640 matches found
koppeling-p
koppeling-p Adaptive DLL hijacking / dynamic export forwarding - EAT preserve Overview This project is a limited, Python-only extension to the amazing project by Nick Landers @monoxgas, available here. Differences The only difference to the original project is that koppeling-p p stands for...
py_certificate_extractor
pycertificateextractor Sometimes it necessary to extract certificate information from the digital signed file. Use this tool when that occurs. you can easily finish Let me know if there are any changes required or additional features need it. Features Extract the certificate information and...
CVE-2026-61511
cve-id Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example...
jwtXploiter
jwtXploiter A tool to test security of JSON Web Tokens. Test a JWT against all known CVEs; Tamper with the token payload: changes claims and subclaims values. Exploit known vulnerable header claims kid, jku, x5u Verify a token Retrieve the public key of your target's ssl connection and try to use...
CVE-2026-12415-or-CVE-2026-12416.py
CVE-2026-12415-or-CVE-2026-12416.py CVE-2026-12415-or-CVE-2026-12416.py...
CVE-2021-3441-check
HP CVE Check A python threat intelligence tool for automating IoC discovery for CVE-2021-3441. Easily search targets for indicators of compromnise //| ////|| CVE-2021-3441 Check |=== |----| || | | �| || Author: Tyler Butler || �| || @tbutler0x90 | ||/.�---.|| | || |-||/||-. | |� |||==HP===||||/...
degas
Degas DGA-generated domain detection using deep learning models Running I'm currently using Conda Anaconda/Miniconda for development, but you should be able to use Pipenv or virtualenv as well using the included requirements.txt. conda: conda env create -f environment.yml conda activate degas...
Threat-Intelligence-Hunter
TIH is an intelligence tool that helps you in searching for IOCs across multiple openly available security feeds and some well known APIs. The idea behind the tool is to facilitate searching and storing of frequently added IOCs for creating your own set of indicators. Threat-Intelligence-Hunter...
dcshadow
!WARNING DO NOT RUN IN PRODUCTION. This is meant for lab testing, for blue teams to work on identifying IoCs, event types, and behavior. Also, this tool is provided as-is. No support is planned apart from standard review on pull requests you may want to create. Don't run this from a Windows host...
threatmap
threatmap Static IaC threat modeler that parses Terraform, CloudFormation, and Kubernetes manifests and produces structured threat model reports using STRIDE, MITRE ATT&CK, or PASTA frameworks. No network calls, no cloud credentials, fully offline. Runs as a CLI, REST API, or containerized servic...
Google-api-key-scanner
Overview A Python tool for testing Google Maps API keys against 21 different Google API endpoints to check which services are exposed and vulnerable. !IMPORTANT 🎥 For a complete walkthrough of the tool, watch the demo video here: https://youtu.be/3KMUnLdlOSE. The feature shown below starts at...
B0tN3tBrut3
B0tN3tBrut3 Brute force tool for telnet and ssh, programmed in python with Zmap Usage: Read ReadmeTelnet.md & ReadmeSsh.md...
compaXSS
CompaXSS Bypass XSS Reflected Cross-site scripting ======= Example: python compaxss.py --url https://support.snapchat.com/login?next=-run Developers Jose Pino - @jofpin Juan Eljach - @juaneljach...
CVE-2025-23419
🔐 TLS Session Reuse Exploit Tester $ BY XIT A Python-based tool to test potential TLS session reuse vulnerabilities that may allow authentication bypass in misconfigured servers. ⚠️ Disclaimer This tool is for educational and authorized security testing purposes only. Do NOT use it on systems...
Re2Pcap
Re2Pcap: Create PCAP file from raw HTTP request or response in seconds Re2Pcap is abbreviation for Request2Pcap and Response2Pcap. Community users can quickly create PCAP file using Re2Pcap and test them against Snort rules. Re2Pcap allow you to quickly create PCAP file for raw HTTP request shown...
MalScan
MalScan MalScan is a simple PE File Heuristics Scanners written in python that you can use to quickly analyze a PE file and find out whether anything suspicious exists. It is a simple tool so doesn't offers much fancy features. You are free to extend it or do whatever you want with it. Things...
Kunyu
Kunyu坤舆 - More efficient corporate asset collection English | 中文文档 0x00 Introduce Tool introduction Kunyu kunyu, whose name is taken from , is actually a professional subject related to geographic information, which counts the geographic information of the sea, land, and sky. The same applies to...
CVE-2024-52011
cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...
FortiOS-Credentials-Disclosure
FortiOS-Credentials-Disclosure CVE-2018-13379 Exploit Usage : python CVE-2018-13379.py list.txt...
indicator-intelligence
Indicator-Intelligence NOTE : You should definitely use it for legal activities. Please See; USAGEPOLICY.md LICENSE Description Finds related domains and IPv4 addresses to do threat intelligence after Indicator-Intelligence collects static files ScreenShot Done Releated domains, IPs collect. HTTP...