CheckPoint-CVE-Webscanner

CP VPN CVE Scanner Una aplicación web local basada en aprobación para escanear marcadores de configuración asociados con Check Point CVE-2026-50751, CVE-2026-50752, CVE-2026-85102 y CVE-2026-85103 y aplicar las mitigaciones seleccionadas mediante comandos de la API de Check Point Management. Esta...

CVE-2020-2551

CVE-2020-2551 Weblogic RCE con IIOP 0x01 Habilitación por defecto de IIOP 0x02 Poc Demo...

CAPE

CAPEv2 Python3 现已发布 CAPEv2 随着 Python 2 即将于 2020 年 1 月 1 日终止支持，CAPEv1 将逐步淘汰。请尽快升级到 Python 3 版本。 CAPE：恶意软件配置与载荷提取 CAPE 是一个恶意软件沙箱。它源自 Cuckoo，旨在自动化恶意软件分析过程，目标是从恶意软件中提取载荷和配置。这使得 CAPE 能够基于载荷签名检测恶意软件，并自动化恶意软件逆向工程和威胁情报的许多目标。 有一个社区版在线可用，任何人都可以免费试用： https://cape.contextis.com/submit CAPE...

ctf-tools

ctf-tools 这是一系列设置脚本的集合，用于创建各种安全研究工具的安装。当然，这不是一个难题，但将它们集中在一个易于部署到新机器等地方，确实非常方便。这些工具的安装脚本会定期检查，因此希望它们有不错的成功率！ 包含以下工具的安装程序： 类别| 工具| 描述 ---|---|--- binary| angr| 来自Shellphish的下一代二进制分析引擎。 binary| angr-management| 一个GUI逆向工程与反编译工具。 binary| beef| 浏览器利用框架。 binary| crosstool| 交叉编译器与跨架构工具。 binary| cross2|...

WAGO-CVE-2023-1698

WAGO-CVE-2023-1698 Vulnerabilidad de ejecución remota de código en el sistema WAGO CVE-2023-1698 Atención He desarrollado una herramienta para pruebas locales y desarrollo de POC, que es solo para referencia de aprendizaje técnico. No la utilice para fines ilegales. Cualquier consecuencia o pérdi...

sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

whalescan

Whalescan Windows 容器漏洞扫描器。 快速开始 git clone https://github.com/saira-h/whalescan pip install -r requirements.txt python main.py 概述 Whalescan 执行多项基准检查，以及检查 CVE。该工具可用于对本地容器副本以及主机本身进行 Windows 容器审查，以增强安全性。 容器检查 检查容器是否存储在 C: 盘下——如果存在 DoS 攻击，这可能会引发问题，填满 C: 盘并导致主机无响应。 检查容器是作为进程运行还是 Hyper-V 运行。Hyper-V...

MicroBurst

MicroBurst: Un Toolkit de PowerShell para Atacar Azure MicroBurst incluye funciones y scripts que facilitan el descubrimiento de servicios de Azure, la auditoría de configuraciones débiles y acciones posteriores a la explotación, como el volcado de credenciales. Está pensado para usarse durante...

kcmapper

KcMapper KcMapper es una herramienta para exportar los datos de configuración de Keycloak a una base de datos de grafos Neo4j. Esta representación permite analizar las relaciones entre realms, clientes, usuarios, grupos y roles. La herramienta incluye una interfaz web para ejecutar consultas Cyph...

DET

DET extensible Data Exfiltration Toolkit DET is provided AS IS, is a proof of concept to perform Data Exfiltration using either single or multiple channels at the same time. This is a Proof of Concept aimed at identifying possible DLP failures. This should never be used to exfiltrate sensitive/li...

openwisp-controller

openwisp-controller .. image:: https://github.com/openwisp/openwisp-controller/actions/workflows/ci.yml/badge.svg :target: https://github.com/openwisp/openwisp-controller/actions/workflows/ci.yml :alt: CI build status .. image:: https://coveralls.io/repos/openwisp/openwisp-controller/badge.svg...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

CVE-2026-103507

Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. An attacker holding the service authentication token can write arbitrary files on the host, potentially leading to code execution as the P4 Search service account...

SXDork

SXDork v1.0 SXDork 是一款强大的工具，利用谷歌搜索技巧（Google Dorking）技术在互联网上搜索特定信息。谷歌搜索技巧是一种使用高级搜索运算符和关键字来发掘互联网上公开敏感信息的方法。SXDork 提供多种选项，用于搜索不同类型的安全风险点（dorks），例如域名登录 dork、wpadmin dork、SQL dork、配置文件 dork、日志文件 dork、仪表盘 dork、idrsa dork、FTP dork、备份文件 dork、邮件存档 dork、密码 dork、DCIM 照片 dork 和 CCTV dork。 SXDork 的关键特性之一是能够使用...

ICS-Security-Tools

Herramientas, consejos y oficios de seguridad ICS Desarrollado como un recurso comunitario Este esfuerzo pretende reunir herramientas, consejos y trucos del oficio para trabajar en ciberseguridad en el entorno ICS. El repositorio de código albergará scripts, herramientas, configuraciones u otros...

idacode

IDACode IDACode makes it easy to execute and debug Python scripts in your IDA environment without leaving Visual Studio Code. The VS Code extension can be found on the marketplace. IDACode is still in a very early state and bugs are to be expected. Please open a new issue if you encounter any...

nomore403

NoMore403 nomore403 is a command-line tool for testing HTTP access-control bypasses and parser inconsistencies around 401, 403, and related responses. The tool is designed for practical web security work: bug bounty, penetration testing, security reviews, and regression testing of access-control...

droidlysis

DroidLysis DroidLysis is a pre-analysis tool for Android apps : it performs repetitive and boring tasks we'd typically do at the beginning of any reverse engineering. It disassembles the Android sample, organizes output in directories, and searches for suspicious spots in the code to look at. The...

phpstan

PHPStan - PHP Static Analysis Tool PHPStan focuses on finding errors in your code without actually running it. It catches whole classes of bugs even before you write tests for the code. It moves PHP closer to compiled languages in the sense that the correctness of each line of the code can be...

vapi

vAPI vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios in the means of Exercises. Requirements PHP MySQL PostMan MITM Proxy Installation Docker docker-compose up -d Installation Manual Copying the Code cd git clone...