621 matches found
rzweb
RzWeb Supported by RzWeb is a browser UI for Rizin compiled to WebAssembly. You drop a binary in. Analysis stays on this machine. Rizin runs in a Web Worker so the page does not freeze while WASM loads. aaa still owns that worker until the command returns. Each open binary is a context. Artifact...
ST3GG
ββββββββββββββββββββββββ βββββββ βββββββ βββββββββββββββββββββββββββββββββ ββββββββ ββββββββ βββ ββββββββββ βββββββ ββββ ββββββββ βββ ββββββββββ ββββββ βββ ββββββββ βββ ββββββββββββββββββββββββββ ββββββββ βββ βββββββ βββββββ βββββββ β°β’-β’β§ THE ULTIMATE STEGANOGRAPHY TOOLKIT β§β’-β’β± Hide anything. In...
Quantickle
Quantickle - Network Graph Visualization for Threat Intelligence A browser-based network graph visualization tool built on Cytoscape.js. Quantickle helps visualize and analyze connected data of any type, but is faceted towards threat intelligence. Installation Install instructions Table of Conten...
XSSFuzzer
XSS Fuzzer XSS Fuzzer is a simple application written in plain HTML/JavaScript/CSS which generates XSS payloads based on user-defined vectors using multiple placeholders which are replaced with fuzzing lists. It offers the possibility to just generate the payloads as plain-text or to execute them...
vulnrepo
VULNRΞPO - Vulnerability Report Generator & Repository A client-side, privacy-first vulnerability report manager for security professionals. All data is encrypted and stored locally in your browser β nothing is sent to any server by default. Live app: https://vulnrepo.com/ | Dev branch:...
gdbgui
A browser-based frontend to gdb gnu debugger Documentation : https://gdbgui.com Source Code : https://github.com/cs01/gdbgui/...
grdpwasm
grdpwasm A web-based RDP client built with Go WebAssembly and grdp. Connect to a Windows Remote Desktop server directly from your browser β no plugins required. Architecture Browser WASM ββWebSocketβββΊ proxy Go ββTCPβββΊ RDP Server Because browsers cannot open raw TCP sockets, a lightweight Go pro...
netmap.js
netmap.js Fast browser-based network discovery module This project is no longer maintained. Description netmap.js provides browser-based host discovery and port scanning capabilities to allow you to map website visitors' networks. It's quite fast, making use of es6-promise-pool to efficiently run...
xsser
XSSER Presentation From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 Demo Version 2.0 - 2015: https://www.youtube.com/playlist?list=PLIjb28IYMQgqqqApoGRCZO40vP-eKsgf Version 2.5 - 2016: https://www.youtube.com/playlist?list=PLRic6PgcrsWGkgacL6WFnSQKVRZIoofRj Version 2.75 - 2017: None Currently...
r2web
r2web: Access radare2 from anywhere, anytime. Overview r2web lets you run radare2 without local installs or platform hassles. Analyze files directly in your browser. It runs entirely client-side using radare2 WASI and Wasmer, with an xterm.js frontend for interactive command execution. π Try it...
die-in-browser
die-in-browser Static binary analysis with Detect It Easy β 100% in your browser, no uploads. π What is this? This project runs Detect It Easy DIE β a powerful static binary analyzer β entirely inside your browser using the v86 emulator. β No file uploads : binaries are processed locally. β Full...
osintnet-public
OsintNET is a browser-based OSINT platform for domain intelligence, website risk scanning, SERP discovery, email and username OSINT, image intelligence, image authenticity checks and AI image detection. Website Β· OSINT Tools Β· Best OSINT Tools Β· AI OSINT Tools Β· llms.txt Β· AI Prompt Map OsintNET ...
crime-mapper
Enabling cyber investigations from a browser A prototype tool for mapping cyber crime Created by @UKDanielCard The experimental version is the live, bleeeding edge version Live Demo is largely where I'm storing a relatively stable version... but this is all DEV! IF YOU WANT TO REALLY TEST THIS,...
meowEye
πΎ MeowEye MeowEye is a real-life scanner for multiple web vulnerabilities. It uses a real browser to observe traffic and perform injection-based tests to detect reflective parameters, local file inclusion LFI, and server-side template injection SSTI vulnerabilities for now. In the ToDo list it wi...
PHP-CGI-INTERNAL-RCE
PHP-CGI-INTERNAL-RCE This PoC demonstrates how an attacker can chain Orange Tsai's CVE-2024-4577 with DNS rebinding to achieve remote code execution on internal network infrastructure directly through the victimβs web browser. By bypassing Same-Origin Policy SOP and exploiting vulnerable PHP-CGI...
gods-eye-view
π God's Eye View A spy-satellite simulator in your browser β then you realize the sources are public and the data is real. Photorealistic 3D globe. Live aircraft, ships, satellites, earthquakes, traffic, and public cameras. Hands-free voice control powered by a realtime AI agent. No place left...
webscan
webscan webscan is a browser-based network IP scanner and local IP detector. It detects IPs bound to the user/victim by listening on an RTP data channel via WebRTC and looping back to the port across any live IPs, as well as discovering all live IP addresses on valid subnets by monitoring for...
notRDP
notRDP A Havoc C2 plugin that creates an invisible alternate Windows desktop, streams it to a browser-based viewer, and supports full mouse/keyboard interaction like RDP, but invisible to the target user. How It Works 1. Creates a hidden desktop via CreateDesktopW and launches explorer.exe on it ...
warpgate
Warpgate is a smart & fully transparent SSH, HTTPS, Kubernetes, MySQL, PostgreSQL, RDP and VNC bastion host that doesn't require a client app or an SSH wrapper. Set it up in your DMZ, add user accounts and easily assign them to specific hosts and URLs within the network. Warpgate will record ever...