arp-validator

arp-validator Security Tool to detect arp poisoning attacks Features Uses a faster approach in detection of arp poisoning attacks compared to passive approaches Detects not only presence of ARP Poisoning but also valid IP-MAC mapping when LAN hosts are using non-customized network stack Stores...

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...

PHP-Shell-Detector

Web Shell Detector Web Shell Detector – is a php script that helps you find and identify php/cgiperl/asp/aspx shells. Web Shell Detector has a “web shells” signature database that helps to identify “web shell” up to 99%. By using the latest javascript and css technologies, web shell detector has ...

WP Mobile Detector <= 3.5 - Unrestricted File Upload

WP Mobile Detector plugin for WordPress = 3.5 contains an unrestricted file upload vulnerability caused by missing file type validation in resize.php, letting unauthenticated attackers upload arbitrary files, potentially leading to remote code execution. id: CVE-2016-15043 info: name: WP Mobile...

DataEase - Remote Code Execution

DataEase is an open-source business intelligence and data visualization platform. Public advisories state that CVE-2025-49002 is related to a bypass in the previous fix for CVE-2025-32966 involving case-insensitive handling of restricted H2 JDBC keywords. This template is a non-invasive detection...

catnip

Cat-Nip Automated Basic Pentest Tool this tool will make your basic pentesting task like Information Gathering, Auditing, And Reporting so this tool will do every task fully automatic. Usage Guide Download / Clone Cat-Nip git clone https://github.com/baguswiratmaadi/catnip Go Inside Cat-Nip Dir c...

EternalBlueC

EternalBlueC EternalBlue suite remade in C/C++ which includes: MS17-010 Exploit Contains DoublePulsar EternalBlue/MS17-010 vulnerability detector DoublePulsar detector DoublePulsar Upload DLL Doublepulsar Upload Shellcode DoublePulsar Upload DLL with SMB Structure Doublepulsar Upload Shellcode wi...

project-memoria-detector

project-memoria-detector The project-memoria-detector tool aims to determine whether a target network device runs a specific embedded TCP/IP stack. Currently, the tool supports fingerprints for 16 embedded TCP/IP stacks and their variations: uIP, Contiki or Contiki-NG picoTCP or picoTCP-NG Nut/Ne...

antispy

AntiSpy English | 简体中文 A powerful anti rootkit toolkit AntiSpy is a free but powerful anti virus and rootkits toolkit. It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks. With its assistance,you can easily spot and...

Joomla-CVE-Detector-CVE-2022-27913-

Joomla-CVE-Detector-CVE-2022-27913- CVE-2022-27913 の影響を受ける Joomla インスタンスを特定します。...

red-detector

Red-Detector 설명 Vulshttps://vuls.io/en/를 사용하여 EC2 인스턴스를 스캔하여 취약점을 찾습니다. Lynishttps://cisofy.com/solutions/lynis를 사용하여 EC2 인스턴스를 감사하여 보안 설정 오류를 찾습니다. Chkrootkithttp://www.chkrootkit.org/을 사용하여 EC2 인스턴스에서 루트킷 징후를 스캔합니다. 요구 사항 1. 아래에 언급된 EC2 작업이 구성된 AWS 계정. 이러한 요구 사항이 포함된 정책은...

RLCDAlignBench

Just Ask Jev: 較正された意思決定のための強化学習によるAIアラインメント失敗のゼロショット検出器 このリポジトリには RLCDAlignBench と論文の基盤となるコードが含まれています。 このベンチマークは、言語モデルの出力がアラインメント失敗であるかどうかを検出器が判別できるかを測定します。 10種類の失敗タイプ （追従性、ジェイルブレイク、欺瞞、プロンプトインジェクション、幻覚、プライバシー侵害、社会的バイアス、報酬ハッキング、不確実性の隠蔽、権力追求）にわたる44のベンチマーク と5つのターゲットモデル を含み、7,193のラベル付き検出インスタンス を提供します...

