stackrox

目录 StackRox Kubernetes 安全平台 目录 社区 部署 StackRox 使用 Helm 快速安装 使用 Helm 手动安装 使用 Operator 安装 通过脚本安装 Kubernetes 发行版 EKS, AKS, GKE OpenShift Docker Desktop、Colima 或 minikube 访问 StackRox 用户界面 UI 开发 快速开始 构建工具 克隆 StackRox 本地开发 常用 Makefile 目标 生产力 GoLand 配置 运行 sqlintegration 测试 调试 生成便携安装程序 运行 StackRox 的依赖和建议...

routersploit

RouterSploit - Exploitation Framework for Embedded Devices Community Join community on Embedded Exploitation Discord. Description The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices. It consists of various modules that aid penetration testing...

scodescanner

SCodeScanner SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities. The main objective for this scanner is to find the vulnerabilities inside the source code before code gets published in Prod. Website for newreleases, new...

trufflehog

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

CVE-2026-0023-Update-Ownership-PoC

CVE-2026-0023 - Android 更新所有权信任绕过 PoC 一个完整的 Android 实验室环境，用于重现和研究 CVE-2026-0023。 此仓库演示了 CVE-2026-0023 如何允许普通安装程序影响仅应由系统控制的内部 Android 安装标志，从而导致应用程序更新期间 Android 的“更新所有权”警告被抑制。 该项目包含三个 Android 应用程序，它们模拟了一个真实的更新所有权工作流程，并提供了一个可重现的环境来观察有漏洞的行为。 概述 Android 引入了更新所有权，以帮助应用程序、应用商店和企业环境维护可信的更新链。...

rogue

The Rogue Toolkit 快速入门 阅读文档 了解所有最新支持的参数及示例用例 安装 工具包的安装指南...

nodejsscan

nodejsscan Static security code scanner SAST for Node.js applications powered by libsast and semgrep. Made with in India Support nodejsscan Donate via Paypal: Sponsor the Project: e-Learning Courses & Certifications OpSecX Node.js Security: Pentesting and Exploitation - NJS Run nodejsscan docker...

deadfinder

Find dead-links broken links Documentation • Installation • Github Action • Contributing • Changelog Dead link broken link means a link within a web page that cannot be connected. These links can have a negative impact to SEO and Security. This tool makes it easy to identify and modify. Looking f...

patoolkit

.. image:: https://user-images.githubusercontent.com/743886/43845704-6dbd2558-9ae1-11e8-9f77-239210fe7b6a.png PA Toolkit Pentester Academy Wireshark Toolkit PA Toolkit is a collection of traffic analysis plugins to extend the functionality of Wireshark from a micro-analysis tool and protocol...

rsdl

rsdl Subdomain Scanner v.2 Subdomain Scan With Ping Method & Check HTTP/S Statuses. Flags| Value| Description ---|---|--- --hostname| example.com| Domain for scan. --output| | Records the output with the domain name. --list| /tmp/lists/example.txt| Lister for subdomains. New Features Checking...

resolvers

Resolvers The most exhaustive list of reliable DNS resolvers resolvers.txt: A simple list of resolver IP addresses, which you can pass directly to your DNS enumeration tool. resolvers-extended.txt: All of the resolvers in resolvers.txt with additional information about each server, including the...

mitmproxy2swagger

mitmproxy2swagger https://user-images.githubusercontent.com/5400940/168086818-c48f60ab-3f95-42eb-b435-c8b1a6326b81.mp4 A tool for automatically converting mitmproxy captures to OpenAPI 3.0 specifications. This means that you can automatically reverse-engineer REST APIs by just running the apps an...

xurlfind3r

xurlfind3r xurlfind3r is a command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly...

metabigor

Metabigor - OSINT power without API key hassle What is Metabigor? Metabigor maps a target's infrastructure without asking you to register for a single API key. Network ranges, certificates, related domains, exposed ports, CDN vendors, and code leaks - all from free sources, all pipeable into each...

evilginx2

Evilginx 3.0 Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which in turn allows to bypass 2-factor authentication protection. This tool is a successor to Evilginx, released in 2017, which used a custom version of nginx HTTP server...

oregami

Oregami """ What is this register used for? Hmm.. I'll just rename it to veryuniquename, do a textual search, and find all references! Ok.. Waiting for the search to end.. any minute now.. Done! Now I just need to understand which of the search result is relevant to the current usage frame of the...

proxify

Features • Installation • Usage • Running Proxify • Installing SSL Certificate • Applications of Proxify • Join Discord Swiss Army Knife Proxy for rapid deployments. Supports multiple operations such as request/response dump, filtering and manipulation via DSL language, upstream HTTP/Socks5 proxy...

rainmap-lite

rainmap-lite Rainmap Lite - Responsive web application that allows users to launch Nmap scans from their mobiles/tablets/web browsers! Unlike it's predecessor 1, Rainmap-lite does not require special services RabbitMQ, PostgreSQL, Celery, supervisor, etc to make it easy to install on any server...

gcp_scanner

Disclaimer This project is not an official Google project. It is not supported by Google and Google specifically disclaims all warranties as to its quality, merchantability, or fitness for a particular purpose. GCP Scanner This is a GCP resource scanner that can help determine what level of acces...

xori

Xori - Custom disassembly framework Xori is an automation-ready disassembly and static analysis library that consumes shellcode or PE binaries and provides triage analysis data. Acknowledgements: Xori wouldn't exist without inspiration and ideas from the open source community. We are indebted to...