640 matches found
CVE-2021-3441-check
HP CVE Check A python threat intelligence tool for automating IoC discovery for CVE-2021-3441. Easily search targets for indicators of compromnise //| ////|| CVE-2021-3441 Check |=== |----| || | | οΏ½| || Author: Tyler Butler || οΏ½| || @tbutler0x90 | ||/.οΏ½---.|| | || |-||/||-. | |οΏ½ |||==HP===||||/...
degas
Degas DGA-generated domain detection using deep learning models Running I'm currently using Conda Anaconda/Miniconda for development, but you should be able to use Pipenv or virtualenv as well using the included requirements.txt. conda: conda env create -f environment.yml conda activate degas...
Threat-Intelligence-Hunter
TIH is an intelligence tool that helps you in searching for IOCs across multiple openly available security feeds and some well known APIs. The idea behind the tool is to facilitate searching and storing of frequently added IOCs for creating your own set of indicators. Threat-Intelligence-Hunter...
dcshadow
!WARNING DO NOT RUN IN PRODUCTION. This is meant for lab testing, for blue teams to work on identifying IoCs, event types, and behavior. Also, this tool is provided as-is. No support is planned apart from standard review on pull requests you may want to create. Don't run this from a Windows host...
threatmap
threatmap Static IaC threat modeler that parses Terraform, CloudFormation, and Kubernetes manifests and produces structured threat model reports using STRIDE, MITRE ATT&CK, or PASTA frameworks. No network calls, no cloud credentials, fully offline. Runs as a CLI, REST API, or containerized servic...
Google-api-key-scanner
Overview A Python tool for testing Google Maps API keys against 21 different Google API endpoints to check which services are exposed and vulnerable. !IMPORTANT π₯ For a complete walkthrough of the tool, watch the demo video here: https://youtu.be/3KMUnLdlOSE. The feature shown below starts at...
B0tN3tBrut3
B0tN3tBrut3 Brute force tool for telnet and ssh, programmed in python with Zmap Usage: Read ReadmeTelnet.md & ReadmeSsh.md...
compaXSS
CompaXSS Bypass XSS Reflected Cross-site scripting ======= Example: python compaxss.py --url https://support.snapchat.com/login?next=-run Developers Jose Pino - @jofpin Juan Eljach - @juaneljach...
CVE-2025-23419
π TLS Session Reuse Exploit Tester $ BY XIT A Python-based tool to test potential TLS session reuse vulnerabilities that may allow authentication bypass in misconfigured servers. β οΈ Disclaimer This tool is for educational and authorized security testing purposes only. Do NOT use it on systems...
Re2Pcap
Re2Pcap: Create PCAP file from raw HTTP request or response in seconds Re2Pcap is abbreviation for Request2Pcap and Response2Pcap. Community users can quickly create PCAP file using Re2Pcap and test them against Snort rules. Re2Pcap allow you to quickly create PCAP file for raw HTTP request shown...
MalScan
MalScan MalScan is a simple PE File Heuristics Scanners written in python that you can use to quickly analyze a PE file and find out whether anything suspicious exists. It is a simple tool so doesn't offers much fancy features. You are free to extend it or do whatever you want with it. Things...
CVE-2024-52011
cve-id β‘ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...
FortiOS-Credentials-Disclosure
FortiOS-Credentials-Disclosure CVE-2018-13379 Exploit Usage : python CVE-2018-13379.py list.txt...
indicator-intelligence
Indicator-Intelligence NOTE : You should definitely use it for legal activities. Please See; USAGEPOLICY.md LICENSE Description Finds related domains and IPv4 addresses to do threat intelligence after Indicator-Intelligence collects static files ScreenShot Done Releated domains, IPs collect. HTTP...
web-server-audit_CVE-2026-42945
webserveraudit Don't ask if you're vulnerable. Ask if you're exploitable. A single-file Python tool that audits nginx and Apache against known CVEs by checking both the installed version and whether the vulnerable code path is actually reachable through your configuration. Why? Most CVE scanners...
LeakSearch
LeakSearch LeakSearch is a simple tool to search and parse plain text passwords using ProxyNova COMB Combination Of Many Breaches over the Internet. You can define a custom proxy and you can also use your own password file, to search using different keywords: such as user, domain or password. In...
BabySploit
Made For Kali Linux. No Support For Other Distros If There Are Problems. Tested and Working on MacOS for most Tools. Developed by @maxbridgland Donate BabySploit is a penetration testing toolkit aimed at making it easy to learn how to use bigger, more complicated frameworks like Metasploit. With ...
CVE-2017-8056
CVE-2017-8056 CVE-2017-8056 XML-RPC Exploit DoS β FOR LINUX : sudo apt-get update sudo apt-get install python3 sudp apt-get install python3-pip pip3 install colorama fakeuseragent pystyle 𧨠RUN TOOL : python3 main.py β FOR WINDOWS : Download & Install Python3 :...
ntdsdotsqlite
NTDS.Sqlite This software can be used either directly as a CLI utility or as a library to get an SQLite database from an NTDS.DIT one. Encrypted bits can be decrypted if the associated system hive is provided altogether. Installation python -m pip install ntdsdotsqlite Usage ntdsdotsqlite NTDS.DI...
mailMeta
A forensic tool to make analysis of email headers easy to aid in the quick discovery of the attacker. Table of Contents About mailMeta Installation Usage Linux Windows Demo Contributions Inspiration FAQ License About mailMeta What is mailMeta? mailMeta is a python based forensic tool which reads...