macOS_security_audit

🔒 macOS 보안 감사 macOS 시스템 강화 설정을 CIS 벤치마크 권장 사항과 비교하여 점검하고 JSON/HTML 보고서를 생성하는 Bash 기반 보안 감사 도구입니다. 제작: Bartłomiej Pogwizd · https://www.youtube.com/@pTech-pl 개요 이 도구는 두 개의 스크립트로 구성됩니다: auditMAC.sh — 전체 보안 감사를 실행하고 결과를 터미널 및 TSV 데이터 파일로 출력 generatereports.sh — TSV 데이터 파일을 JSON 보고서와 스타일이 지정된 HTML 보고...

OSTE-Meta-Scan

OSTE-Meta-Scanner 이 프로젝트는 현재 OSTE에서 유지 및 지원하며 더 이상 오픈 소스 프로젝트로 제공되지 않습니다. 문의, 상업적 사용 또는 지원은 LinkedIn, 공식 웹사이트 또는 WhatsApp +213.7.98.38.94.54를 통해 OSTE 영업팀에 연락해 주십시오. 이 프로젝트는 동적 애플리케이션 보안 테스트DAST 분야를 단순화하는 것을 목표로 합니다. OSTE 메타 스캐너는 Nikto Scanner, ZAP, Nuclei, SkipFish, Wapiti 등 여러 DAST 스캐너를 결합한 종합적인...

dorkbot

dorkbot Google 또는 다른 검색 결과에서 취약점을 스캔합니다. dorkbot은 Google 검색 쿼리 또는 기타 지원되는 소스에서 반환된 웹페이지 집합에 대해 취약점 스캔을 수행하는 모듈식 명령줄 도구입니다. 두 가지 모듈 집합으로 구성됩니다. 인덱서 - 타겟 목록을 반환하는 모듈 스캐너 - 각 타겟에 대해 취약점 스캔을 수행하는 모듈 타겟은 인덱싱되면 데이터베이스에 저장됩니다. 스캔이 완료되면 발견된 취약점을 포함한 표준 JSON 보고서가 생성됩니다. 인덱싱 및 스캔 프로세스는 별도로 실행하거나 단일 명령으로...

Exploit for Interpretation Conflict in Wordpress

CVE-2026-63030 | WP2Shell xpl0ited by gr1txhttps://gith...

ExploitIQ

⚡ ExploitIQ Autonomous AI-Powered Penetration Testing Assis...

H4C-WEB

H4C-WEB !/bin/bash =======================================...

Exploit for CVE-2025-14847

CYBERDUDEBIVASH MONGODB DETECTOR TOOL v2026.1 Detect expose...

EUVD-2018-8086

Malware in sbrugna...

Exploit for Authentication Bypass by Primary Weakness in Crushftp

CrushFTP CVE-2025-31161 Exploit Tool 🔓 Advanced detection an...

Web Cache Vulnerability Scanner - A Go-based CLI Tool For Testing For Web Cache Poisoning

Web Cache Vulnerability Scanner WCVS is a fast and versatile CLI scanner for web cache poisoning developed by Hackmanit. The scanner supports many different web cache poisoning techniques, includes a crawler to identify further URLs to test, and can adapt to a specific web cache for more efficien...

NinjaDroid - Ninja Reverse Engineering On Android APK Packages

NinjaDroid is a simple tool to reverse engineering Android APK packages. Published at: https://snapcraft.io/ninjadroid $ snap install ninjadroid --channel=beta Overview NinjaDroid uses AXMLParser together with a series of Python scripts based on aapt, keytool, string and such to extract a series ...

Typodetect - Detect The Active Mutations Of Domains

This tool gives blue teams, SOC's, researchers and companies the ability to detect the active mutations of their domains, thus preventing the use of these domains in fraudulent activities, such as phishing and smishing. For this, Typodetect allows the use of the latest available version of the TL...

Code injection

MorningStar WhatWeb 0.4.9 has XSS via JSON report files...

CVE-2018-16234

MorningStar WhatWeb 0.4.9 has XSS via JSON report files...

CVE-2018-16234: Improper Neutralization of Input During Web Page Generation

MorningStar WhatWeb 0.4.9 has XSS via JSON report files...

UPDATE: OWASP Dependency-Check 3.1.2

PenTestIT RSS Feed My first post about this open source OWASP project was about an older version. This post discusses the changes made to the open source software composition analysis utility in the latest release yesterday. This is the OWASP Dependency-Check 3.1.2! Most importantly NVD urls were...

Phishing Kit Hunter

Phishing Kit Hunter PhishingKitHunter or PKHunter is a tool made for identifying phishing kits URLs used in phishing campaigns targeting your customers and using some of your own website files as CSS, JS, …. This tool – write in Python 3 – is based on the analysis of referer’s URL which GET...

Cuckoo Sandbox v1.1 - Automated Malware Analysis

Cuckoo Sandbox is a malware analysis system. It simply means that you can throw any suspicious file at it and in a matter of seconds Cuckoo will provide you back some detailed results outlining what such file did when executed inside an isolated environment. Cuckoo generates a handful of differen...

[Cuckoo Sandbox v0.6] Software for Automating Analysis of Suspicious Files

Cuckoo Sandbox is an Open Source software for automating analysis of suspicious files. To do so it makes use of custom components that monitor the behavior of the malicious processes while running in an isolated environment. Cuckoo generates a handful of different raw data which include: Native...