BloodHound-Tools

What is this? A collection of tools that integrate to BloodHound. Bloodhound is the defacto standard that both blue and red security teams use to find lateral movement and privilege escalation paths that can potentially be exploited inside an enterprise environment. A typical environment can yiel...

pentestblog-CVE-2022-0847

pentestblog-CVE-2022-0847...

FwHunt

FwHunt The Binarly Firmware Hunt FwHunt rule format was designed to scan for known vulnerabilities in UEFI firmware. Usage FwHunt rules are designed to be used with Binarly's FwHunt Community Scanner; full installation instructions and usage information can be found in its README...

3klCon

3klCon Project Archived Description Automated Recon tool which works with Large and Medium scopes. ّIt's recommended to use it on VPS, it'll discover secrets and search for vulnerabilities So, Welcome, and let's get deep into it subfinder is installed. -- findomain is installed. -- ass...

openssl

Welcome to the OpenSSL Project !openssl logowww.openssl.org !github actions ci badgegithub actions ci OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations ar...

Redeye

Redeye This project was built by pentesters for pentesters. Redeye is a tool intended to help you manage your data during a pentest operation in the most efficient and organized way. Table of Contents Redeye Table of Contents The Developers Overview Installation Docker Source General Special-Than...

tsusen

Tsusen 津波センサー is a standalone network sensor made for gathering information from the regular traffic coming from the outside i.e. Internet on a daily basis e.g. mass-scans, service-scanners, etc.. Any disturbances should be closely watched for as those can become a good prediction base of...

wuhaozhe-s-CVE

wuhaozhe-s-CVE CVE-2023-41623...

wordpress-hacking

WordPress Hacking Some useful resources for hacking WordPress and it's plugins and themes. Bug Bounty If you're passionate about finding and reporting WordPress vulnerabilities, consider joining these bug bounty programs: Wordfence and Patchstack. Signing up through my Wordfence link gives me a...

CVE-2021-26084-Nuclei-template

CVE-2021-26084-Nuclei-template This nuclei template is to verify the vulnerability without executing any commands to the target machine...

Pompem

Pompem - Exploit and Vulnerability Finder Pompem is an open source tool, designed to automate the search for Exploits and Vulnerability in the most important databases. Developed in Python, has a system of advanced search, that help the work of pentesters and ethical hackers. In the current...

CVE-2024-6387_Check

CVE-2024-6387Check 📜 Description CVE-2024-6387Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH, specifically targeting the recently discovered regreSSHion vulnerability CVE-2024-6387. This script facilitates rapid scanning of multiple IP...

CVE-2022-1292

CVE-2022-1292 Automation to validate the impact of the vulnerability CVE-2022-1292 on a specific system. This script checks, validates and exploits the vulnerability...

CVE-2017-0106

CVE-2017-0106...

SILENTCHAIN

SILENTCHAIN AI™ - Community Edition 🔗 ⛓️ 🔒 AI-Powered Passive Vulnerability Analysis for Burp Suite Intelligent • Silent • Adaptive • Comprehensive 🚀 Getting Started • 📖 Documentation • 🔧 Configuration • 📊 Benchmarks • ⬆️ Upgrade to Pro Note: This is the Community Edition. Commercial and...

jdbc-sqlxml-xxe

jdbc-sqlxml-xxe h2-jdbc CVE-2021-23463 https://github.com/h2database/h2database/issues/3195 SQLXML XXE vulnerability reproduction. mysql-jdbc CVE-2021-2471 SQLXML XXE vulnerability reproduction...

Sekiryu

This project was really fun and my first "big" project! Better, smarter, stronger solutions now exist:https://github.com/LaurieWired/GhidraMCP See you space-cowboy Sekiryu v0.0.2 This Ghidra Toolkit is a comprehensive suite of tools designed to streamline and automate various tasks associated wit...

Vulnerability-Disclosures

Mandiant Vulnerability Disclosures This repository details vulnerabilities disclosed by Mandiant. These vulnerabilities were discovered by internal research, through Red Team assessments, or in use in the wild. Proof of concepts PoCs may or may not be provided. The following licenses/licensing...

Snyk Scan

Bitbucket Pipelines Pipe: Snyk This pipe uses Snyk to find, fix and monitor known vulnerabilities in your app dependencies and docker image. YAML Definition Add the following snippet to the script section of your bitbucket-pipelines.yml file: - pipe: snyk/snyk-scan:1.0.2 variables: SNYKTOKEN: ""...

scarce-apache2

ScaRCE Framework - CVE-2021-41773 Hunter This tool can scan websites with CVE-2021-41773 Vulnerability that are affecting Apache2 Webserver, ScaRCE can run too for executing Remote Command Injections at the webservers that found from the scanning method Only if the MODCGI is Enabled at the target...