openrisk

openrisk openrisk is an experimental tool which reads nuclei output text, markdown, and JSON and generates a risk score for the host using OpenAI's GPT-4o model. It is intended, for now, to work against a single target at a time. NOTE : This is an experimental program released by the...

frogy2.0

Orbis - Attack Surface Intelligence Full-Spectrum Attack Surface Intelligence Orbis automatically maps your organisation's entire internet-facing attack surface, subdomains, open ports, web applications, cloud infrastructure, TLS certificates, email posture, exposed secrets, login panels, and mor...

c-sentinel

C-Sentinel Observabilidad Semántica para Sistemas UNIX Un probe de sistema ligero y portátil escrito en C que captura "huellas del sistema" para análisis asistido por IA de riesgos no obvios. Incluye integración con auditd, puntuación de riesgos explicable y un panel web en vivo con autenticación...

cve-mcp-server

🛡️ CVE MCP Server AI-powered security intelligence at your fingertips — 28 tools + a one-calltriagecve orchestrator, 24 data sources, one protocol. A production-grade Model Context Protocol MCP server that turns Claude into a full-spectrum security analyst. Instead of juggling 15+ browser tabs...

Ledger

Ledger — Operational Change Tracker Aggressor Script Ledger is a Cobalt Strike aggressor script that tracks every operational change made during an engagement. Every service you enable, firewall rule you punch through, account you create, or registry key you touch gets logged with a risk score,...

hacksguard

Hacksguard 0.2 - Herramienta TUI de Análisis de Malware Ultrarrápida 🛡️ Hacksguard es una herramienta de análisis estático de interfaz de terminal TUI ultrarrápida y multi-hilo diseñada para analistas de SOC, cazadores de amenazas e ingenieros inversos. Construida completamente en Rust, proporcion...

Internet-Scanner

Escáner de Red Local Una interfaz gráfica Tkinter que escanea una red IPv4 local ARP + sondeo con nmap, muestra dispositivos, permite ejecutar escaneos de puertos completos y exportar resultados. Resumen rápido Escaneo ARP para descubrir dispositivos en la LAN. Sondeos mejorados de nmap para nomb...

leakish

Leakish Browser privacy-leak detector — eight detection modules, risk scoring, and per-account history, all in your browser. Built withVerdent — an agentic coding assistant. Every detection module, the analytics dashboard, the API-key auth flow, the bilingual UI and the Kubernetes-ready Docker...

PowerShellProfiler

PowerShellProfiler El código de este proyecto proviene de https://github.com/pan-unit42/publictools/tree/master/powershellprofiler Introducción PowerShellProfiler.py es un script para analizar estáticamente scripts de PowerShell mediante la desofuscación y normalización del contenido, que luego s...

fyp

A desktop-based vulnerability assessment tool that enables security teams to scan, identify, exploit, and report vulnerabilities across web applications and networks. Overview A vulnerability assessment platform built for security administrators and analysts. It automates target scanning,...

scada-scanner

SCADA Scanner and Fingerprinter Overview A high-performance, asynchronous SCADA/ICS scanner for identifying and fingerprinting industrial control systems across networks. Detects vulnerabilities, identifies vendors/products, and generates comprehensive risk reports. WARNING: For authorized securi...

jeopardize

介绍 Jeopardize 工具旨在以最低成本提供针对网络钓鱼域名的基础威胁情报与响应能力。它能检测已注册的网络钓鱼域名候选（如形近域名、同形异义字攻击等），对其进行分析并分配风险评分。之后，它会向这些钓鱼网站上的登录表单发送看起来合法的凭证。 为什么？ 设想这个场景：攻击者注册一个钓鱼域名 acmebnak.com（acmebank 的形近域名），复制原 acmebank.com 的登录表单到该域名，并通过赞助推文推广。这个广告和域名很可能在次日被标记为钓鱼，但攻击者已经窃取了用户的凭证。此时再将其下线已无助于受影响的用户。Jeopardize...

Exploit-Mapper

Exploit Mapper Una plataforma integral de gestión de vulnerabilidades que analiza informes de escaneo de seguridad, enriquece datos de vulnerabilidades con inteligencia de exploits y proporciona puntuación de riesgo procesable para priorizar la remediación. Características Importación Multi-Forma...

gp_netSecDSS

netSecDSS Sistema de Soporte a la Decisión para la Evaluación de Riesgos de Seguridad en Redes y Sistemas en PYMEs Una plataforma de monitoreo de seguridad de red basada en Docker, construida para pequeñas y medianas empresas que no pueden permitirse herramientas SIEM comerciales. Simula una red...

vulnseeker

🔍 VulnSeeker Smart CVE search with exploitability context a...

AutoVAPT

█████╗ ██╗ ██╗████████╗ ██████╗ ██╗ ██╗ █████╗ ██████╗...

project_hydra

Project HYDRA Automated vulnerability discovery & exploitat...

eip-search

Exploit Intel Platform CLI Search Tool Package/command: eip-...

search-cve

Intelligence Engine A lean Python CLI that aggregates CVE i...

PT-2026-39925

Due to missing authorization check in SAP Strategic Enterprise Management Scorecard Wizard in Business Server Pages, an authenticated attacker could access information that they are otherwise unauthorized to view. This vulnerability also enables the attacker to change the default settings and...