bluemonday

bluemonday bluemonday es un sanitizador HTML implementado en Go. Es rápido y altamente configurable. bluemonday toma contenido generado por usuarios no confiable como entrada, y devolverá HTML saneado contra una lista blanca de elementos y atributos HTML aprobados para que puedas incluir el...

IngressNightterror

IngressNightterror CVE-2025-1974 Overview This repository is my research on IngressNightmare vulnerability. It includes a vulnerable Ingress deploy files, exploit itself and shared object payload. CVE The list of CVE indexes: CVE-2025-1974 - Root vulnerability CVE-2025-24514 - auth-url annotation...

OpenSSL-2022

2022 OpenSSL vulnerability - CVE-2022-3602/CVE-2022-3786 This repo contains operational information regarding CVE-2022-3602 and CVE-2022-3786, two vulnerabilities in OpenSSL 3.0.0-3.0.6. For more information see: OpenSSL Security Advisory OpenSSL Blogpost FAQ CERT-Bund advisory DE CISA advisory...

exphub

Notice Al final, pensé que era muy inconveniente tener cada vulnerabilidad y cada script por separado, así que combiné todos los scripts POC y EXP en uno solo, que permite escaneo y explotación con un solo clic. Como he estado ocupado integrando recientemente, exphub ha estado estancado sin...

fses

fses Fucking Search Engines Scraper - librería de Python para extraer URLs de motores de búsqueda Motores de búsqueda que scrapeamos Ask Bing DuckDuck GO UOL Yahoo Instalación git clone https://github.com/mthbernardes/fses.git cd fses pip install -r requeriments.txt Uso Búsqueda simple usando Ask...

bug-bounty-library

Bug Bounty / Original Findings Library Folders are numbered in the order a hunter actually works - first to last. Start at 00-hunt/00-INDEX. Run the hunt from 00-hunt/ALPHA. This README is only the map. Authorization only. Safe harbor, VDP, GitHub PVR, or coordinated disclosure. No other-customer...

lm-fingerprint

LM-Fingerprint Fingerprints the serving stack behind an OpenAI-compatible chat endpoint. It records tokenizer accounting, hidden template offset, validation prose, JSON/SSE shape, role acceptance, named limits, and gateway headers. It does not load weights, store API keys, or ask the model who it...

detection-defense-library

Detection Defense Library One defense-engineering library, consolidated. Attack classes, the patterns that detect them, the committed Sigma rules, and the Windows trust-boundary model, all in a single repo. This repo folds in five former sibling repositories: Former repo| Folded into| What it hol...

wappalyzer-next

Wappalyzer Next Questo progetto è uno strumento da riga di comando e una libreria Python che utilizza l'estensione del browser Wappalyzer e le sue impronte digitali per rilevare le tecnologie. Altri progetti nati dopo la sospensione del progetto open source ufficiale utilizzano impronte digitali...

brutto

brutto Fuerza bruta fácil para lo que quieras, Su magia: valores crecientes y directos. Implementación Clona git clone https://github.com/jofpin/brutto.git Descarga la última versión Instala con Python: python setup.py install So you import the library from bruttoeasy import Brutto Cómo usar...

libewf

libewf è una libreria per accedere all'Expert Witness Compression Format EWF. Informazioni sul progetto: Stato: sperimentale Licenza: LGPL-3.0-or-later Formati EWF supportati in lettura e scrittura: SMART .s01 EWF-S01 EnCase .E01 EWF-E01 .Ex01 EWF2-Ex01 Non supportati: .Ex01 EWF2-Ex01 compression...

pylibemu

Pylibemu |version badge| |downloads badge| .. |version badge| image:: https://img.shields.io/pypi/v/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ .. |downloads badge| image:: https://img.shields.io/pypi/dm/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ Pylibemu è un...

needrestart

needrestart Informazioni needrestart verifica quali demoni devono essere riavviati dopo gli aggiornamenti delle librerie. Si ispira a checkrestart del pacchetto debian-goodies. Nella directory ex/ ci sono alcuni script hook da usare con apt e dpkg. Gli script chiameranno needrestart dopo ogni...

Project-Project-Chimera-Exploiting-a-Modern-WordPress-XXE-to-Pillage-Secrets-

Project Goal: To demonstrate a complete attack chain on a vulnerable WordPress installation, exploiting CVE-2021-29447 XXE in media library to achieve remote code execution and full system compromise. Phase 1: Reconnaissance & Enumeration Network Scanning with Nmap: bash Quick SYN scan to discove...

pytmipe

PYTMIPE & TMIPE PYTMIPE biblioteca de Python para Manipulación de Tokens y Suplantación para Escalada de Privilegios es una biblioteca de Python 3 para manipular tokens de Windows y gestionar suplantaciones con el fin de obtener más privilegios en Windows. TMIPE es el cliente de Python 3 que...

trivy-db

trivy-db Panoramica trivy-db è uno strumento CLI e una libreria per gestire il database di Trivy. Libreria Trivy usa trivy-db internamente per gestire il database delle vulnerabilità. Questo database contiene informazioni sulle vulnerabilità provenienti da NVD, Red Hat, Debian, ecc. CLI Lo...

CVE-2025-24071

CVE-2025-24071 - Windows File Explorer NTLM Hash Leak 📋 Overview CVE-2025-24071 is a vulnerability in Windows File Explorer that allows unauthorized disclosure of NTLM hashes. When a user extracts a specially crafted .zip archive containing a malicious .library-ms file, Windows Explorer...

logparser

Logparser Logparser fornisce un toolkit di machine learning e benchmark per il parsing automatico dei log, un passaggio fondamentale per l'analisi strutturata dei log. Applicando logparser, gli utenti possono estrarre automaticamente modelli di eventi da log non strutturati e convertire i messagg...

wappalyzergo

Wappalyzergo Un port ad alte prestazioni della libreria di rilevamento delle tecnologie Wappalyzer in Go. Ispirato da Webanalyze. Utilizza dati da https://github.com/enthec/webappanalyzer https://github.com/HTTPArchive/wappalyzer Caratteristiche Molto semplice e facile da usare, con una base di...

cryptography

pyca/cryptography .. image:: https://img.shields.io/pypi/v/cryptography.svg :target: https://pypi.org/project/cryptography/ :alt: Latest Version .. image:: https://readthedocs.org/projects/cryptography/badge/?version=latest :target: https://cryptography.io :alt: Latest Docs .. image::...