nginx-ultimate-bad-bot-blocker

REPO| BECOME A SPONSOR ---|--- | Your logo and link to your domain will appear here if you become a sponsor. Simply email me on [email protected] if you would like to sponsor this project as South Africa is not supported yet under the Github sponsor program. | Help Support Me at...

kubeeye

English | 中文 KubeEye is a cloud-native cluster inspection tool specifically designed for Kubernetes, capable of identifying issues and risks within the Kubernetes cluster based on custom rules. QuickStart Installation Download the installation package from Releases, which includes Helm chart, dem...

log4j-detector

Log4-detector 취약한 Log4J 버전을 탐지하여 팀이 CVE-2021-44228 심각, CVE-2021-45046, CVE-2021-45105, CVE-2021-44832에 대한 노출을 평가할 수 있도록 도와주는 스캐너입니다. 완전한 파일 시스템설치된 모든 애플리케이션 포함을 면밀히 조사하여 Log4J 인스턴스를 검색합니다. 여러 계층 깊이 숨겨진 Log4J 인스턴스도 찾을 수 있습니다. Linux, Windows, Mac 및 Java가 실행되는 모든 곳에서 작동합니다! 목차 소개 사용 예시 추가 사용 예시 결과...

http-stalling-detector

HTTP Stalling Detector HTTPスタリング型DoS攻撃は、Webサーバーが、リモートクライアントが単に 低速リンク経由で接続しているだけなのか、それともWebサーバーがローカル システムリソースを保護するためにタイムアウトして接続を切断するのを 防ぐべく、意図的にデータを非常にゆっくり送信しているのかを判別できない という特性を悪用します。攻撃者に典型的に見られる挙動は、多数の接続を 開き、Webサーバーが接続をタイムアウトさせないようにデータを少しずつ ゆっくり送り出すことです。Webサーバーが比較的小規模なワーカープールを...

blmvuln

PrestaShopウェブサイトの重大なセキュリティ脆弱性を修正 :rocket: CVE-2022-31101 検出兼修正ツール！ 新たに発見された脆弱性により、リモート攻撃者があなたのショップを乗っ取る可能性があります 脆弱性の詳細はこちらでお読みください： https://build.prestashop.com/news/major-security-vulnerability-on-prestashop-websites/...

caracal

Caracal Caracal is a static analyzer tool over the SIERRA representation for Starknet smart contracts. Features Detectors to detect vulnerable Cairo code Printers to report information Taint analysis Data flow analysis framework Easy to run in Scarb projects Installation Precompiled binaries...

mongobleed-detector

MongoBleed Detector CVE-2025-14847 MongoBleed のためのオフラインMongoDB分析ツール MongoDBデータを分析し、複数の検出モジュールを使用してCVE-2025-14847の悪用の可能性を特定するスタンドアロンLinuxコマンドラインツールです。 目次 概要 検出モジュール 要件 インストール 2つの動作モード モード1：ローカル分析 モード2：リモート収集 コマンドラインオプション 確信度レベル 出力例 テスト 注意点と制限事項 参考文献とクレジット ライセンス 概要 MongoBleed CVE-2025-14847...

magic-extractor

Magic Extractor 설명 Magic Extractor는 여러 탐지기로 파일을 식별하고 이를 적절한 번들 추출기로 연결하는 Windows용 범용 추출 도구입니다. 주류 압축 형식, 오늘날 실제로 볼 수 있는 설치 프로그램, 그리고 흔하지 않은 다양한 아카이버를 지원하는 것을 목표로 합니다. 80개 이상의 형식 — 아카이브, 설치 프로그램, 디스크 이미지, 포렌식 이미지EWF/AFF/AD1, 광 디스크 이미지, 메일 저장소, 최신 코덱을 자동 탐지합니다. 전체 목록은 formats.md를 참조하세요. 빠른 시작 최신 릴리...