LoggerPlusPlus

Logger++ Advanced Logging for Burp Suite Developed by Corey Arthur Originally by Soroush Dalili Released as open source by NCC Group Plc - https://www.nccgroup.com/ Released under AGPL-3.0 see LICENSE for more information Description Logger++ is a multithreaded logging extension for Burp Suite. I...

CVE-2019-17571

CVE-2019-17571 / Apache Log4j 1.2.X Deserialization Remote Code Execution Vulnerability Vulnerability warning reference link: https://mp.weixin.qq.com/s/okU2y0izfnKXXtXG3EfLkQ 1. Vulnerability Description Apache Log4j is a Java-based open-source logging tool developed by the Apache Software...

wpbf

wpbf! wpbf is a bruteforce tool to remotely test password strength, username enumeration and plugin detection on a WordPress site. Description ^^^^^^^^^^^ The script will try to login into the WordPress dashboard through the login form using a mixture of enumerated usernames, a wordlist and...

log4j-shell-poc

log4j-shell-poc A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability. Recently there was a new vulnerability in log4j, a java logging library that is very widely used in the likes of elasticsearch, minecraft and numerous others. In this repository we have made and example...

ndaal_public_auditd

Linux Audit Daemon Auditd Best Practices and Deployment This repository provides comprehensive best practices for Linux Audit Daemon Auditd configuration and deployment, including an extensive set of security-focused audit rules, an Ansible role for automated deployment and the tools that test th...

Xenotix-Python-Keylogger

Xenotix Python Keylogger for Windows IMPORTANT: PROJECT DEVELOPMENT AND SUPPORT IS DISCONTINUED usage: xenotixpythonlogger.py mode optional mode: local: store the logs in a file keylogs.txt remote: send the logs to a Google Form. You must specify the Form URL and Field Name in the script. email:...

santa

Santa Santa is a binary and file access authorization system for macOS. It consists of a system extension that monitors for executions & file access, and makes decisions based on the contents of a local database, a GUI agent that notifies the user in case of a block decision, a background service...

SCREEN_KILLER

.. raw:: html .. image:: ./pictures/scrk.png :width: 700px :alt: Project .. raw:: html KILLER PROJECT .. contents:: :local: :depth: 1 ============= INTRO screenshot pentest OSCP This script was to developed to capture screenshot during pentest engagment and OSCP. IMPORTANT: The screenshot feature...

proftpd-CVE-2026-42167-analysis

CVE-2026-42167 — ProFTPD modsql SQL Injection / Auth Bypass / RCE Independent reproduction, code-level root-cause walkthrough, and a frank exposure analysis for CVE-2026-42167 — the isescapedtext bypass in ProFTPD's modsql logging pipeline disclosed by ZeroPath Research and fixed in ProFTPD 1.3.9...

interactsh

An OOB interaction gathering server and client library Features • Usage • Interactsh Client • Interactsh Server • Interactsh Integration • Join Discord Interactsh is an open-source tool for detecting out-of-band interactions. It is a tool designed to detect vulnerabilities that cause external...

cirro

Cirro is an extensible security research platform that enables researchers and penetration testers to collect, analyze, and visualize cloud environments and identity relationships through graph databases. Built with a modular architecture, Cirro can be extended to support multiple platforms and...

AiSOC

AiSOC An open-source, self-hostable AI Security Operations Center. It ingests your security telemetry, detects and correlates threats, investigates them with AI agents whose reasoning is fully auditable, and proposes responses a human approves. Technical Guide PDF · Docs · Architecture · What...

zeek-long-connections

Long Connections Zeek normally logs connections at the end of the connection, but this can cause trouble for incident responders in the case of very long lived connections that end up being unknown to defenders until too late. This package provides a new log named connlong which will log...

react2shell-scanner

react2shell-guard Security scanner for CVE-2025-55182 - a critical CVSS 10.0 unauthenticated Remote Code Execution vulnerability in React Server Components. ⚠️ DISCLAIMER This is a security scanner , NOT an exploit tool. It is designed to help developers and security teams identify vulnerable...

CVE-2026-59827

Authorized Metabase CVE-2026-59827 Penetration Testing Tool An authorized security assessment utility for validating the presence of CVE-2026-59827 in Metabase deployments during approved penetration testing engagements. This tool is designed to demonstrate the existence of the vulnerability whil...

CitrixHoneypot

Honepot for CVE-2019-19781 Citrix ADC Detect and log CVE-2019-19781 scan and exploitation attempts. Requirements: python3 openssl Usage: 1. Clone repo: git clone https://github.com/MalwareTech/CitrixHoneypot.git CitrixHoneypot && cd CitrixHoneypot 2. Make ssl and logs directory: mkdir logs ssl 3...

audit-kernel

Linux Kernel Audit Subsystem https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit.git https://github.com/linux-audit/audit-kernel The Linux Audit subsystem provides a secure logging framework that is used to capture and record security relevant events. It consists of a kernel component...

Pentest-Mapper

Pentest Mapper Pentest Mapper is a Burp Suite extension that integrates the Burp Suite request logging with a custom application testing checklist. The extension provides a straightforward flow for application penetration testing. The extension includes functionalities to allow users to map the...

sshhipot

Version 2 is under development. Please switch to the v2 branch, build, and run with -h. SSHHiPot High-interaction SSH honeypot ok, it's really a logging ssh proxy. Still more or less a work-in-progress. Feel free to go install this repository if you'd like to try it. Run it with -h to see more...

DotDumper

DotDumper An automatic unpacker and logger for DotNet Framework targeting files! This tool has been unveiled at Black Hat USA 2022. At Black Hat Asia 2023, DotDumperGUI and DotDumperNative were published, along with version 1.1-stable of DotDumper. These three tools are meant to be used together,...