shhgit

🚨 shhgit is no longer maintained. If you need support or consultation for your secret scanning endeavours, drop me an e-mail [email protected] 🚨 shhgit helps secure forward-thinking development, operations, and security teams by finding secrets across their code before it leads to a security...

offensive-azure

Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic. The current list of tools can be found below with a brief description of their functionality. ./DeviceCode/devicecodeeasymode.py Generates a code to be entered by the target user Can be used for...

Microsoft365_devicePhish

Microsoft365devicePhish Abuser du flux d'autorisation OAuth de Microsoft 365 pour une attaque de phishing Ceci est un script de preuve de concept simple qui permet à un attaquant de mener une attaque de phishing contre le flux d'autorisation OAuth de Microsoft 365. En l'utilisant, on peut se...

trajan

Trajan: CI/CD Security Scanner Trajan scans CI/CD pipelines for security vulnerabilities that attackers use to compromise software supply chains. It supports GitHub Actions, GitLab CI, Azure DevOps, Jenkins, and JFrog. What it does Trajan parses workflow YAML files, builds dependency graphs, runs...

CVE-2026-51954

Продукт: Webasyst Framework Затронутая версия: ≤ 4.0.3 Критичность: Высокая CVSS 3.1: 8.0 Описание Webasyst Framework вплоть до версии 4.0.3 включительно содержит ошибку реализации OAuth 2.0, которая позволяет удалённому неаутентифицированному злоумышленнику перехватывать учётные данные...

TokenUniverse

Token Universe Token Universe est un outil avancé pour expérimenter et rechercher les mécanismes de sécurité Windows. Il expose une interface utilisateur pour créer, visualiser, usurper et modifier des jetons d'accès, lancer des processus, gérer l'autorité de sécurité locale, vérifier l'accès...

tko-subs

tko-subs This tool allows: To check whether a subdomain can be taken over because it has: a dangling CNAME pointing to a CMS provider Heroku, Github, Shopify, Amazon S3, Amazon CloudFront, etc. that can be taken over. a dangling CNAME pointing to a non-existent domain name one or more wrong/typoe...

remote-control

Remote Control for Laravel Предоставьте удалённый доступ к учётной записи пользователя, не передавая учётные данные. Установка Конфигурация Использование Маршрутизация Создание удалённого доступа Использование сгенерированного токена доступа Установка Remote Control можно установить через compose...

TokenTactics

TokenTactics Ensemble d'outils de manipulation des jetons Web JSON Azure « JWT » Les jetons d'accès Azure vous permettent de vous authentifier auprès de certains points de terminaison en tant qu'utilisateur qui se connecte avec un code d'appareil. Même s'ils ont utilisé l'authentification...

gh-dork

gh-dork Supply a list of dorks and, optionally, one of the following: a user -u a file with a list of users -uf an organization -org a file with a list of organizations -of a repo -r You can also pass: an output directory to store results -o a filename to store valid items, if your users or org...

git-all-secrets

git-all-secrets About git-all-secrets is a tool that can: Clone multiple public/private github repositories of an organization and scan them, Clone multiple public/private github repositories of a user that belongs to an organization and scan them, Clone a single public/private repository of an...

Docusaurus Gists Plugin < 4.0.0 - GitHub Personal Access Token Exposure

The Docusaurus gists plugin adds a page to your Docusaurus instance, displaying all public gists of a GitHub user. docusaurus-plugin-content-gists versions prior to 4.0.0 are vulnerable to exposing GitHub Personal Access Tokens in production build artifacts when passed through plugin configuratio...

lazyrecon

| | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and is optimized...

CVE-2026-103957

Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the access token of another user of the deployment and to cause the application to issue requests to arbitrary internal network locations, via a crafted...

CVE-2026-103957

A Server-side request forgery (SSRF) vulnerability exists in the OAuth2 discovery handling of Loom for AWS versions prior to 1.7.0 . An authenticated remote user can exploit this by supplying a crafted discovery document address when registering a tool server or remote agent configured for delega...

CVE-2026-103957 Server-side request forgery in the OAuth2 discovery handling in Loom for AWS

Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the access token of another user of the deployment and to cause the application to issue requests to arbitrary internal network locations, via a crafted...

AzureRT

AzureRT Module Powershell implémentant diverses cmdlets pour interagir avec Azure et Azure AD d'un point de vue offensif. Utilitaires utiles traitant de l'authentification basée sur les jetons d'accès, de la commutation entre les interfaces Az, AzureAD et az cli, d'attaques pré-construites facile...

SlackPirate

SlackPirate - Outil d'énumération et d'extraction Slack Ceci est un outil développé en Python qui utilise les API Slack natives pour extraire des informations 'intéressantes' d'un espace de travail Slack à partir d'un token d'accès. Depuis mai 2018, Slack compte plus de 8 millions de clients et c...

invoker

Invoker Penetration testing utility and antivirus assessment tool. Built with Visual Studio Community 2022 v17.5.4 64-bit and tested on Windows 10 Enterprise OS 64-bit. Made for educational purposes. I hope it will help! This repository started to have known signatures and I don't have time to...

gcat

Gcat A stealthy Python based backdoor that uses Gmail as a command and control server This project was inspired by the original PoC code from Benjamin Donnelly This is PoC code... ... that was released for orginazations to test their defenses against these type of attacks. In order to detect them...