AcuAutomate

AcuAutomate AcuAutomate 是一个非官方的 Acunetix CLI 工具，用于简化大规模目标上的自动化渗透测试和漏洞挖掘。它在大型渗透测试中非常有用，能够同时轻松启动或停止多个 Acunetix 扫描。此外，其多功能性使其能够无缝集成到枚举包装器或单行命令中，通过管道功能提供高效的控制。 安装 git clone https://github.com/danialhalo/AcuAutomate.git cd AcuAutomate chmod +x AcuAutomate.py pip3 install -r requirements.txt 配置...

FinalRecon

Twitter - Telegram - thewhiteh4t's Blog FinalRecon is an all in one automatic web reconnaissance tool written in python. Goal of FinalRecon is to provide an overview of the target in a short amount of time while maintaining the accuracy of results. Instead of executing several tools one after...

Crips

Crips IP Tools Esta herramienta es una colección de herramientas IP en línea que se pueden usar para obtener rápidamente información sobre direcciones IP, páginas web y registros DNS. Menú Consulta Whois Traceroute Consulta DNS Consulta DNS inversa Consulta GeoIP Escaneo de puertos Consulta IP...

Vayne-RaT

Vayne-RaT es una herramienta de administración remota gratuita y de código abierto programada en C. Características: Multihilo Shell CMD Administrador de archivos Descarga y Subida Escritorio remoto Recuperación de contraseñas Generador de ensamblados Cifrador en tiempo de escaneo FUD Requisitos...

WebLogic_CNVD_C_2019_48814

WebLogicCNVDC201948814 WebLogic CNVD-C-201948814 CVE-2017-10271 Escáner por 7kbstorm...

frida-ios-hook

Frida iOS hook 📍 A tool that helps you can easy using frida. It support script for trace classes, functions, and modify the return values of methods on iOS platform. 👉 For Android platform: frida-android-hook 👉 For Intercept Api was encrypted on iOS application: frida-ios-intercept-api Env OS...

gattacker

A Node.js package for BLE Bluetooth Low Energy Man-in-the-Middle & more. Prerequisites see: https://github.com/sandeepmistry/noble https://github.com/sandeepmistry/bleno Install npm install gattacker Usage Configure Running both components Set up variables in config.env: NOBLEHCIDEVICEID : noble...

CVE-2025-0133-exploit

Escaneo de CVE-2025-0133 Un script escrito en Python para comprobar la existencia de una vulnerabilidad de Cross-Site Scripting reflejado CVE-2025-0133 que se presenta en Palo Alto. El archivo getconfig.esp se detecta y se prueba para XSS usando el script proporcionado. Uso:...

Recon-Scan

Recon-Scan ReconScan is a open-source passive recon scanner with a FastAPI backend, async worker pipeline, and a single-page frontend. You can check the deployed site at https://recon-scan.vercel.app/ The point is fast signal: run a scan, get module-by-module findings, and get an AI summary that...

CVE-2024-24919

Comprobador CVE-2024-24919 Un script bash sencillo para comprobar la vulnerabilidad CVE-2024-24919. Instalación Clona el repositorio: git clone https://github.com/satriarizka/CVE-2024-24919.git cd CVE-2024-24919 chmod +x CVE-2024-24919-scan.sh Uso ./CVE-2024-24919-scan.sh -l ips.txt Consulta HUNT...

chameleon

19 Customizable honeypots for monitoring network traffic, bots activities, and username\password credentials DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap If you want to implement the honeypots in your project,...

citrix-netscaler-triage

Citrix NetScaler Triage Este repositorio contiene scripts de triaje para dispositivos Citrix NetScaler: iocitrix.py -- un script de Dissect para el triaje de una imagen/objetivo de Citrix NetScaler. scan-citrix-netscaler-version.py -- Escanea y determina la versión de un dispositivo NetScaler a...

OSINT-SPY

OSINT-SPY Búsqueda usando OSINT Inteligencia de Fuentes Abiertas Realiza un escaneo OSINT en correo electrónico/dominio/dirección IP/organización usando OSINT-SPY. Puede ser utilizado por mineros de datos, investigadores de seguridad informática, testers de penetración e investigadores de...

Imperius

Imperius Haz visible nuevamente un rootkit LKM. Implica obtener la dirección de la función "moduleshow" de un rootkit, por ejemplo el rootkit diamorphine, y utilizarla para llamarla, añadiéndola de nuevo a lsmod, haciendo posible eliminar un rootkit LKM. Podemos obtener la dirección de la función...

go-scan-spring

go-scan-spring Escáner de vulnerabilidades para encontrar vulnerabilidades Spring4Shell CVE-2022-22965 Para más información: https://www.fracturelabs.com/posts/effective-spring4shell-scanning-exploitation/ Compilación /opt $ git clone https://github.com/fracturelabs/go-scan-spring.git /opt $ cd...

recox

Recox v2.0 RecoX is an incredibly versatile and powerful tool that is specifically designed to aid in the identification and classification of vulnerabilities within web applications. The script is able to detect vulnerabilities that are not typically included in the OWASP top ten vulnerabilities...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

spring4shell-scan

spring4shell-scan 一个完全自动化、可靠、精确的扫描器，用于发现 Spring4Shell 和 Spring Cloud RCE 漏洞 功能特性 支持 URL 列表。 针对超过10种新的Spring4Shell Payload进行模糊测试（先前工具仅使用1-2种变体）。 对HTTP GET和POST方法进行模糊测试。 发现漏洞时自动验证。 随机且非侵入性 Payload。 WAF绕过Payload。 描述 Spring4Shell RCE是一个关键漏洞，FullHunt自其发布以来一直在研究。我们与客户合作，扫描其环境中的Spring4Shell和Spring Cloud...

pidrila

PIDRILA Current Release: v0.1.0 2020.11.08 Overview PIDRILA : P ython I nteractive D eepweb-oriented R apid I ntelligent L ink A nalyzer is really fast async web path scanner prototype developed by BrightSearch team for all ethical netstalkers. Installation & Usage git clone...

loboguara

Lobo Guará - Cyber Threat Intelligence Platform Lobo Guará is a platform aimed at cybersecurity professionals, with various features focused on Cyber Threat Intelligence CTI. It offers tools that make it easier to identify threats, monitor data leaks, analyze suspicious domains and URLs, and much...