CVE-2025-30208

CVE-2025-30208 POC CVE-2025-30208 pip install -r requirements.txt Features: -u specify url scan -r specify txt file scan...

Crawlector

Crawl e ctor Crawlector el nombre Crawlector es una combinación de Crawl er & Detector es un framework de caza de amenazas diseñado para escanear sitios web en busca de objetos maliciosos. Nota-1 : El framework se presentó por primera vez en la conferencia No Hat en Bérgamo, Italia, el 22 de...

yaralyzer

EL YARALIZADOR Inspecciona visualmente todas las coincidencias regex y sus primos más sexis y misteriosos, las coincidencias YARA encontradas en datos binarios y/o texto. Observa lo que sucede cuando fuerzas varias codificaciones de caracteres sobre esos bytes coincidentes. Con colores. Inicio...

CVE-2020-14179

CVE-2020-14179 Scanner Sample scan ./CVE-2020-14179.pl -u jira.atlassian.com OR ./CVE-2020-14179.pl -u https://jira.atlassian.com List scan ./CVE-2020-14179.pl -l list.txt Show Options ./CVE-2020-14179.pl How to install and use linux git clone https://github.com/c0brabaghdad1/CVE-2020-14179.git c...

pyscan

Pyscan Pyscan is a highly concurrent vulnerability scanner written in Rust. It automatically traverses your Python project, extracts dependencies across various packaging formats, and cross-references them against the Open Source Vulnerabilities OSV database in a single asynchronous batch request...

CyberScan

CyberScan CyberScan es una herramienta de prueba de penetración de código abierto que puede analizar paquetes , decodificar , escanear puertos, hacer ping y geolocalización de una IP incluyendo latitud, longitud , región , país ... Capturas de pantalla Sistemas Operativos Compatibles Windows...

livewire-vuln-scanner

Livewire Passive Vulnerability Scanner Livewire Passive Vulnerability Scanner is a Python 2.7 tool designed to passively detect Livewire versions used by websites and identify potential vulnerabilities based on version comparison. This scanner does not exploit any vulnerability. It only analyzes...

trivy-plugin-kubectl

trivy-plugin-kubectl A Trivy plugin that scans the images of a kubernetes resource Install $ trivy plugin install github.com/aquasecurity/trivy-plugin-kubectl $ trivy kubectl -h Usage: trivy kubectl -h,--help TYPE NAME TRIVY OPTION A Trivy plugin that scans the images of a kubernetes resource...

trivy-enforcer

trivy-enforcer EXPERIMENTAL Kubernetes Operator for Image Assurance It works as Admission Controller protecting unsafe images from being deployed Custom Controller watching ImageVulnerability CRD and scanning the image in the custom resource automatically Setup $ kubectl apply -f manifests/opa.ya...

autonmap

autonmap I use this script for HTB Nmap Scan :...

chart-down

chart-down Download and scan Helm charts for secrets using TruffleHog. Given a Helm repository URL, chart-down fetches the repo index, downloads every chart archive, extracts it, and runs TruffleHog against the contents. Requirements Go 1.19+ TruffleHog on PATH brew install trufflehog Install go...

vhostawesome

FunWithVhosts Una herramienta diseñada para verificar eficientemente hosts virtuales a través de múltiples direcciones IP. Descripción FunWithVhosts automatiza el proceso de identificación de hosts virtuales en direcciones IP dadas. El script verifica puertos abiertos, específicamente puertos de...

JS-Secret-Hunter

JS Secret Hunter V2 🕵️‍♂️ JS Secret Hunter is an advanced Python tool designed for security researchers to automate the detection of hardcoded secrets in client-side JavaScript. Unlike simple scanners, V2 includes a dynamic crawler that parses the HTML of the target website to extract all loaded...

egressbuster

EgressBuster Copyright 2015 TrustedSec - EgressBuster Written by: David Kennedy ReL1K Company: TrustedSec DISCLAIMER: This is only for testing purposes and can only be used where strict consent has been given. Do not use this for illegal purposes period. Please read the LICENSE for the licensing ...

rdpscan

rdpscan for CVE-2019-0708 bluekeep vuln This is a quick-and-dirty scanner for the CVE-2019-0708 vulnerability in Microsoft Remote Desktop. Right now, there are about 900,000 machines on the public Internet vulnerable to this vulnerability, so many are to expect a worm soon like WannaCry and...

scilla

🏴‍☠️ Herramienta de recopilación de información 🏴‍☠️ - Enumeración de DNS / Subdominios / Puertos / Directorios Coded with 💙 by edoardottt Share on Twitter! Instalar • Comenzar • Ejemplos • Registro de cambios • Contribuir • Licencia Instalación 📡 Homebrew brew install scilla Snap sudo snap install...

nessus-vulnerability-scanning-lab

Nessus Vulnerability Scanning Lab — Azure Full vulnerability management lifecycle — scan, find, fix, verify — executed against my live Azure Active Directory lab environment using a dedicated, Terraform-deployed Nessus scanner. What This Lab Demonstrates I deployed a dedicated Ubuntu 24.04 scanne...

Gemini-api-key-hunter

Gemini API Key Toolkit A toolkit for discovering, validating, and testing exposed Google Gemini API keys. It consists of two components: Gemisc.py – A high-speed Python scanner that discovers exposed Google API keys from websites and JavaScript files, verifies them against the Gemini API, and...

appshark

Índice de documentos 1.overview 2.startup 3.how to write rules 4.how to find compliance problems use appshark 5.a path traversal game 6.argument 7.engine config 8.result 9.faq AppShark Appshark es una plataforma de análisis estático de flujo de datos taint analysis para escanear vulnerabilidades ...

WebLogic-SSRF_CVE-2014-4210

WebLogic-SSRFCVE-2014-4210 Weblogic SearchPublicRegistries SSRFCVE-2014-4210 Exploit Script based on Python3 Usage optional arguments: -h, --help show this help message and exit -u U Single Target URL -uf UF Read URLs from file -p P Only scan specified ports -sn SN Only scan specified subnets -sf...