awesome-hacker-search-engines

Awesome Hacker Search Engines A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more General • Servers • Vulnerabilities • Exploits • Attack surface • Code • Email addresses • Domains • URLs • DNS •...

heroku-CVE-2013-0269

heroku-CVE-2013-0269 Inspectez toutes vos applications heroku pour voir si elles exécutent une version vulnérable de JSON Contexte Une vulnérabilité de sécurité a été découverte dans le gem JSON de Ruby. C'est la cause racine du problème d'injection MySQL récemment annoncé dans Rails. Une nouvell...

ltm

ltm Machine-history debugger for Linux. Records process, file, network, memory, and block I/O via eBPF, stores metadata in SQLite, and answers timeline / diff / plain-English / SQL questions about what happened on the box. ⚠️ Tracepoint-only capture today — recording currently uses tracepoint...

zmap

ZMap: The Internet Scanner ZMap is a fast stateless single packet network scanner designed for Internet-wide network surveys. On a typical desktop computer with a gigabit Ethernet connection, ZMap is capable of scanning the entire public IPv4 address space on a single port in under 45 minutes. Fo...

osquery

osquery osquery est un framework d'instrumentation, de surveillance et d'analyse de système d'exploitation basé sur SQL. Disponible pour Linux, macOS et Windows. Informations et ressources Page d'accueil : osquery.io Téléchargements : osquery.io/downloads Documentation : ReadTheDocs Stack Overflo...

Azure-Sentinel

Microsoft Sentinel and Microsoft 365 Defender Welcome to the unified Microsoft Sentinel and Microsoft 365 Defender repository! This repository contains out of the box detections, exploration queries, hunting queries, workbooks, playbooks and much more to help you get ramped up with Microsoft...

ACLight

ACLight A tool for advanced discovery of Privileged Accounts - including Shadow Admins. ACLight2 is the improved version of the tool. Shadow Admins Research The tool version 1 was published as part of the "Shadow Admins" research - more details on "Shadow Admins" are in the blog post:...

CVE-2026-59827

CVE-2026-59827: Небезопасная десериализация Metabase в нативных запросах H2 Уровень критичности: Критический CVSS 9.9 CVE: CVE-2026-59827 Уведомление: GHSA-w95f-x9v9-wv36 Сообщил: Matheus Gutierre @Gutierre0x80 Опубликовано: 30 июня 2026 г. Сводка по уязвимости Аутентифицированный пользователь с...

CVE-2025-57819-poc

CVE-2025-57819 — FreePBX SQLi non authentifiée → RCE Exploit one-shot pour l'injection SQL non authentifiée du Endpoint Manager de FreePBX CVE-2025-57819, chaînée en exécution de code à distance via la table cronjobs de FreePBX. Réservé aux tests de sécurité autorisés / CTF. Vulnérabilité Le...

mquery

mquery: Blazingly fast Yara queries for malware analysts Ever had trouble searching for malware samples? Mquery is an analyst-friendly web GUI to look through your digital warehouse. It can be used to search through terabytes of malware in a blink of an eye: Under the hood we use our UrsaDB, to...

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Hunting-Queries-Detection-Rules

KQL Sentinel & Defender queries KQL for Defender XDR, Microsoft Sentinel & other Microsoft Solutions The purpose of this repository is to share KQL queries that can be used by anyone and are understandable. These queries are intended to increase detection coverage through the logs of Microsoft...

redsun-bluehammer-undefend-detection-pack

RedSun, BlueHammer, UnDefend 및 CrossFamily 탐지 팩 중요: 이 저장소의 모든 코드와 탐지 로직은 AI로 생성되었습니다. 이 스크립트가 정확하거나, 완전하거나, 안전하거나, 어떤 환경에 적합하다는 보장은 없습니다. 이 스크립트 사용에 따른 모든 책임은 전적으로 사용자에게 있습니다. 저장소 작성자는 이 콘텐츠 사용으로 인해 발생하는 손상, 중단, 데이터 손실, 오탐, 미탐, 운영 영향 또는 기타 피해에 대해 책임을 지지 않습니다. 모든 스크립트는 실제 운영 환경에 배포하기 전에 자격을 갖춘 담당자...

sccmsqlclient

sccmsqlclient SCCM 데이터베이스 탐색 및 공격을 위한 전용 MSSQL 클라이언트입니다. 정찰 쿼리 관리 대상 클라이언트에서 PowerShell 스크립트 실행 비밀 정보 추출 설치 PIPX root@kitploit: $ pipx install git+https://github.com/synacktiv/sccmsqlclient/ PIP 저장소를 클론하고 의존성을 설치하여 설치할 수 있습니다. root@kitploit: $ git clone https://github.com/synacktiv/sccmsqlclient ...

100_days_of_kql_2026

100 Days of KQL 2026 Inititave Requirements: Create a GitHub account Create a repo called 100daysofkql Example: https://github.com/m4nbat/100daysofkql2026 Create a readme.md and add this line to your readme: 100DaysOfKQL2026 Master repo with instructions: https://github.com/m4nbat/100daysofkql202...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

Query-Hub

CQL-Hub | CrowdStrike SIEM & LogScale Queries Welcome to the CQL-Hub Backend Repository This repository powers cql-hub.com: A free, community-driven hub for CrowdStrike Falcon SIEM queries. All queries stored here are automatically published and made visible on the CQL-Hub website, making it easi...

cleanldap

CleanLdap BOF to perform stealthy LDAP queries over AD WS Arguments Just going to cut to the chase, here are the args and what they mean: root@kitploit: Z: DC Hostname "dc01.example.com" Z: LDAP query "objectClass=" Z: Comma separated list of LDAP attributes "samaccountname,distinguishedName,cn" ...

CVE-2019-14529

CVE-2019-14529 Множественная SQL-инъекция в проекте OpenEMR Уязвимая функция в файле: /openemr/interface/forms/eyemag/save.php Условия : любой авторизованный пользователь Уязвимые версии: 5.0.2, исправлено в версии 5.0.2. Описание Есть две функции: 1. "storePDF", с нефильтрованной переменной...

shodan-dorks

Shodan dorks Description: This GitHub repository provides a range of search queries, known as "dorks," for Shodan, a powerful tool used to search for Internet-connected devices. The dorks are designed to help security researchers discover potential vulnerabilities and configuration issues in...