CloudRecon

CloudRecon 从证书中寻找资产！扫描网络！ 在DEFCON 31上展示的工具 作者 Gunnar Andrews @G0LDENinfosec Jason Haddix @Jhaddix 安装 你必须启用CGO，并且可能需要安装gcc才能运行CloudRecon sudo apt install gcc go install github.com/g0ldencybersec/CloudRecon@latest 注意： 别忘了在安装之前设置你的GOPATH。 描述 CloudRecon CloudRecon是一套工具，供红队人员和漏洞猎人用于在行动和搜索中发现临时和开发资产。...

cipherscan

CipherScan CipherScan prueba el orden de los cifrados SSL/TLS en un objetivo dado, para todas las versiones principales de SSL y TLS. También extrae información de certificados, opciones TLS, OCSP stapling y más. CipherScan es un envoltorio sobre la línea de comandos openssl sclient. CipherScan...

cipherscan

CipherScan Cipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl sclient command line. Cipherscan is meant to ru...

sublert

/ / / / / / / / \ / / / / / / / / / / / // / // / / / / / / //,/.//// / Author: Yassine Aboukir Version: 1.4.7 What's this about? Sublert is a security and reconnaissance tool that was written in Python to leverage certificate transparency for the sole purpose of monitoring new subdomains...

sublert

/ / / / / / / / \ / / / / / / / / / / / // / // / / / / / / //,/.//// / Autor: Yassine Aboukir Versión: 1.4.7 ¿De qué se trata? Sublert es una herramienta de seguridad y reconocimiento escrita en Python que aprovecha la transparencia de certificados con el único propósito de monitorear nuevos...

CVE-2016-8610-PoC

CVE-2016-8610 PoC CVE-2016-8610 Alerta de Muerte SSL PoC Uso: python ssl-death-alert.py DOMINIO/IP PUERTO VERSIÓN-PROTOCOLOSSLv3, TLS1.0, TLS1.1, TLS1.2 NÚMERO-DE-ALERTAS1000 HILOS50 python ssl-death-alert.py test.tdl 443 TLS1.2 1000 50 Más información: http://security.360.cn/cve/CVE-2016-8610/...

ritm

Ruby In The Middle HTTP/HTTPS interception proxy Ruby in the middle RITM is an HTTP/HTTPS interception proxy with on-the-fly certificate generation and signing, which leaves the user with the full power of the Ruby language to intercept and even modify requests and responses as she pleases...

wordpress-cve-2024-10924-pentest

WordPress CVE-2024-10924 Informe de Pruebas de Penetración Vulnerabilidad de Bypass de 2FA en el Plugin Really Simple SSL 📋 Tabla de Contenidos Resumen Ejecutivo Información del Objetivo Metodología Cronología Fase de Reconocimiento Análisis de Vulnerabilidades Flujo de Ataque Explotación...

censys-subdomain-finder

Censys subdomain finder Important note : As of late 2024, Censys does not provide API access to free accounts anymore. This is a tool to enumerate subdomains using the Certificate Transparency logs stored in Censys Search. It should return any subdomain who has ever been issued a SSL certificate ...

CVE-2026-86101

An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access only to the Access Portal to obtain unauthorized Mobile VPN with SSL access through a specially crafted request...

kubolt

Wat? Kubolt is simple utility for scanning public unauthinticated kubernetes clusters and run commands inside containers Why? Sometimes, the kubelet port 10250 is open to unauthorized access and makes it possible to run commands inside the containers using getrun function from kubelet: // getRun...

CredSniper

CredSniper Resumen Beneficios Uso básico Instalación Capturas de pantalla Módulo Gmail Mantenedor Contribuciones Resumen Lanza fácilmente un nuevo sitio de phishing completamente presentado con SSL y captura credenciales junto con tokens de 2FA usando CredSniper. La API proporciona acceso seguro ...

SpookySSLTools

Este repositorio no tiene un README...

CVE-2026-86101

A remote, authenticated SAML user can exploit an improper authorization vulnerability in the WatchGuard Fireware OS SAML login process. By sending a specially crafted request, an attacker with legitimate access only to the Access Portal can obtain unauthorized Mobile VPN with SSL access . No spec...

csaf

The Cyber Security Awareness Framework CSAF is a structured approach aimed at enhancing cybersecurity awareness and understanding among individuals, organizations, and communities. It provides guidance for the development of effective cybersecurity awareness programs, covering key areas such as...

htrace.sh

Description htrace.sh is a shell script for http/https troubleshooting and profiling. It's also a simple wrapper around several open source security tools. For a more detailed understanding of htrace.sh, its parameters, functions and how it all works, run htrace.sh --examples or see the Wiki...

xortool

xortool.py A tool to do some xor analysis: guess the key length based on count of equal chars guess the key base on knowledge of most frequent char Notice: xortool is now only running on Python 3. The old Python 2 version is accessible at the py2 branch. The pip package has been updated...

toxssin

toxssin Purpose toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting XSS vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool...

CVE-2019-11510-poc

CVE-2019-11510-poc Pulse Secure SSL VPN Lectura de archivos antes de autenticación Referencia 1. https://hackerone.com/reports/591295 2. https://github.com/projectzeroindia/CVE-2019-11510/blob/master/CVE-2019-11510.sh 3...

OSINT-SPY

OSINT-SPY Búsqueda usando OSINT Inteligencia de Fuentes Abiertas Realiza un escaneo OSINT en correo electrónico/dominio/dirección IP/organización usando OSINT-SPY. Puede ser utilizado por mineros de datos, investigadores de seguridad informática, testers de penetración e investigadores de...