basato su Docker. Laboratorio di Mitigazione delle Minacce Web – OWASP ZA...

poc-cve-2024-23334

poc-cve-2024-23334 Questo repository contiene una proof of concept sullo sfruttamento della libreria aiohttp per la vulnerabilità segnalata CVE-2024-23334. È stato creato per due motivi: 1. Finalità educative: per chi sta iniziando con la sicurezza delle applicazioni, è utile vedere i passaggi pe...

CVE-2026-18963_analyst

Laboratorio Docker Keycloak CVE-2026-18963 Questo laboratorio avvia la versione vulnerabile di Keycloak 26.7.1 su localhost e inizializza un realm minimale per riprodurre il flusso della CVE. Documenti di indagine Analisi del flusso di lavoro: causa root a livello di sorgente, sequenza delle...

gha-lab-227431b300

Kiwi TCMS - Open-Source-Testmanagement .. image:: https://img.shields.io/docker/pulls/kiwitcms/kiwi :target: https://kiwitcms.readthedocs.io/en/latest/installingdocker.html :alt: Downloads from Docker Hub .. image:: https://readthedocs.org/projects/kiwitcms/badge/?version=latest :target:...

graphicator

Graphicator Graphicator is a GraphQL "scraper" / extractor. The tool iterates over the introspection document returned by the targeted GraphQL endpoint, and then re-structures the schema in an internal form so it can re-create the supported queries. When such queries are created is using them to...

tcconfig

.. contents:: tcconfig :backlinks: top :depth: 2 Sommario tcconfig è un wrapper per il comando tc. Semplifica l'impostazione del controllo del traffico di rete larghezza di banda/latenza/perdita di pacchetti/corruzione di pacchetti/ecc. per un'interfaccia di rete/container Docker veth. |PyPI pkg...