faraday-cli

Faraday on the terminal Use faraday directly from your favorite terminal faraday-cli is the official client that make automating your security workflows, easier. Before installing, we recommend creating and activating a Python virtual environment to avoid affecting your system Python packages. Fo...

CVE-2022-0165

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2022-0165 Run bellow command to check CVE-2022-0165 -h Configurations 2. We integrated with the Telegram API to receive...

theo

Theo Obsolete, not maintained anymore, don't install it, don't use it, you were warned! Theo aims to be an exploitation framework and a blockchain recon and interaction tool. Features: Automatic smart contract scanning which generates a list of possible exploits. Sending transactions to exploit a...

chepy

Chepy Chepy is a python library with a handy cli that is aimed to mirror some of the capabilities of CyberChef. A reasonable amount of effort was put behind Chepy to make it compatible to the various functionalities that CyberChef offers, all in a pure Pythonic manner. There are some key advantag...

wapiti

================================== Wapiti - Web Vulnerability Scanner .. image:: https://img.shields.io/pypi/v/wapiti3?label=PyPI&logo=PyPI&logoColor=white&color=blue :alt: PyPI version :target: https://pypi.python.org/pypi/wapiti3 .. image:: https://img.shields.io/pypi/pyversions/wapiti3 :alt:...

hijagger

hijagger - check package registries for hijackable packages This tool checks every maintainer from every package in the NPM and Python Pypi registry for unregistered domains or unregistered MX records on those domains. If a domain is unregistered you can grab the domain and initiate a password...

pip-audit

pip-audit pip-audit is a tool for scanning Python environments for packages with known vulnerabilities. It uses the Python Packaging Advisory Database https://github.com/pypa/advisory-database via the PyPI JSON API as a source of vulnerability reports. This project is maintained in part by Trail ...

CVE-2023-29489

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2023-29489 Run bellow command to check CVE-2023-29489 -h Configurations 2. We integrated with the Telegram API to receive...

MAL-2026-18354 Malicious code in trajmetrics (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3370d77977a536de8b2ea99267086960e8be3aea34a1efac6d975bb2bad98271 When starting as a module, the package scans the whole system and exfiltrates selected files by type. If following the README instruction, it starts a backgrou...

Malicious code in trajmetrics (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3370d77977a536de8b2ea99267086960e8be3aea34a1efac6d975bb2bad98271 When starting as a module, the package scans the whole system and exfiltrates selected files by type. If following the README instruction, it starts a backgrou...

bscan

:mag: an asynchronous target enumeration tool :magright: Synopsis bscan is a command-line utility to perform active information gathering and service enumeration. At its core, bscan asynchronously spawns processes of well-known scanning utilities, repurposing scan results into highlighted console...

CVE-2020-3187

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2020-3187 Run bellow command to check CVE-2020-3187 -h Configurations 2. We integrated with the Telegram API to receive...

HiddenEyeReborn

Introduction The HiddenEye: Reborn tool is a project aimed at exploiting human error. As my second attempt at creating a comprehensive tool for this purpose, it presently has numerous phishing features. We intend to add more functionality soon. Keep up with our progress by checking out our roadma...

sashay

Sashay Introduction ℹ️ Sashay is an all in one automatic installer for useful Linux based tools.There are over 340 tools available. Installation⬇️ pip install -U sashay Tool Categories Information Gathering Vulnerability Scanner Exploitation Tools Wireless Testing Forensics Tools Web Hacking Stress...

Malicious code in numprint (PyPI)

Source: kam193 ca6ff316077349c92e2d1e5d7c3683a16e6542b952d5c7fc8743efa5d4c80243 During installation the package starts a background process executing commands provided by the attacker. The C2 communication happens through a GitHub Gist. --- Category: MALICIOUS - The campaign has clearly malicious...

CVE-2024-24919

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2024-24919 Run bellow command to check CVE-2024-24919 -h Configurations 2. We integrated with the Telegram API to receive...

MAL-2026-18343 Malicious code in numprint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ca6ff316077349c92e2d1e5d7c3683a16e6542b952d5c7fc8743efa5d4c80243 During installation the package starts a background process executing commands provided by the attacker. The C2 communication happens through a GitHub Gist. --...

Malicious code in numprint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ca6ff316077349c92e2d1e5d7c3683a16e6542b952d5c7fc8743efa5d4c80243 During installation the package starts a background process executing commands provided by the attacker. The C2 communication happens through a GitHub Gist. --...

CVE-2026-21016-Malicious-PyPI-Package-Install-Hook-setup.py-Execution-

CVE-2026-21016 – Malicious PyPI Package Install Hook setup.py Execution Program Code Python setup.py - Malicious package that executes during install from setuptools import setup import os This runs on pip install os.system'id /tmp/pwnedbypackage' setup name='harmless-pkg', version='1.0',...

CVE-2018-11784

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2018-11784 Run bellow command to check CVE-2018-11784 -h Configurations 2. We integrated with the Telegram API to receive...