992135 matches found
OpenRelayMagic
OpenRelayMagic ╔═╗┌─┐┌─┐┌┐┌╦═╗┌─┐┬ ┌─┐┬ ┬╔╦╗┌─┐┌─┐┬┌─┐ ║ ║├─┘├┤ │││╠╦╝├┤ │ ├─┤└┬┘║║║├─┤│ ┬││ ╚═╝┴ └─┘┘└┘╩╚═└─┘┴─┘┴ ┴ ┴ ╩ ╩┴ ┴└─┘┴└─┘ Tool to test for vulnerable open relays on SMTP servers Features Check single target/ domain list Port 587 and 465 Implemented Multithreaded...
Cortex
Cortex tries to solve a common problem frequently encountered by SOCs, CSIRTs and security researchers in the course of threat intelligence, digital forensics and incident response: how to analyze observables they have collected, at scale , by querying a single tool instead of several? Cortex, an...
secure-agent-playbook
Secure Agent Playbook An open-source security playbook for AI agents. Structured, OWASP-grounded procedures that enable agents to perform security engineering tasks — from code review to AI agent security audits. Table of Contents Why Use This? What This Is Quick Start Skills Catalog Agents Examp...
criticality_score
Open Source Project Criticality Score Beta This project is maintained by members of the Securing Critical Projects WG. Goals 1. Generate a criticality score for every open source project. 2. Create a list of critical projects that the open source community depends on. 3. Use this data to...
CVE-2019-18426
WhatsApp Vulnerabilities Disclosure - Open Redirect + CSP Bypass + Persistent XSS + FS read permissions + potential for RCE CVE-2019-18426 Technical Article Original Vulnerabilities Disclosures Documents DEMO Vids!...
certificate-ripper
Certificate Ripper 🔐 A CLI tool to extract server certificates Demo Advantages It is fast Easy to use No openssl required Runs on any Operating System Can be used with or without Java, native executables are present in the releases Extracts all the sub-fields of the certificate Certificates can b...
git-vuln-finder
git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE ID...
betterleaks
Betterleaks + ○ ▾ Betterleaks is a configurable, fast, and thorough secrets scanner. It is maintained by the folks who made Gitleaks, including the original author. Check out this series of blog posts to learn how the detection engine works: 1. Regex is all you need, 2. Rare Not Random, 3. Expres...
TJ-OSINT-Notebook
TJ-OSINT-Notebook Intial Release November 18th 2022 Main Purpose: This OSINT Notebook provides an overview of the tools, techniques, and resources that I use for a variety of situations for performing reconaissance and OSINT operations. This Notebook has helped me in many situations to learn more...
filekey
🔐 FileKey FileKey is an offline web app that lets you quickly encrypt and share files using passkeys. No accounts, no tracking, no cloud. 🛡️ FileKey is free, open source, and privacy-first. Live at filekey.app. 🚀 Features ✅ Free & Open Source – Licensed under GPLv3. ✅ Accountless – No logins, no...
CVE-2023-34830---Reflected-XSS-found-in-I-doit-Open-v24-and-below
CVE-2023-34830 - Reflected XSS found in i-doit Open v24 and below i-doit Open v24 and below are vulnerable to Reflected XSS vulnerability. These vulnerabilities could allows remote authenticated attackers to inject arbitrary web script or HTML. Description of product : i-doit is a web based Open...
privacytests
PrivacyTests PrivacyTests is an open-source testing program that measures browser privacy characteristics, and a website, https://privacytests.org, that renders the results for human consumption. PrivacyTests uses the MIT license. aioquic: a submodule with a fork of the aioquic project for...
liblapith
Liblapith - a library for parsing Nessus results files Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Felix Ingram, felix dot ingram at nccgroup dot com http://www.github.com/nccgroup/liblaptith Released under LGPL. See LICENSE for more information Example import...
rootend
rootend rootend is a python nix Enumerator & Auto Privilege Escalation tool. For a full list of our tools, please visit our websitehttps://www.twelvesec.com/ Written by: nickvourd twitter maldevel twitter servo Usage . \ / | | / / | | \ / / // | |\ / // \ \ / / \ | | \ /\ /| |\ /\ / / \ /\ ...
prey-android-client
Here you will find all the source code for the current and in development releases of the Prey client for Android devices. Prey is a SaaS platform for device tracking, monitoring, data protection, and device management. Its open-source agent runs on endpoints and connects to a centralized control...
LFI-FINDER
🍀 LFI FINDER TOOL 🍀 Written by TMRSWRR Version 1.0.0 Instagram: TMRSWRR 📹 How to use 📹 Click on the image... LFI-FINDER is an open-source tool available on GitHub that focuses on detecting Local File Inclusion LFI vulnerabilities. Local File Inclusion is a common security vulnerability that allow...
PyRIT
Python Risk Identification Tool for generative AI PyRIT The Python Risk Identification Tool for generative AI PyRIT is an open source framework built to empower security professionals and engineers to proactively identify risks in generative AI systems. Check out our website for more information...
NodeSecurityShield
Node Security Shield Node Security Shield NSS is an Open source Runtime Application Self-Protection RASP tool which aims at bridging the gap for comprehensive NodeJS security by enabling Developer and Security Engineer to declare what resources an application can access. Inspired by the Log4Shell...
omnibus
OSINT Omnibus Developed & maintained by InQuest Table of Contents OSINT Omnibus Omnibus Documentation Vocabulary Running Omnibus API Keys Interactive Console Artifacts Overview Creating & Managing Artifacts Sessions Modules Machines Reporting Monitoring Modules OSINT Omnibus Developed & maintaine...