owasp-threat-dragon-desktop

OWASP Threat Dragon Threat Dragon is a free, open-source, cross-platform threat modeling application including system diagramming and a rule engine to auto-generate threats/mitigations. It is an OWASP Incubator Project. The focus of the project is on great UX, a powerful rule engine and integrati...

ttyd

ttyd - Share your terminal over the web ttyd is a simple command-line tool for sharing terminal over the web. Features Built on top of libuv and WebGL2 for speed Fully-featured terminal with CJK and IME support...

evilgrade

Faraday Security Research -- | ISR-evilgrade | www.faradaysec.com | -- .:: BRIEF OVERVIEW ::. Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates. It comes with pre-made binaries agents, a working default configuration...

pupy

Pupy Simple Installation root@kitploit: pip3 install pipx pipx ensurepath pipx install git+https://github.com/n1nj4sec/pupy@nextgen pupysh If you want more detailed informationRefer to the wiki Development Install root@kitploit: git clone https://github.com/n1nj4sec/pupy cd pupy git checkout...

laforge

Laforge Security Competition Infrastructure Automation Framework Laforge enables rapid development of infrastructure for the purpose of information security competitions. Using a simple and intuitive configuration language, Laforge manages a dependency graph and state management and allows for...

kitty

Introduction | Sulley: Boo? | Boo: Kitty! What is Kitty? Kitty is an open-source modular and extensible fuzzing framework written in python, inspired by OpenRCE's Sulley and Michael Eddington's and now Deja Vu Security's Peach Fuzzer . Goal root@kitploit: When we started writing Kitty, our goal w...

Flerken

Flerken Einleitung Command Line Obfuscation CLOB hat sich als ein nicht zu vernachlässigender Faktor bei dateiloser Malware oder bösartigen Akteuren erwiesen, die sich "von der vorhandenen Infrastruktur ernähren". Während Dutzende von Verschleierungswerkzeugen in der Praxis zu finden sind, gibt e...

scrying

NCC Group Scrying A new tool for collecting RDP, web and VNC screenshots all in one place This tool is still a work-in-progress and should be mostly usable but is not yet complete. Please file any bugs or feature requests as GitHub issues Motivation Since Eyewitness recently dropped support for R...

403bypasser

403bypasser Türkçe 403bypasser , hedef sayfalardaki erişim kontrolü kısıtlamalarını aşmak için kullanılan teknikleri otomatikleştirir. Bu araç geliştirilmeye devam edecektir, katkılara açıktır. English 403bypasser automates the techniques used to circumvent access control restrictions on target...

RscScan-cve-2025-55182

RscScan - Scanner de Vulnerabilidades de Server Actions do Next.js Scanner profissional multiplataforma de vulnerabilidades para RCE em Server Actions do Next.js Funcionalidades • Instalação • Uso • Demonstração em Vídeo • Capturas de Tela 🇺🇸 English • 🇮🇷 فارسی • 🇨🇳 简体中文 • 🇷🇺 Русский • 🇩🇪 Deutsch...

CVE-2024-5274-Detection

CVE-2024-5274-Detection Guardian Code: Uno script per scoprire le vulnerabilità CVE-2024-5274 CVE-2024-5274 Script di rilevamento e aggiornamento della vulnerabilità zero-day di Google Chrome Panoramica Google ha recentemente corretto una quarta vulnerabilità zero-day in Chrome, nota come...

Cooper

Cooper, substantivo, um fabricante ou reparador de tonéis e barris É uma piada de "peixe no barril". Gosto de trocadilhos! Uma ferramenta Python para ingerir HTML e produzir fonte HTML adequada para campanhas de phishing. O Cooper simplifica o processo de clonar um site ou e-mail alvo para uso em...

CVE-2026-20841-PoC

🛡️ CVE-2026-20841-PoC - Semplice strumento di Proof of Concept 📝 Cos'è CVE-2026-20841-PoC? Questa applicazione è un semplice strumento di Proof of Concept PoC progettato per dimostrare il comportamento del problema di sicurezza indicato come CVE-2026-20841. Aiuta gli utenti a comprendere l'impatto...

rosemary

Rosemary Cross-platform kernel-level pivoting platform over QUIC. No TUN/TAP. No proxychains. No proxy settings. Rosemary intercetta trasparentemente il traffico su host remoti a livello kernel: nessuna impostazione proxy, nessun dispositivo TUN/TAP, nessun proxychains. Gli agenti si riconnettono...

osint-suspicious-recruitment-case

Investigação OSINT: Caso de Recrutamento Suspeito Este repositório documenta uma investigação OSINT Open Source Intelligence focada numa atividade de recrutamento suspeita ligada a múltiplas plataformas, números de telefone e serviços online. O objetivo deste projeto é analisar padrões,...

M474

🛰️ M474 — Miglioratore della Privacy di Rete M474 è uno strumento open-source per la privacy di rete e la randomizzazione MAC progettato per migliorare il tuo anonimato online. Fornisce: Spoofing MAC Linux Rinnovo IP Linux + Windows Rilevamento automatico dell'interfaccia di rete Ripristino sicuro...

larac2shell

LaraC2 Shell -- MDE Live Response Interactive Shell Plattformübergreifende interaktive Shell für Microsoft Defender for Endpoint Live Response...

autotimeliner

AutoTimeliner Estrai automaticamente la timeline forense dai dump di memoria volatile. AutoTimeliner esegue molteplici plugin di Volatility3 su immagini di memoria Windows, Linux e macOS, quindi unisce il loro output in un'unica timeline CSV ordinata: Plugin Generico per Timeline Plugin| Cosa...

xcrawl3r

xcrawl3r xcrawl3r is a command-line utility designed to recursively spider webpages for URLs. It works by actively traversing websites - following links embedded in webpages, and parsing files including sitemaps & robots.txt - to uncover every URL. Unlike xurlfind3r that doesn't interact directly...

sklad

Sklad 📦 Sklad ist ein plattformübergreifender Snippet-Manager, der in Ihrer Taskleiste lebt. Speichern Sie Passwörter, API-Schlüssel, Code-Snippets und jeden Text, den Sie häufig kopieren – verschlüsselt und immer nur einen Klick entfernt. Sklad Demo ✨ Funktionen 🔒 Master-Passwort-Schutz —...