568 matches found
ir-rescue
ir-rescue ir-rescue is composed of two sister scripts that collect a myriad of forensic data from 32-bit and 64-bit Windows systems ir-rescue-win and from Unix systems ir-rescue-nix. The scripts respect the order of volatility and artifacts that are changed with the execution e.g. , prefetch file...
cookiemonster
🍪 CookieMonster CookieMonster is a command-line tool and API for decoding and modifying vulnerable session cookies from several different frameworks. It is designed to run in automation pipelines which must be able to efficiently process a large amount of these cookies to quickly discover...
kiterunner
Kiterunner Introduction For the longest of times, content discovery has been focused on finding files and folders. While this approach is effective for legacy web servers that host static files or respond with 3xx’s upon a partial path, it is no longer effective for modern web applications,...
pentagi
PentAGI P enetration testing A rtificial G eneral I ntelligence Join the Community! Connect with security researchers, AI enthusiasts, and fellow ethical hackers. Get support, share insights, and stay updated with the latest PentAGI developments. ⠀ Table of Contents Overview Features Architecture...
Awesome-MoAI-Security
Awesome Mobile On-Device AI Security SoK: Attack and Defense Landscape of Mobile On-device AI Systems Mobile on-device AI systems execute AI models locally through ML frameworks such as LiteRT/TFLite , Core ML , ExecuTorch , ONNX , and hardware-backed accelerators. This repo tracks the security...
social-analyzer
Social Analyzer - API, CLI, and Web App for analyzing & finding a person's profile across +1000 social media \ websites. It includes different analysis and detection modules, and you can choose which modules to use during the investigation process. The detection modules utilize a rating mechanism...
commix
Commix short for command injection exploiter is an open source penetration testing tool, written by Anastasios Stasinopoulos @ancst, that automates the detection and exploitation of command injection vulnerabilities. You can visit the collection of screenshots demonstrating some of the features o...
Spring0DayCoreExploit
Spring Core RCE - CVE-2022-22963 Tras Spring Cloud, el 29 de marzo, otra vulnerabilidad de gran peso de Spring estalló en Internet: Spring Core RCE El poc de código en circulación: El exploit se ha subido comoexp.py El parche oficial de Spring también está en producción activa Enlaces del parche ...
awesome-ai-security
Awesome AI Security Una lista seleccionada de frameworks, estándares, recursos de aprendizaje y herramientas de código abierto relacionados con la seguridad en IA. Si quieres contribuir, crea un PR o contacta conmigo @ottosulin. Tabla de contenidos Recursos de aprendizaje Lecturas y guías Cursos,...
dawnscanner
Dawnscanner - El escáner de seguridad emergente para aplicaciones web Ruby dawn es un escáner de código fuente diseñado para revisar sus aplicaciones web en busca de problemas de seguridad. La herramienta puede escanear aplicaciones web escritas en Ruby y soporta todos los principales frameworks...
dawnscanner
Dawnscanner - The raising security scanner for ruby web applications dawn is a source code scanner designed to review your web applications for security issues. The tool is able to scan web applications written in Ruby and it supports all major MVC Model View Controller frameworks, out of the box...
ShaikUsaf-frameworks_base_AOSP10_r33_CVE-2022-20138
Este repositorio no tiene un README...
awesome-ctf
Awesome CTF Una lista curada de marcos de trabajo, bibliotecas, recursos, software y tutoriales de Capture The Flag CTF. Esta lista tiene como objetivo ayudar tanto a principiantes como a jugadores experimentados de CTF a encontrar todo lo relacionado con CTF en un solo lugar. Contribuciones Por...
Payload-and-Polyglot-Lists
Listas de Payloads y Políglotas ¿Encontraste un payload que no funciona? Por favor abre un issue con el payload, el contexto objetivo y lo que esperabas que sucediera. Las solicitudes de extracción con correcciones o nuevos payloads siempre son bienvenidas. La investigación está en curso. Este...
WebMvc.fn/WebFlux.fn - Path Traversal
Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application...
Spring Framework Path Traversal in Functional Web Frameworks
Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application...
frameworks_base_AOSP10_r33_CVE-2023-21284
This repository does not have a README...
route-detect
route-detect Find authentication authn and authorization authz security bugs in web application routes: Routes fromkoel streaming server Web application HTTP route authn and authz bugs are some of the most common security issues found today. These industry standard resources highlight the severit...