diaphora

δiaphora Installation Install with the Hex-Rays plugin manager: root@kitploit: hcli plugin install https://github.com/joxeankoret/diaphora/archive/refs/tags/3.4.2.zip Manual install instructions are below. Diaphora διαφορά, Greek for 'difference' version 3.4 is the most advanced program diffing...

kitty

Introduction | Sulley: Boo? | Boo: Kitty! What is Kitty? Kitty is an open-source modular and extensible fuzzing framework written in python, inspired by OpenRCE's Sulley and Michael Eddington's and now Deja Vu Security's Peach Fuzzer . Goal root@kitploit: When we started writing Kitty, our goal w...

session_reaper_lab

CVE-2025-54236 - Laboratorio SessionReaper Ambiente Docker per dimostrazione pratica della CVE-2025-54236 SessionReaper: deserializzazione di oggetti PHP che porta a RCE in Magento Open Source 2.4.7. Uso esclusivo in ambiente controllato. Non eseguire contro sistemi senza autorizzazione esplicita...

gha-lab-227431b300

Kiwi TCMS - Open-Source-Testmanagement .. image:: https://img.shields.io/docker/pulls/kiwitcms/kiwi :target: https://kiwitcms.readthedocs.io/en/latest/installingdocker.html :alt: Downloads from Docker Hub .. image:: https://readthedocs.org/projects/kiwitcms/badge/?version=latest :target:...

DetExploit

Diese README ist die englische Version. Wenn Sie die japanische Version sehen möchten, schauen Sie bitte in dieREADMEJAPANESE.md. Info Letztes Update: 2019/10/04 Hallo, vielen Dank, dass Sie dieses Repository besuchen. Ihnen ist vielleicht aufgefallen, dass es eine Weile keinen Commit gab ... abe...

Carnivore

Rilasciato come open source da NCC Group Plc - https://www.nccgroup.com/ Sviluppato da Chris Nevin, [email protected] https://www.github.com/nccgroup/carnivore Rilasciato sotto licenza AGPL https://www.github.com/nccgroup/carnivore/license Carnivore - V.1.0.4 Strumento di Valutazione Esterna...

spring4shell-scan

spring4shell-scan A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities Features Support for lists of URLs. Fuzzing for more than 10 new Spring4Shell payloads previously seen tools uses only 1-2 variants. Fuzzing for HTTP GET and POST...

vulhunt

VulHunt Community Edition O VulHunt é uma estrutura de caça a vulnerabilidades desenvolvida pela equipa de investigação da Binarly. Foi concebido para ajudar investigadores e profissionais de segurança a identificar vulnerabilidades em binários de software e firmware UEFI. O VulHunt é construído...

havij

Havij – Ferramenta de Injeção SQL Nativo para Linux Havij é um port nativo para Linux da clássica ferramenta de injeção SQL Havij 1.15 Pro. Ele replica a interface original, o tema escuro e a estética de texto verde — mas roda nativamente no Linux usando Python e PyQt6. ⚠️ Aviso: Esta ferramenta é...

pocsploit

pocsploit 中文 README pocsploit is a lightweight, flexible and novel open source poc verification framework Pain points of the POC framework in the market 1. There are too many params, I don't know how to get started, but only some of them are commonly used...

Octopii

Octopii root@kitploit: ⠀⠀⠀⠀⠀⠀⠀⣤⣤⣄⣀⡀⠀⠀⠀⢀⣠⣤⣤⣄⡀⠀⠀⠀⢀⣀⣠⣤⣤⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠸⣿⣿⡿⠿⢿⣷⡄⢠⣿⣿⣿⣿⣿⣿⡄⢀⣾⡿⠿⢿⣿⣿⠇⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠈⠉⠀⠀⢸⣿⡇⢸⣿⣿⣿⣿⣿⣿⡇⢸⣿⡇⠀⠀⠉⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⣠⣤⡀⠀⠀⠀⠀⠀⠀⠀⢸⣿⡇⢸⣿⣿⣿⣿⣿⣿⡇⢸⣿⡇⠀⠀⠀⠀⠀⠀⠀⢀⣤⣄⠀⠀⠀ ⠸⣿⣿⣿⣿⣿⣿⣿⣿⣦⠀⢸⣿⡇⢸⣿⣿⣿⣿⣿⣿⡇⢸⣿⡇⠀⣴⣿⣿⣿⣿⣿⣿⣿⣿⠇⠀⠀ ⠀⠉⠉⠁⠀⠀⠀⠀⣿⣿⠀⢸⣿⡇⠀⠉⣿⣿⣿⣿⠉⠀⢸⣿⡇⠀⣿⣿⠀⠀⠀⠀⠈⠉⠉⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠀⣿⣿⣀⣈⣻⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣟⣁⣀⣿⣿⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀...

scriptkiddi3

Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using shell script and open source tools. How it works • Installation • Install with Docker • Usage • MODES • Important Notes | Webhook configurations • For Develope...

fuxploider

fuxploider Fuxploider is an open source penetration testing tool that automates the process of detecting and exploiting file upload forms flaws. This tool is able to detect the file types allowed to be uploaded and is able to detect which technique will work best to upload web shells or any...

Shipping More AI Code Than You Can Secure? Watch How to Control Remediation Debt

If your developers are using AI coding tools, you are probably already seeing the upside: faster development, more code, and less time spent on routine work. The harder part is what comes after. AI can also introduce open-source packages at a pace your security team was never built to handle. Mor...

miasm

What is Miasm? Miasm is a free and open source GPLv2 reverse engineering framework. Miasm aims to analyze / modify / generate binary programs. Here is a non exhaustive list of features: Opening / modifying / generating PE / ELF 32 / 64 LE / BE Assembling / Disassembling X86 / ARM / MIPS / SH4 /...

Security Bulletin: Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

Summary Langflow OSS supports Agentic Assistant generated components and user-supplied custom Python components for workflow development. Weaknesses in code security scanning, runtime validation, custom component execution paths, and trusted code enforcement could allow authenticated users to...

byob

Fragen? Schauen Sie sich die Dokumentation an oder treten Sie unserem Discord-Support-Server bei. Haftungsausschluss : Dieses Projekt sollte nur für autorisierte Tests oder zu Bildungszwecken verwendet werden. BYOB ist ein Open-Source-Post-Exploitation-Framework für Studenten, Forscher und...

agent-scanning

Contrôlez vos agents IA. Suivez les coûts. Restez conforme. open-souce Ce qu'il fait Un tableau de bord unique pour gérer votre équipe IA...

gerobug

Gerobug: A Primeira Plataforma de Bug Bounty Open Source. Gerobug A primeira plataforma de bug bounty open source autogerenciada. Você é uma empresa, planejando ter seu próprio programa de bug bounty, com orçamento mínimo? NÓS TE AJUDAMOS! Estamos cientes de que algumas organizações têm dificulda...

petereport

PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...