chipwhisperer

ChipWhisperer | | Enlaces importantes Documentación | Tutoriales | Foro | Tienda | NewAE ChipWhisperer 6.0: Cambios en el repositorio y limpieza ChipWhisperer 6.0 trae muchos cambios al repositorio de ChipWhisperer. El mayor es una limpieza del historial de git tanto en este repositorio como en...

CVE-2024-4898

CVE-2024-4898-Poc CVE-2024-4898 InstaWP Connect – 1-click WP Staging & Migration = 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creation...

spring-cloud-gateway-rce

Spring Cloud Gateway Actuator API SpEL Expression Injection Command Execution CVE-2022-22947 1. Installation pip3 install -r requirements.txt 2. Usage $ python3 spring-cloud-gateway-rce.py -h / \ /\ /\ /\ | \ / \ | \ | \ | \ | \ / \ | || | | | / / \ \ / / /\ || | | | | | | || || || | / / / / \ V...

CVE-2019-14537

YOURLS: CVE-2019-14537 PoC When you get a valid timestamp you will be able to make requests to the api. http://domain.com/yourls-api.php?signature=0e1&action=db-stats&timestamp=VALIDTIMESTAMP Usage usage: main.py -h --vhost VHOST --threads THREADS --path PATH --port PORT ip CVE-2019-14537 PoC...

rapiddns-cli

RapidDNS CLI 中文文档 A powerful command-line interface for interacting with the RapidDNS API. This tool allows you to perform DNS searches, advanced queries, and large-scale data exports directly from your terminal. Features DNS Search : Search by domain, IP, or CIDR. Advanced Query : Use powerful...

ADOKit

ADOKit Description Azure DevOps Services Attack Toolkit - ADOKit is a toolkit that can be used to attack Azure DevOps Services by taking advantage of the available REST API. The tool allows the user to specify an attack module, along with specifying valid credentials API key or stolen...

SwiftyInsta

SwiftyInsta legacy Please notice SwiftyInsta is no longer actively maintained. Refer to 244 for more info. Check out Swiftagram if you're looking for up-to-date alternatives. Instagram offers two kinds of APIs to developers. The Instagram API Platform extremely limited in functionality and close ...

mantra

「🔑」 About Mantra The tool in question was created in Go and its main objective is to search for API keys in JavaScript files and HTML pages. It works by checking the source code of web pages and script files for strings that are identical or similar to API keys. These keys are often used for...

drift-node-sdk

The Node.js Tusk Drift SDK enables fast and deterministic API testing by capturing and replaying API calls made to/from your service. Automatically record real-world API calls, then replay them as tests using the Tusk CLI to find regressions. During replay, all outbound requests are intercepted...

p-invoke.net

p-invoke.net This repository contains most of the P/Invoke definitions from the most-of-the-time offline pinvoke.net, adding the link to the Microsoft documentation for each one. The Gitbook is available at https://ricardojoserf.gitbook.io/pinvoke. Notes I did this to check some definitions in a...

api-security-audit-action

Acción de GitHub: Pruebas estáticas de seguridad de API REST de 42Crunch La acción de Pruebas estáticas de seguridad de API REST localiza contratos de API REST que siguen la Especificación OpenAPI OAS, anteriormente conocida como Swagger y ejecuta comprobaciones de seguridad exhaustivas sobre...

dexfinder

dexfinder English | 中文 | Website Website : junelegency.github.io/dexfinder Cross-platform APK/DEX method & field reference finder with call chain tracing, ProGuard/R8 deobfuscation, and Android hidden API detection. Inspired by Android's veridex tool, reimplemented in Go with enhanced capabilitie...

NTDLL-Unhook

NTDLL Unhook proper ntdll .text section unhooking via native api. x86/x64/wow64 supported. How It Works The program walks the PEB to locate ntdll.dll base address and manually parses the PE export table to resolve NT API functions without touching the Import Address Table. It then uses NtOpenFile...

PAPIMonitor

PAPIMonitor P ython API Monitor for Android apps is a python tool based on Frida for monitoring user-select APIs during the app execution. The app should be installed within an emulator already connected through ADB to the pc host. The user can choose to monitor a predefined list of APIs divided...

CVE-2022-29548

Proof of concept exploit for CVE-2022-29548: A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server...

apidetector

APIDetector es una herramienta potente y eficiente diseñada para probar endpoints Swagger expuestos en varios subdominios con capacidades inteligentes únicas para detectar falsos positivos. Es particularmente útil para profesionales de la seguridad y desarrolladores que realizan pruebas de API y...

fav-up

Fav-up Búsquedas de IP real a partir del icono favicon y usando Shodan. Instalación pip3 install -r requirements.txt Clave de API de Shodan no la gratuita Uso CLI Primero define cómo pasas la clave de API: -k o --key para pasar la clave por stdin -kf o --key-file para pasar el nombre del archivo...

CVE-2026-63030

🚨 CVE-2026-63030 — WP2Shell Confusión de rutas en la API REST de WordPress → Ejecución remota de código Una vulnerabilidad crítica del núcleo de WordPress que permite la confusión de rutas en la API REST y que puede encadenarse con inyección SQL para lograr ejecución remota de código sin...

hoverfly

API simulations for development and testing Hoverfly is a lightweight, open source API simulation tool. Using Hoverfly, you can create realistic simulations of the APIs your application depends on. Replace slow, flaky API dependencies with realistic, re-usable simulations Simulate network latency...

agent-vault-proxy

Keys on the Wire Your AI agent never holds your API keys. It sends a placeholder; the real secret is swapped in on the wire. Stops credential stealers Shai-Hulud and similar and prompt-injected agents from leaking your secrets. A compromised agent has nothing to take. How it works 1. Your agent...