Reverse_HTTPS_Bot

ReverseHTTPSBot 0.8 Description: A python based https remote access trojan for penetration testing. Server is currently NodeJS based Bot Requires: pip install requests pip install pyscreenshot Server Requires: sh setup.sh to generate self signed certificate and key for testing sudo npm install...

h8mail

h8mail is an email OSINT and breach hunting tool using different breach and reconnaissance services, or local breaches such as Troy Hunt's "Collection1" and the infamous "Breach Compilation" torrent. 📖 Table of Content Table of Content Features APIs Usage Usage examples Thanks & Credits Related...

ghostrecon

Cloud-Based, Fast, and Customizable Web Recon Tool. Prerequisites NodeJs Python3 Go pip3 npm Screen Shots 📸 : Screen Shot 1 Screen Shot 2 Steps to install for Linux & Mac🐧 👨🏽‍💻: !ubuntuhttps://ass...

L3MON

L3MON Layer 3 Sistema Avanzado de Gestión y Monitorización de Redes L3MON es un sistema de gestión y monitorización de redes de vanguardia desarrollado con NodeJS. Proporciona a los usuarios una interfaz web robusta e intuitiva que permite capacidades de gestión y monitorización de redes sin...

nodejshell

NODEJSHELL - Reverse shell exploit for NodeJs deserialization CVE-2017-5941 The exploit automatically generates the reverse shell payload which is encoded in decimal and then in base64. After that, this payload is sent via an HTTP POST request that serializes the user input and stores it in a...

witcher

witcher Implement and monitor Appsec control at scale. Requirements NodeJS 20.13 Tested on Mac Ubuntu How to install $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ npm i Build a Docker image $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ docker build ...

SucoshScanny

Sucosh Scanny "Sucosh" es un escáner automatizado de vulnerabilidades de código fuente SAST y un marco de evaluación para Python Flask-Django y NodeJs, capaz de realizar revisiones de código en procesos de desarrollo de aplicaciones web o análisis de código fuente. Puede detectar muchas...

analyzer

This project automates the daily tasks of Threat Intelligence Analyzer role internally without external resources' interaction. It analyzes, visualizes and structures sensitive files Malware or data by extracting features, artifacts and IoC using different modules. The output of those modules can...

Important: Red Hat Security Advisory: nodejs:22 security update

An update for the nodejs:22 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

XploitSPY

Una herramienta de monitoreo de Android basada en la nube, impulsada por NodeJS Características Registro de GPS Grabación de micrófono Ver contactos Registros de SMS Enviar SMS Registros de llamadas Ver aplicaciones instaladas Ver permisos del stub Registro del portapapeles en vivo Registro de...

Nodejs-Tracer

nodejs-tracer Simple Node.jstracer that logs calls to core modules, can spoof certain calls to defeat anti-analysis, save files written by the application and more. Useful to analyze heavily obfuscated Node.js malware. Usage node -r .\tracer.js main.js Example trace with DISPLAYSTACK active:...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start Download the Repo = run npm i Afer Installing all dependency just run the application node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4 Broken Session Management ✅5 We...

ninjasworkout

Aplicación NodeJS Vulnerable a Propósito Inicio Rápido Download the Repo = run npm i Después de instalar todas las dependencias, simplemente ejecute la aplicación node app.js or nodemon app.js VULNERABILIDADES AGREGADAS Contaminación de Prototipos ✅1 Inyección NoSQL ✅2 Cross-site Scripting XSS ✅3...

Striker

Striker C2 Striker es un sencillo programa de Comando y Control C2. Descargo de responsabilidad Este proyecto está en desarrollo activo. La mayoría de las funcionalidades son experimentales, y habrá más por venir. Espere cambios importantes. Características A Agentes Agentes nativos para sistemas...

CVE-2019-17625

CVE-2019-17625 There is a stored XSS vulnerability in rambox 0.6.9 due to unsantized parameters in the name field when a user is adding a service. Since rambox runs on NodeJS this allows for the use of OS commands to be injected into an or tag. Note: This code has only been tested on MacOS and ma...

patchright

🎭 Patchright Patchright is a patched and undetected version of the Playwright Testing and Automation Framework. It can be used as a drop-in replacement for Playwright. !NOTE This repository serves the Patchright Driver. To use Patchright, check out the Python Package, the NodeJS Package or the...

redjoust

ᵔᴥᵔ RedJoust Una herramienta webapp de reconocimiento de seguridad rápida y fácil de usar, realiza OSINT, análisis y red-teaming tanto en modo pasivo como activo. Escrita en nodeJS y Electron. Únete a la comunidad Únete a la comunidad de Kawaiipantsu / THUGSred y participa en las conversaciones d...

Recheck

Recheck Recheck Escanea profundamente el dominio y encuentra todos los dominios posibles para tomar el control Enlaces rápidos Demo Instalación Características Ejemplo Ejecución / Instalación ¿Cómo ejecutar? git clone https://github.com/tegal1337/Recheck cd Recheck npm install npm start...

Node.js st module Directory Traversal

A directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e encoded dot dot in an unspecified path. id: CVE-2014-3744 info: name: Node.js st module Directory Traversal author: geeknik severity: high description: A...

Lodash Template - Server-Side Template Injection (RCE)

Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function. id: CVE-2021-23337 info: name: Lodash Template - Server-Side Template Injection RCE author: DhiyaneshDk severity: high description: | Lodash versions prior to 4.17.21 are vulnerable to Command Injectio...