rapidscan

🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...

waf-bypass

WAF Bypass Tool WAF Bypass Tool is an open source tool to analyze the security of any WAF for False Positives and False Negatives using predefined and customizable payloads. Check your WAF before an attacker does. WAF Bypass Tool is developed by Nemesida WAF team with the participation of...

hijackthis

Download Latest build v3.x - Release Stable build v2 outdated - not updated anymore this is beta-version - major changes are in progress; although it is definitely safe to use HiJackThis+ HiJackThis+ Plus previously called: HiJackThis Fork v3 is a fork and a continuation of the original Trend Mic...

subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

wesng

Windows Exploit Suggester - Next Generation WES-NG WES-NG is a tool based on the output of Windows' systeminfo utility which provides the list of vulnerabilities the OS is vulnerable to, including any exploits for these vulnerabilities. Every Windows OS between Windows XP and Windows 11, includin...

shellshock_crawler

Предварительные требования 1. sudo pip install shell 2. установите google python search. https://github.com/MarioVilas/google Запуск Я использую google для поиска по первым 1000 сайтам и пытаюсь получить /etc/passwd После тестирования обнаруживается очень много хостов, которые можно взломать!!!!...

pocsploit

pocsploit 中文 README pocsploit is a lightweight, flexible and novel open source poc verification framework Pain points of the POC framework in the market 1. There are too many params, I don't know how to get started, but only some of them are commonly used. 2. YAML poc frameworklike nuclei & xray ...

apidetector

APIDetector is a powerful and efficient tool designed for testing exposed Swagger endpoints in various subdomains with unique smart capabilities to detect false-positives. It's particularly useful for security professionals and developers who are engaged in API testing and vulnerability scanning...

waf-bypass

WAF 우회 도구 WAF Bypass Tool은 사전 정의된 사용자 정의 가능한 페이로드를 사용하여 모든 WAF의 False Positive 및 False Negative에 대한 보안을 분석하는 오픈 소스 도구입니다. 공격자가 하기 전에 WAF를 확인하세요. WAF Bypass Tool은 커뮤니티의 참여로 Nemesida WAF 팀이 개발했습니다. 불법적인 행위 금지 불법적인 목적으로 사용하는 것을 금지합니다. 법을 위반하지 마십시오. 이 소프트웨어 사용과 관련된 가능한 위험에 대해 당사는 책임을 지지 않습니다. 실행 방법...

confused

Confused A tool for checking for lingering free namespaces for private package names referenced in dependency configuration for Python pypi requirements.txt, JavaScript npm package.json, PHP composer composer.json or MVN maven pom.xml. What is this all about? On 9th of February 2021, a security...

Analysis

Заметки и анализ по Detection Engineering Этот репозиторий документирует практические исследования в области детектирования, основанные на лабораторном тестировании, анализе логов и реальных рабочих процессах SOC. Основное внимание уделяется тому, как техники атакующих на самом деле отображаются ...

rayhunter

Rayhunter Rayhunter는 IMSI 캐처셀 사이트 시뮬레이터 또는 스팅레이로도 알려져 있음를 탐지하기 위한 프로젝트입니다. 처음에는 Orbic RC400L이라는 저렴한 모바일 핫스팟에서 실행되도록 설계되었지만, 커뮤니티의 노력 덕분에 다른 일부 기기도 지원할 수 있습니다. 또한 기술 수준에 관계없이 누구나 쉽게 설치하고 사용할 수 있도록 설계되었으며, 오탐false positives을 최소화하는 것을 목표로 합니다. → 시작하려면 설치 가이드를 확인하세요. → 프로젝트의 목표와 IMSI 캐처 전반에 대해 자세히...

wpgarlic

wpgarlic Доказательство концепции фаззера плагинов WordPress, который привел к обнаружению более 300 уязвимостей в плагинах WordPress, установленных почти на 30 миллионов сайтов. Используемая методика описана в https://kazet.cc/2022/02/03/fuzzing-wordpress-plugins.html Если вы хотите продолжить...

cq

cq Code Query, 범용 코드 보안 스캐닝 도구. CQ는 보안 취약점과 보안 중심 코드 리뷰어에게 관심을 끄는 기타 항목을 코드에서 스캔합니다. 발견된 문제에 대한 참조가 포함된 텍스트 파일을 출력 디렉토리에 생성합니다. 이 출력 파일들은 이후 검토하거나, grep과 같은 unix 명령줄 도구로 필터링하거나, 지정된 file:line 참조에서 코드베이스로 '점프'하는 수단으로 사용할 수 있습니다. 널리 사용되는 방식 중 하나는 출력 파일을 '할 일todo' 목록으로 간주하여, 검토하면서 오탐false positive으로...

slowql

SlowQL Самый быстрый офлайн-статический анализатор SQL. Написан на Rust и гарантирует нулевое количество ложных срабатываний. Обнаруживайте SQL-инъекции, проблемы производительности, отсутствующие индексы, неограниченные запросы, нарушения соответствия и более 282 других проблем до того, как они...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nfsd: fixed RELEASELOCKOWNER The test on socount in nfsd4releaselockowner is pointless and harmful. revert to using checkforlocks, and change it to not sleep. Firstly, it’s harmful. As documented in the kdoc comment for...

CVE-2026-13221

A flaw was found in Perl. When the Perl regular expression engine processes patterns with a very large number of alternative fixed strings, an internal data field can overflow. This leads to silently incorrect regular expression matches, causing the engine to either match strings it should not...

What SecureIQLab Cloud WAAP 5.0 means for your application security

You cannot verify a vendor’s security claims from their own datasheet, including ours. That is why independent validation matters. In our recent guide to the best WAAP solutions Best WAAP Solutions 2026: Enterprise Buyer Guide, we argued that every serious shortlist should include independent...

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: rtnetlink: add missing netlinknscapable check for peer netns CVE-2026-31692 kernel: netfilter: ctnetlink: ensure safe access to...

On Flock License Plate Tracking Cameras

A recent story of a writer who was mistakenly identified, tracked, and arrested using data from Flock cameras has gone viral. The New Jersey plates that were allegedly stolen from the LA dealer were 34 03 DTM , not 34 10 DTM. But when the police report was created and the plate was entered into...