csaf

The Cyber Security Awareness Framework CSAF is a structured approach aimed at enhancing cybersecurity awareness and understanding among individuals, organizations, and communities. It provides guidance for the development of effective cybersecurity awareness programs, covering key areas such as...

toxssin

toxssin Purpose toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting XSS vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool...

CloudRecon

CloudRecon ¡Encuentra activos de certificados! ¡Escanea la web! Herramienta presentada en @DEFCON 31 POR Gunnar Andrews @G0LDENinfosec Jason Haddix @Jhaddix Instalación Debes tener CGO habilitado, y puede que necesites instalar gcc para ejecutar CloudRecon sudo apt install gcc go install...

zeek-asyncrat-detector

A Zeek Based AsyncRAT Malware Detector Malware often hides communications with its command and control C2 server over HTTPS. The encryption in HTTPS usually conceals the compromise long enough for the malware to accomplish its goal. This makes detecting malware that uses HTTPS challenging, but on...

webscreenshot

webscreenshot Descripción Un script sencillo para capturar pantallas de una lista de sitios web, basado en el script url-to-image de PhantomJS. Características Integración del 'renderizado diferido' de url-to-image para recursos AJAX Funciona completamente en sistemas Windows y Linux Soporte de...

zeek-quasarrat-detector

A Zeek Based QuasarRAT Malware Detector Malware often hides communications with its command and control C2 server over HTTPS. The encryption in HTTPS usually conceals the compromise long enough for the malware to accomplish its goal. This makes detecting malware that uses HTTPS challenging, but...

openssl

Welcome to the OpenSSL Project !openssl logowww.openssl.org !github actions ci badgegithub actions ci OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations ar...

FinalRecon

Twitter - Telegram - thewhiteh4t's Blog FinalRecon is an all in one automatic web reconnaissance tool written in python. Goal of FinalRecon is to provide an overview of the target in a short amount of time while maintaining the accuracy of results. Instead of executing several tools one after...

CVE-2024-40898

CVE-2024-40898 Este script de Python verifica la presencia de CVE-2024-40898, una vulnerabilidad crítica en Apache HTTP Server que puede permitir la omisión de la verificación de certificados SSL/TLS bajo ciertas configuraciones incorrectas. Inicia una conexión SSL al servidor objetivo y envía un...

Meterpreter_Paranoid_Mode-SSL

MeterpreterParanoidMode v1.4 - Conexiones SSL/TLS Versión publicada: v1.4 Estable Autor: pedro ubuntu r00t-3xp10it Distribuciones soportadas: Linux Kali, Mint, Ubuntu Suspicious-Shell-Activity SSA RedTeam desarrollado @2017 Descripción: MeterpreterParanoidMode.sh permite a los usuarios asegurar s...

censys-subdomain-finder

Censys subdomain finder Important note : As of late 2024, Censys does not provide API access to free accounts anymore. This is a tool to enumerate subdomains using the Certificate Transparency logs stored in Censys Search. It should return any subdomain who has ever been issued a SSL certificate ...

loboguara

Lobo Guará - Cyber Threat Intelligence Platform Lobo Guará is a platform aimed at cybersecurity professionals, with various features focused on Cyber Threat Intelligence CTI. It offers tools that make it easier to identify threats, monitor data leaks, analyze suspicious domains and URLs, and much...

moniorg

moniorg Description By looking through CT logs an attacker can gather a lot of information about organization's infrastructure i.e. internal domains,email addresses in a completly passive manner. moniorg leverage certificate transparency logs to monitor for newly issued domains based on...

CloudFlair

CloudFlair Nota importante: A partir de finales de 2024, Censys ya no proporciona acceso a la API para cuentas gratuitas. Esto significa que CloudFlair ya no funciona con cuentas gratuitas de Censys. CloudFlair es una herramienta para encontrar servidores de origen de sitios web protegidos por...

openssl-heartbleed-fix

openssl-heartbleed-fix Script de corrección de OpenSSL Heartbleed CVE-2014-0160 Sammy Fung [email protected] El error OpenSSL Heartbleed CVE-2014-0160 http://www.us-cert.gov/ncas/alerts/TA14-098A ha sido descubierto por profesionales de seguridad de redes, y muchos sistemas que usan ciertas...

NcStatusCheck

NcStatusCheck Monitoreo centralizado para múltiples instancias de Nextcloud NcStatusCheck es una herramienta de monitoreo que te permite seguir el estado de múltiples servidores Nextcloud desde una única interfaz web: versiones de Nextcloud y PHP frente a su umbral de seguridad, fin de vida de la...

Invoke-SelfSignedWebRequest

Invoke-SelfSignedWebRequest For InfoSec work, using HTTPS is an incredibly handy mechanism for C2 and maneuver within target network space. Further PowerShell is an amazing productivity tool that can help an operator achieve dynamic results. A natural next conclusion is to combine the C2 channel...

ssl-certificate-expiry-date-checker

sslcertificateexpirydatechecker Descubre qué certificado caducará y necesita renovarse. Obtén diversa información del resultado del escaneo fecha de caducidad, emisor, firma, número de serie... Si eres el administrador de certificados SSL en tu organización, recopila la lista de tus compañeros,...

mkchain

mkchain Herramienta de código abierto para ayudarte a construir una cadena de certificados SSL válida. Descripción • Cómo usar • Parámetros • Cómo funciona • Requisitos • Otros • Licencia Descripción Es una herramienta de código abierto para ayudarte a construir una cadena de certificados SSL...

unwaf

Unwaf Unwaf is a Go tool designed to help identify WAF bypasses using passive techniques. It automates the process of discovering the real origin IP behind a WAF/CDN by combining multiple discovery methods and verifying candidates through HTML similarity comparison, SSL certificate fingerprinting...