DeimosC2

DeimosC2 Deimos está en: DEPRECATED DeimosC2 ya no recibe mantenimiento y tiene una vulnerabilidad XSS conocida CVE-2025-26244. Gracias a JaRm222 por identificar la vulnerabilidad y notificarnos. Su análisis de la vulnerabilidad se puede encontraraquí. DeimosC2 es una herramienta de Comando y...

RedTeamSimmer

RedTeamSimmer The UI You've Always Wanted for Atomic Red Team A Web Based Adversary Emulation Platform and Atomic Red Team Test Orchestration. Overview RedTeamSimmer is an open-source, web based adversary emulation platform providing a modern UI for orchestrating Atomic Red Team tests across...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

crypto/x509: Incorrect enforcement of email constraints in crypto/x509

A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly...

crypto/x509: Incorrect enforcement of email constraints in crypto/x509

A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

gOSINT

gOSINT Codacy Badge Navaja suiza OSINT en Go Echa un vistazo a la rama develop para más actualizaciones. Introducción gOSINT es una navaja suiza OSINT multiplataforma en Golang. Si quieres, siéntete libre de contribuir y/o dejar comentarios. ¿Te gusta mi proyecto? ¡Por favor considera donar : Lo...

failpoint

failpoint An implementation of failpoints for Golang. Fail points are used to add code points where errors may be injected in a user controlled fashion. Fail point is a code snippet that is only executed when the corresponding failpoint is active. Quick Start use failpoint-ctl 1. Build...

gitleaks

Gitleaks ┌─○───┐ │ │╲ │ │ │ ○ │ │ ○ ░ │ └─░───┘ !WARNING Gitleaks is feature complete. I'm not merging new features into Gitleaks. Future releases will be security patches only. I'm shifting my focus to Betterleaks Gitleaks is a tool for detecting secrets like passwords, API keys, and tokens in g...

evine

Evine Interactive CLI Web Crawler. Evine is a simple, fast, and interactive web crawler and web scraper written in Golang. Evine is useful for a wide range of purposes such as metadata and data extraction, data mining, reconnaissance and testing. If you like the project, give it a star. It forces...

evine

Evine Web Crawler CLI interactivo. Evine es un web crawler y web scraper simple, rápido e interactivo escrito en Golang. Evine es útil para una amplia gama de propósitos, como extracción de metadatos y datos, minería de datos, reconocimiento y pruebas. Si te gusta el proyecto, dale una estrella...

sopa

sopa Un cliente práctico para ADWS en Golang. Sopa implementa la pila de protocolos ADWS MS-NNS + MC-NMF + SOAP, exponiendo las siguientes funcionalidades desde línea de comandos: Búsqueda y recuperación de objetos query: ejecuta búsquedas por filtro LDAP mediante el bucle WS-Enumeration...

pdtm

ProjectDiscovery's Open Source Tool Manager Features • Installation • Usage • Running pdtm • Join Discord pdtm is a simple and easy-to-use golang based tool for managing open source projects from ProjectDiscovery. Installation pdtm requires go1.24.3 to install successfully. Run the following...

Supernova

Supernova Cifrador y ofuscador de shellcode. Descripción Supernova es una herramienta de código abierto que permite a los usuarios cifrar y/u ofuscar de forma segura su shellcode crudo. -red?link=https%3A%2F%2Fgithub.com%2Fnickvourd%2FSupernova%2Freleases Supernova soporta varias funcionalidades...

casbin

Apache Casbin News : still worry about how to write the correct Apache Casbin policy? Apache Casbin online editor is coming to help! Try it at: https://casbin.apache.org/editor/ Apache Casbin is a powerful and efficient open-source access control library for Golang projects. It provides support f...

SubOver

SubOver Nota - Este proyecto está discontinuado. ¡No se proporcionarán más actualizaciones! Lo siento. ¡Pero algo más increíble vendrá pronto! Subover es una herramienta de Hostile Subdomain Takeover originalmente escrita en Python pero reescrita desde cero en Golang. Desde su rediseño, se ha...