anteon

Monitoreo de Kubernetes y Pruebas de Rendimiento impulsados por eBPF Anteon genera automáticamente un Mapa de Servicios de tu clúster K8s sin instrumentación de código ni sidecars. Así puedes encontrar fácilmente los cuellos de botella en tu sistema. Las líneas rojas indican alta latencia entre...

steamer

Steamer Import, manage, search public dumps. Do you have massive amounts of CSV, .sql, .txt, that have credentials, passwords, and hashes inside? Use Steamer to manage them! Load them into a MongoDB database, and either use the console directly, or just use the handy web interface complete with...

resmack-fuzz-test

Resmack Prueba de Fuzzing Este proyecto es una exploración de un fuzzer guiado por retroalimentación que utiliza: ptrace para instrumentación con puntos de interrupción de memoria dinámica especificados por el proceso objetivo instantánea/restauración de procesos usando /proc/pid/map,...

sleuthkit

The Sleuth Kit INTRODUCTION The Sleuth Kit is an open source forensic toolkit for analyzing Microsoft and UNIX file systems and disks. The Sleuth Kit enables investigators to identify and recover evidence from images acquired during incident response or from live systems. The Sleuth Kit is open...

chaos

chaos chaos is an 'origin' IP scanner developed by RST in collaboration with ChatGPT. It is a niche utility with an intended audience of mostly penetration testers and bug hunters. An origin-IP is a term-of-art expression describing the final public IP destination for websites that are publicly...

SolarWinds Database Performance Analyzer 11.1.457 - Cross-Site Scripting

SolarWinds Database Performance Analyzer 11.1.457 contains a reflected cross-site scripting vulnerability in its idcStateError component, where the page parameter is reflected into the HREF of the 'Try Again' Button on the page, aka a /iwc/idcStateError.iwc?page= URI. id: CVE-2018-19386 info: nam...

Puppet Server/PuppetDB - Sensitive Information Disclosure

Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints, which may contain sensitive information when left exposed. id: CVE-2020-7943 info: name: Puppet Server/PuppetDB - Sensitive Information Disclosure author: c-sh0 severity: high...

wa-tunnel

wa-tunnel - TCP Tunneling through Whatsapp This is a Baileys based piece of code that lets you tunnel TCP data through two Whatsapp accounts. This can be usable in different situations, for example network carriers that give unlimited whatsapp data or airplanes where you also get unlimited social...

yaraQA

yaraQA Analizador de reglas YARA para mejorar la calidad y el rendimiento de las reglas ¿Por qué? Las reglas YARA pueden ser sintácticamente correctas pero aún así disfuncionales. yaraQA intenta encontrar e informar estos problemas al autor o mantenedor de un conjunto de reglas YARA. Los problema...

laurel

Linux Audit – Usable, Robust, Easy Logging LAUREL is an event post-processing plugin for auditd8 that generates useful, enriched JSON-based audit logs suitable for modern security monitoring setups. Documentation corresponding to the latest stable release can be found here. Why? TLDR: Instead of...

maude-hcs

Maude-HCS Maude-HCS es una de las primeras cadenas de herramientas generalizadas y modulares para especificar formalmente y razonar sobre Sistemas de Comunicación Oculta HCS a escalas del mundo real. Permite a los diseñadores de redes explorar diseños alternativos de HCS de forma rápida y efectiv...

metame

metame metame is a simple metamorphic code engine for arbitrary executables. From Wikipedia: Metamorphic code is code that when run outputs a logically equivalent version of its own code under some interpretation. This is used by computer viruses to avoid the pattern recognition of anti-virus...

brpc

Versión en chino bRPC es un framework RPC de nivel industrial que utiliza el lenguaje C++, comúnmente usado en sistemas de alto rendimiento como Búsqueda, Almacenamiento, Aprendizaje automático, Publicidad, Recomendación, etc. "bRPC" significa "mejor RPC". Puedes usarlo para: Construir un servido...

spectre-meltdown-checker

Spectre & Meltdown Checker A self-contained shell script to assess your system's resilience against the several transient execution CVEs that were published since early 2018, and give you guidance as to how to mitigate them. CVE list CVE| Name| Aliases ---|---|--- CVE-2017-5753| Bounds Check...

viper

Viper Frank4DD, @ May 2000 Viper is a prute force UNIX-style password cracker for passwords encrypt with crypt. It has been developed from Hale's viper 1.4 Perl program. While there are other more powerful crack programs out, this one is about studying the safety of passwords while hardware speed...

bitcracker

BitCracker BitCracker is the first open source password cracking tool for storage devices Hard Disk, USB Pendrive, SD card, etc... encrypted with BitLocker, an encryption feature available on Windows Vista, 7, 8.1 and 10 Ultimate, Pro and Enterprise editions. BitLocker offers a number of differen...

staekka

Stækka Metasploit - Extenting Metasploit This Msf plugin extends Metasploit for some missing features and modules allowing interaction with other/custom exploits/ways of getting shell access. The current focus here is Linux/Unix support. Core features TTY support: starting a shell from Metasploit...

social-engineer-toolkit

The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...

ligolo

Ligolo : Reverse Tunneling made easy for pentesters, by pentesters Table of Contents Introduction Use case Quick Demo Performance Usage Setup / Compiling How to use? TL;DR Options Features To Do Licensing Credits Introduction Ligolo is a simple and lightweight tool for establishing SOCKS5 or TCP...

CVE-2023-6289

CVE-2023-6289 Swift Performance Lite = 2.3.6.14 - Falta de autorización para la exportación de configuraciones no autenticada Descripción El plugin Swift Performance Lite para WordPress es vulnerable a acceso no autorizado a datos debido a una falta de verificación de capacidad en la funcionalida...