flatpak

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. See https://flatpak.org/ for more information. Flatpak is available in the package repositories of most Linux distributions and can be installed from there. See https://flatpak.org/setup/ for quic...

dawnscanner

Dawnscanner - El escáner de seguridad emergente para aplicaciones web Ruby dawn es un escáner de código fuente diseñado para revisar sus aplicaciones web en busca de problemas de seguridad. La herramienta puede escanear aplicaciones web escritas en Ruby y soporta todos los principales frameworks...

tcpcopy

TCPCopy - A TCP Stream Replay Tool TCPCopy is a TCP stream replay tool for realistic testing of Internet server applications. Getting to Know TCPCopy An Overview of TCPCopy for Beginners A General Overview of TCPCopy Architecture TCPCopy Testing Use Cases TCPCopy Pre-Warming Examples Description...

StaCoAn

StaCoAn ¡Ya no se mantiene! Pronto será archivado. StaCoAn es una herramienta multiplataforma que ayuda a desarrolladores, cazadores de bugs y hackers éticos a realizar análisis estático de código en aplicaciones móviles. Esta herramienta busca líneas interesantes en el código que pueden contener...

BADministration

BADministration ¿Qué es BADministration? BADministration es una herramienta que interactúa con aplicaciones de gestión o administración desde un punto de vista ofensivo. Intenta proporcionar al personal de seguridad ofensiva una herramienta con la capacidad de identificar y aprovechar estas...

jarm

JARM Please read the initial JARM blog post for more information. JARM is an active Transport Layer Security TLS server fingerprinting tool. JARM fingerprints can be used to: Quickly verify that all servers in a group have the same TLS configuration. Group disparate servers on the internet by...

Klyda

El proyecto Klyda ha sido creado para ayudar en ataques rápidos basados en credenciales contra aplicaciones web en línea. Klyda soporta el uso desde simples rociados de contraseñas hasta grandes ataques de diccionario multihilo. Klyda es un proyecto nuevo, y estoy buscando contribuciones. Cualqui...

Agent-Security-Regression-Harness

OWASP Agent Security Regression Harness The OWASP Agent Security Regression Harness is an open source, vendor-neutral test harness for running executable security regression scenarios against agentic applications and MCP-integrated systems. The project helps builders and defenders verify that...

ngrev

ngrev Graphical tool for reverse engineering of Angular projects. It allows you to navigate in the structure of your application and observe the relationship between the different modules, providers, and directives. The tool performs static code analysis which means that you don't have to run you...

AoratosWin

AoratosWin AoratosWin es una herramienta que elimina rastros de aplicaciones ejecutadas en el sistema operativo Windows, las cuales pueden listarse fácilmente con herramientas como ExecutedProgramList de Nirsoft. No dudes en descompilar, realizar ingeniería inversa, redistribuir, etc. Sistemas...

paskto

Paskto - Passive Web Scanner Paskto will passively scan the web using the Common Crawl internet index either by downloading the indexes on request or parsing data from your local system. URLs are then processed through Nikto and known URL lists to identify interesting content. Hash signatures are...

Andromeda

Andromeda hace que el trabajo inicial de ingeniería inversa de aplicaciones Android sea un poco más rápido y sencillo. Comparado con otras alternativas, está escrito en C/C++ y tiene una ventaja de rendimiento notable. DEMOSTRACIÓN La herramienta está en su etapa temprana de desarrollo Compilació...

Awesome-Fuzzing

Welcome to Awesome Fuzzing A curated list of fuzzing resources Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on for learning Fuzzing and initial phases of Exploit Development like root cause analysis. Contents Books Courses Free Paid Videos NYU...

AuthMatrix

AuthMatrix v0.8.2 AuthMatrix es una extensión de Burp Suite que proporciona una forma sencilla de probar la autorización en aplicaciones y servicios web. Con AuthMatrix, los testers se centran en definir minuciosamente tablas de usuarios, roles y solicitudes para su aplicación objetivo específica...

CVE-2015-57115

CVE-2015-57115 Mass Checker For CVE-2015-57115 Description The CVE-2015-57115 Checker Script is a Python tool for detecting vulnerabilities related to CVE-2015-57115, which is a path traversal vulnerability in certain PHP applications. The script checks multiple URLs for the presence of this...

burp-dom-scanner

Burp DOM Scanner It's a Burp Suite's extension to allow for recursive crawling and scanning of Single Page Applications. It runs a Chromium browser to scan the webpage for DOM-based XSS. It can also collect all the requests XHR, fetch, websockets, etc issued during the crawling allowing them to b...

Twisted - Open Redirect & XSS

Twisted is an event-based framework for internet applications, supporting Python 3.6+. The Twisted web framework's redirectTo function is vulnerable to reflected XSS if an attacker can control the redirect URL. This template tests for an open redirect and XSS vulnerability in the URL parameter...

Nodejs Squirrelly - Remote Code Execution

Nodejs Squirrelly is susceptible to remote code execution. Squirrelly is a template engine implemented in JavaScript that works out of the box with ExpressJS. Squirrelly mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuratio...

Kyocera TASKalfa printer - Path Traversal

CCRX has a Path Traversal vulnerability. Path Traversal is an attack on web applications. By manipulating the value of the file path, an attacker can gain access to the file system, including source code and critical system settings. id: CVE-2023-34259 info: name: Kyocera TASKalfa printer - Path...

Oracle E-Business Suite 12.1.3/12.2.x - Open Redirect

The Oracle Applications Framework component of Oracle E-Business Suite subcomponent: Popup windows lists of values, datepicker, etc. is impacted by open redirect issues in versions 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. These easily exploitable vulnerabilities allow unauthenticated attackers...