MicroburstSecretsHunter

MicroBurst Secrets Hunter A PowerShell scanner that combs through MicroBurst Get-AzDomainInfo output for plaintext passwords, keys, connection strings, and other secrets that should never sit unencrypted in an Azure environment. Built for read-only audit workflows : you collect a domain dump with...

DSXS

Damn Small XSS Scanner Damn Small XSS Scanner DSXS es un escáner de vulnerabilidades de Cross-site scripting completamente funcional compatible con parámetros GET y POST escrito en menos de 100 líneas de código. En cuanto a configuraciones opcionales, admite proxy HTTP junto con los valores de...

Pummel

██████╗ ██╗ ██╗███╗ ███╗███╗ ███╗███████╗██╗ ██╔══██╗██║ ██║████╗ ████║████╗ ████║██╔════╝██║ ██████╔╝██║ ██║██╔████╔██║██╔████╔██║█████╗ ██║ ██╔═══╝ ██║ ██║██║╚██╔╝██║██║╚██╔╝██║██╔══╝ ██║ ██║ ╚██████╔╝██║ ╚═╝ ██║██║ ╚═╝ ██║███████╗███████╗ ╚═╝ ╚═════╝ ╚═╝ ╚═╝╚═╝ ╚═╝╚══════╝╚══════╝ Descargo de...

CVE-2024-57241

CVE-2024-57241CNNVD-2024-34500830 For web applications using DEDECMS 5.71SP1 and earlier, URL redirects occur because the source code logic error of the CMS does not judge the input GET request For web applications using DEDECMS 5.71SP1 and below, URL redirection occurs because the CMS source cod...

crlfuzz

CRLFuzz A fast tool to scan CRLF vulnerability written in Go Resources Installation from Binary from Source from GitHub Usage Basic Usage Flags Target Single URL URLs from list from Stdin Method Data Adding Headers Using Proxy Concurrency Silent Verbose Version Library Help & Bugs License Version...

KaliPackergeManager

KaliPackergeManager kalipm.sh es una poderosa herramienta de gestión de paquetes para Kali Linux que proporciona una interfaz basada en menús fácil de usar para simplificar la instalación de varios paquetes y herramientas. Agiliza el proceso de gestión de software y permite a los usuarios instala...

graphql-cop

GraphQL Cop - Security Audit Utility for GraphQL About GraphQL Cop is a small Python utility to run common security tests against GraphQL APIs. GraphQL Cop is perfect for running CI/CD checks in GraphQL. It is lightweight, and covers interesting security issues in GraphQL. GraphQL Cop allows you ...

CVE-2018-6574

CVE-2018-6574 Go anterior a 1.8.7, Go 1.9.x anterior a 1.9.4 y Go 1.10 pre-lanzamientos anteriores a Go 1.10rc2 permiten la ejecución remota de comandos mediante go get durante la compilación del código fuente, aprovechando la característica de plugins de gcc o clang, porque los argumentos...

ParamPamPam

ParamPamPam Esta herramienta permite descubrir parámetros GET y POST mediante fuerza bruta. Instalación Con Docker Instala Docker git clone https://github.com/Bo0oM/ParamPamPam.git cd ParamPamPam docker build -t parampp . echo -e '!'"/bin/bash\ndocker run -ti --rm parampp $@"...

CVE-2026-65374

cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...

ARPwner

Installation apt-get install python-pypcap...

CVE-2024-29895-CactiRCE-PoC

Cacti RCE - CVE-2024-29895 Uso: python3 cve-2024-29895.py -u https://target.com/ -c id Afecta a las versiones de Cacti 1.3.X en compilaciones DEV donde cmdrealtime.php está presente y POLLERID está habilitado. La inyección de comandos es posible a través de este endpoint, solicitando por GET con ...

send

@fastify/send Send is a library for streaming files from the file system as an HTTP response supporting partial responses Ranges, conditional-GET negotiation If-Match, If-Unmodified-Since, If-None-Match, If-Modified-Since, high test coverage, and granular events which may be leveraged to take...

ghauri

Like Ghauri, consider supporting the developer Ghauri An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws. Requirements Python 3 Python pip3 Installation cd to ghauri directory. install requirements: python3 -m pip install --upgrade ...

ffuf

ffuf - Fuzz Faster U Fool A fast web fuzzer written in Go. Installation Example usage Content discovery Vhost discovery Parameter fuzzing POST data fuzzing Using external mutator Configuration files Help Interactive mode Installation Download a prebuilt binary from releases page, unpack and run! ...

PowerGram

PowerGram PowerGram es un Bot de Telegram puro de PowerShell que puede ejecutarse en Windows, Linux o Mac OS. Para usarlo, solo necesitas PowerShell 4 o superior y una conexión a Internet. Toda la comunicación entre el Bot y los servidores de Telegram está cifrada con HTTPS, pero todas las...

CVE-2023-23752

CVE-2023-23752 simple program for joomla CVE-2023-23752 scanner, This is a simple Ruby script that checks if a list of targets is vulnerable to CVE-2023-23752, a critical security vulnerability in a web application. The script sends a HTTP GET request to a specified endpoint, and extracts...

CVE-2026-5430

cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...

MAL-2026-17642 Malicious code in personio-pipeline-projen (npm)

personio-pipeline-projen presents itself as an authorized dependency-confusion proof-of-concept; the evidence does not identify a copied public package. Its preinstall hook runs on install with node canary.js. The dependency-confusion probe encodes the installing machine's hostname and username,...

wreckuests

¿Qué es esto? Wreckuests es un script que te permite ejecutar ataques DDoS con inundación HTTP GET/POST. Está escrito en Python puro y utiliza servidores proxy como "bots". POR SUPUESTO, este script no es universal y no puedes simplemente tumbar el sitio web del Pentágono/NSA/lo que sea con un so...