openrisk

openrisk openrisk is an experimental tool which reads nuclei output text, markdown, and JSON and generates a risk score for the host using OpenAI's GPT-4o model. It is intended, for now, to work against a single target at a time. NOTE : This is an experimental program released by the...

hacksguard

Hacksguard 0.2 - Herramienta TUI de Análisis de Malware Ultrarrápida 🛡️ Hacksguard es una herramienta de análisis estático de interfaz de terminal TUI ultrarrápida y multi-hilo diseñada para analistas de SOC, cazadores de amenazas e ingenieros inversos. Construida completamente en Rust, proporcion...

PowerShellProfiler

PowerShellProfiler This project code is from https://github.com/pan-unit42/publictools/tree/master/powershellprofiler Introductation PowerShellProfiler.py is a script for statically analyzing PowerShell scripts by de-obfuscating and normalizing the content which is then profiled for behavioral...

frogy2.0

Orbis - Attack Surface Intelligence Full-Spectrum Attack Surface Intelligence Orbis automatically maps your organisation's entire internet-facing attack surface, subdomains, open ports, web applications, cloud infrastructure, TLS certificates, email posture, exposed secrets, login panels, and mor...

c-sentinel

C-Sentinel Observabilidad Semántica para Sistemas UNIX Un probe de sistema ligero y portátil escrito en C que captura "huellas del sistema" para análisis asistido por IA de riesgos no obvios. Incluye integración con auditd, puntuación de riesgos explicable y un panel web en vivo con autenticación...

Ledger

Ledger — Operational Change Tracker Aggressor Script Ledger is a Cobalt Strike aggressor script that tracks every operational change made during an engagement. Every service you enable, firewall rule you punch through, account you create, or registry key you touch gets logged with a risk score,...

Internet-Scanner

Escáner de Red Local Una interfaz gráfica Tkinter que escanea una red IPv4 local ARP + sondeo con nmap, muestra dispositivos, permite ejecutar escaneos de puertos completos y exportar resultados. Resumen rápido Escaneo ARP para descubrir dispositivos en la LAN. Sondeos mejorados de nmap para nomb...

cve-mcp-server

🛡️ CVE MCP Server AI-powered security intelligence at your fingertips — 28 tools + a one-calltriagecve orchestrator, 24 data sources, one protocol. A production-grade Model Context Protocol MCP server that turns Claude into a full-spectrum security analyst. Instead of juggling 15+ browser tabs...

leakish

Leakish Browser privacy-leak detector — eight detection modules, risk scoring, and per-account history, all in your browser. Built withVerdent — an agentic coding assistant. Every detection module, the analytics dashboard, the API-key auth flow, the bilingual UI and the Kubernetes-ready Docker...

gp_netSecDSS

netSecDSS Sistema de Soporte a la Decisión para la Evaluación de Riesgos de Seguridad en Redes y Sistemas en PYMEs Una plataforma de monitoreo de seguridad de red basada en Docker, construida para pequeñas y medianas empresas que no pueden permitirse herramientas SIEM comerciales. Simula una red...

fyp

A desktop-based vulnerability assessment tool that enables security teams to scan, identify, exploit, and report vulnerabilities across web applications and networks. Overview A vulnerability assessment platform built for security administrators and analysts. It automates target scanning,...

scada-scanner

SCADA Scanner and Fingerprinter Overview A high-performance, asynchronous SCADA/ICS scanner for identifying and fingerprinting industrial control systems across networks. Detects vulnerabilities, identifies vendors/products, and generates comprehensive risk reports. WARNING: For authorized securi...

jeopardize

Introducción La herramienta Jeopardize está desarrollada para proporcionar capacidades básicas de inteligencia y respuesta contra amenazas de dominios de phishing al mínimo costo posible. Detecta candidatos a dominios de phishing registrados typosquatting, homógrafos, etc., los analiza y les asig...

Exploit-Mapper

Exploit Mapper Una plataforma integral de gestión de vulnerabilidades que analiza informes de escaneo de seguridad, enriquece datos de vulnerabilidades con inteligencia de exploits y proporciona puntuación de riesgo procesable para priorizar la remediación. Características Importación Multi-Forma...

vulnseeker

🔍 VulnSeeker Smart CVE search with exploitability context a...

AutoVAPT

█████╗ ██╗ ██╗████████╗ ██████╗ ██╗ ██╗ █████╗ ██████╗...

project_hydra

Project HYDRA Automated vulnerability discovery & exploitat...

eip-search

Exploit Intel Platform CLI Search Tool Package/command: eip-...

search-cve

Intelligence Engine A lean Python CLI that aggregates CVE i...

PT-2026-39925

Due to missing authorization check in SAP Strategic Enterprise Management Scorecard Wizard in Business Server Pages, an authenticated attacker could access information that they are otherwise unauthorized to view. This vulnerability also enables the attacker to change the default settings and...