Antiphishing

Antiphishing — Predictive Phishing Intelligence for Suricata DONATE · DASHBOARD VECTORS · CONTRIBUTING · SUBMIT A VECTOR · REST API CTI · WIKI Predictive Phishing Intelligence for Suricata — Preemptive Defense from Day Zero Antiphishing is an open-source GPLv3 Cyber Threat Intelligence CTI...

festin

FestIN el potente buscador de buckets S3 y descubridor de contenido ¿Qué es FestIn? ¿Por qué Festin? Instalación Usando Python Usando Docker Opciones completas Uso Configurar dominios de búsqueda Concurrencia Configuración del rastreo HTTP Gestión de resultados Uso de proxy Opciones de DNS Soport...

CVE-2021-43657

CVE-2021-43657 This is a reference/POC for CVE-2021-43657 This vulnerability was found when i was playing with the open source software which is responsible for Employee Task Management System...

pocsploit

pocsploit 中文 README pocsploit is a lightweight, flexible and novel open source poc verification framework Pain points of the POC framework in the market 1. There are too many params, I don't know how to get started, but only some of them are commonly used. 2. YAML poc frameworklike nuclei & xray ...

pocsploit

pocsploit 中文 README pocsploit es un marco de verificación de POC de código abierto ligero, flexible y novedoso Puntos débiles del marco de POC en el mercado 1. Hay demasiados parámetros, no sé por dónde empezar, pero solo algunos de ellos se usan comúnmente. 2. El marco de POC YAML como nuclei y...

Adversarial-Detection-Engineering-Framework

Adversarial Detection Engineering ADE Framework Get ahead of False Negatives by understanding how detection logic fails before threat actors abuse it. Check out the website: https://adeframework.org/ What Is ADE? Adversarial Detection Engineering ADE is the discipline of reasoning about False...

keystone

Keystone Engine Keystone est un framework d'assembleur léger, multiplateforme et multi-architecture. Il offre des fonctionnalités inégalées : Multi-architecture, avec prise en charge d'Arm, Arm64 AArch64/Armv8, Ethereum Virtual Machine, Hexagon, Mips, PowerPC, RISC-V, Sparc, SystemZ et X86 y...

Gixy-Next

Gixy-Next: NGINX Configuration Security Scanner for Security Audits Overview Gixy-Next Gixy is an open-source NGINX configuration security scanner and hardening tool that statically analyzes your nginx.conf to detect security misconfigurations, hardening gaps, and common performance pitfalls befo...

apache__dubbo_CVE-2021-30180_2-7-9

Apache Dubbo Project Apache Dubbo is a high-performance, Java-based open-source RPC framework. Please visit official site for quick start and documentations, as well as the wiki for news, FAQ, and release notes. We are now collecting Dubbo user info to help us to improve Dubbo further. Kindly...

privacytests

PrivacyTests PrivacyTests est un programme de test open source qui mesure les caractéristiques de confidentialité des navigateurs, ainsi qu'un site Web, https://privacytests.org, qui affiche les résultats pour une lecture humaine. PrivacyTests utilise la licence MIT. aioquic : un sous-module avec...

CookieCatcher

CookieCatcher CookieCatcher is an open source application which was created to assist in the exploitation of XSS Cross Site Scripting vulnerabilities within web applications to steal user session IDs aka Session Hijacking. The use of this application is purely educational and should not be used...

GO-2026-6609 vulnerabilities

Vulnerabilities for packages: karpenter, terragrunt, headlamp, prometheus-adapter, grafana-alloy, aactl, kyverno-policy-reporter-ui, temporal-ui-server, gitness, grafana, yunikorn-web, k6, ingress-nginx-controller, rancher-agent, grafana-pyroscope, gitlab-pages, loki, k8s-device-plugin, opencost,...

GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: karpenter, terragrunt, headlamp, prometheus-adapter, grafana-alloy, aactl, kyverno-policy-reporter-ui, temporal-ui-server, gitness, grafana, yunikorn-web, k6, ingress-nginx-controller, rancher-agent, grafana-pyroscope, gitlab-pages, loki, k8s-device-plugin, opencost,...

jsecret

jsecret simple and fast tool to detect sensitive data in the source code such as javascript files or others install go install -v github.com/raoufmaklouf/jsecret@latest Usage cat jsfiles.txt | jsceret echo http://test.tld/main.js | jsecret Big thank to https://twitter.com/medmahmoudi619 for helpf...

The Hitchhikers Guide to Online Anonymity

The comprehensive guide for online anonymity and OpSec. Welcome. The purpose: providing an introduction to various online tracking techniques, online ID verification techniques, and detailed guidance to creating and maintaining truly anonymous online identities. It is written with hope for...

modo

Modo The open-source AI IDE that plans before it codes. MIT License · Quick Start · What Modo Adds · Contributing I wanted a small feature in an AI coding tool. Couldn't find a way to suggest it. So I asked myself: how hard is it to actually build something like Kiro, Cursor, or Windsurf? Turns o...

sn0int

sn0int sn0int prononcé /snoɪnt/ est un framework OSINT semi-automatique et un gestionnaire de paquets. Il est utilisé par les professionnels de la sécurité informatique, les chasseurs de bug bounty, les forces de l'ordre et dans les formations de sensibilisation à la sécurité pour recueillir des...

Cobaltstrike_BOFLoader

CobaltstrikeBOFLoader This is an open source port/reimplementation of the Cobalt Strike BOF Loader as is. For the most part, everything is done as in the original Beacon + Teamserver in Cobalt Strike. This includes shortcomings that are resolved in other open source COFF loaders such as the...

pysap

pysap - Python library for crafting SAP's network protocols packets Version 0.2.2.dev0 in dev Overview SAP Netweaver and SAP HANA are technology platforms for building and integrating SAP business applications. Communication between components uses different network protocols and some services an...

InterceptSuite

InterceptSuite !IMPORTANT This repository has been archived. The active InterceptSuite codebase is now closed-source and paid-only. See below for details. About InterceptSuite was created to solve a long-standing problem in security testing - intercepting and inspecting non-HTTP traffic. While...