69 matches found
turbo-intruder
Turbo Intruder Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results. It's intended to complement Burp Intruder by handling attacks that require exceptional speed, duration, or complexity. The following features set it apart: Fast - Turbo...
plasma
PLASMA The old project name was Reverse. PLASMA is an interactive disassembler. It can generate a more readable assembly pseudo code with colored syntax. You can write scripts with the available Python api see an example below. The project is still in big development. wiki : TODO list and some...
patchkit
patchkit Patches an ELF binary using one or more simple Python scripts. Usage: patch patchdir|file... patchdir Contains one or more Python patch files, which will be executed in alphabetical order against a binary. Patch Examples Nopping an address, injecting an assembly function, and hooking the...
pentest-tools
渗透测试工具集 一套满足快速需求的自定义安全工具集合。 重要说明 ‼ 2022年11月进行了一次大清理 ‼ 一些无用/无法使用的脚本已被归档，另一些则已移至各自独立的仓库以获得更多关注，欢迎查看： apk-analyzer cloudflare-origin-ip csp-analyzer detectify-cves extract-endpoints favicon-hashtrick google-search graphql-introspection-analyzer keyhacks.sh related-domains 安装 git clone...
dionaea
dionaea - atrapa bugs Dionaea pretende ser un sucesor de nepenthes, incorporando Python como lenguaje de scripting, usando libemu para detectar shellcodes y con soporte para ipv6 y tls. Protocolos blackhole epmap ftp http memcache mirror mqtt mssql mysql pptp sip smb tftp upnp Registro fail2ban...
pyrebox
================ ARCHIVED PROJECT THIS PROJECT HAS BEEN ARCHIVED AND ITS ISSUE QUEUE IS LOCKED. THE PROJECT WILL BE KEPT PUBLIC ONLY FOR REFERENCE PURPORSES. .. image:: docs/media/pyreboxlogolightbg.png .. QEMU: http://qemu.org/ .. DECAF: https://github.com/sycurelab/DECAF .. S2E:...
asadbg
asadbg Nota preliminar: recomendamos utilizarlo como parte de asatools, aunque también puede usarse de forma independiente. asadbg es un framework de herramientas para ayudar a automatizar la depuración en vivo de dispositivos Cisco ASA, así como automatizar la interacción con la CLI de Cisco...
idahunt
Descripción general Requisitos Características Scripting Uso Simular sin ejecutar Análisis inicial Ejecutar script de IDA Python Diffing de binarios Requisitos Análisis inicial Diffing de archivos Diffing de una función Filtros Detección de arquitectura Específico del objetivo Proyectos conocidos...
offensive-security-labs
Offensive Security Labs A collection of hands-on offensive cy...
CVE-2026-33229
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Prior to 17.4.8 and 17.10.1, an improperly protected scripting API allows any user with script right to bypass the sandboxing of the Velocity scripting API and execute, e.g., arbitrary Python...
CVE-2025-13911
The vulnerability affects Ignition SCADA applications where Python scripting is utilized for automation purposes. The vulnerability arises from the absence of proper security controls that restrict which Python libraries can be imported and executed within the scripting environment. The core issu...
CVE-2025-13911
Ignition by Inductive Automation, when installed with default OS service account settings, may expose the host system to an elevated code execution risk via the gateway backup restore functionality. An authenticated user with Gateway Administrator privileges can import a malicious gateway backup...
CVE-2025-13911
CVE-2025-13911 affects Inductive Automation Ignition SCADA, where Python scripting is used for automation. The root cause is insufficient controls on which Python libraries can be imported/executed within the scripting environment, paired with an Ignition service account that has system-level Win...
CVE-2025-13911 Inductive Automation Ignition Execution with Unnecessary Privileges
Ignition by Inductive Automation, when installed with default OS service account settings, may expose the host system to an elevated code execution risk via the gateway backup restore functionality. An authenticated user with Gateway Administrator privileges can import a malicious gateway backup...
CVE-2025-13911 Inductive Automation Ignition Execution with Unnecessary Privileges
Ignition by Inductive Automation, when installed with default OS service account settings, may expose the host system to an elevated code execution risk via the gateway backup restore functionality. An authenticated user with Gateway Administrator privileges can import a malicious gateway backup...
PT-2025-52333
Name of the Vulnerable Software and Affected Versions Ignition SCADA applications affected versions not specified Description The issue concerns Ignition SCADA applications utilizing Python scripting for automation. A lack of security controls regarding Python library imports and execution allows...
EUVD-2019-10284
Malware in sbrugna...