XStream <1.4.15 - Server-Side Request Forgery

XStream before 1.4.15 is susceptible to server-side request forgery. An attacker can request data from internal resources that are not publicly available by manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorize...

vimana-framework

Overview Vimana is a modular security framework for auditing Python APIs and Web applications. The plugin-based architecture enables security professionals to assess, fuzz, and analyze Python projects through automated and manual techniques. Core Capabilities: Vulnerability detection and...

DIAL

DIAL Workloads on cloud provide equal opportunities for hackers as much as they do for internal teams. Cloud-native companies are open to attacks from both outside forces and from within. With ever growing risk of a security breach and cloud misconfiguration being one of the most common factor of...

tirreno

tirreno tirreno is a security framework. tirreno tir.ˈrɛ.no helps understand, monitor, and protect your product from threats, fraud, and abuse. While classic cybersecurity focuses on infrastructure and network perimeter, most breaches occur through compromised accounts and application logic abuse...

slsa

SLSA "salsa" is Supply-chain Levels for Software Artifacts SLSA pronounced "salsa" is a security framework from source to service, giving anyone working with software a common language for increasing levels of software security and supply chain integrity. It’s how you get from safe enough to bein...

skf-flask

Marco de Conocimiento de Seguridad ANTIGUO y archivado Tenga en cuenta que esta es la versión archivada de SKF, estamos ocupados construyendo un nuevo Marco de Conocimiento de Seguridad. Para más actualizaciones, visite este repositorio de github:...

raptor

root@kitploit: ╔═══════════════════════════════════════════════════════════════════════════╗ ║ ║ ║ ██████╗ █████╗ ██████╗ ████████╗ ██████╗ ██████╗ ║ ║ ██╔══██╗██╔══██╗██╔══██╗╚══██╔══╝██╔═══██╗██╔══██╗ ║ ║ ██████╔╝███████║██████╔╝ ██║ ██║ ██║██████╔╝ ║ ║ ██╔══██╗██╔══██║██╔═══╝ ██║ ██║ ██║██╔══█...

bytecode-viewer

Bytecode Viewer Bytecode Viewer - a lightweight user-friendly Java/Android Bytecode Viewer, Decompiler & More. New Features Jump to Declaration Draggable tabs Patched CVE-2022-21675 Make sure to upgrade to v2.11.X Dark mode by default with multiple themes Translated into over 30 languages...

T3MP3ST

🌩️ T3MP3ST 🌩️ root@kitploit: ▄▄▄█████▓▓█████ ███▄ ▄███▓ ██▓███ ▓█████ ██████ ▄▄▄█████▓ ▓ ██▒ ▓▒▓█ ▀ ▓██▒▀█▀ ██▒▓██░ ██▒▓█ ▀ ▒██ ▒ ▓ ██▒ ▓▒ ▒ ▓██░ ▒░▒███ ▓██ ▓██░▓██░ ██▓▒▒███ ░ ▓██▄ ▒ ▓██░ ▒░ ░ ▓██▓ ░ ▒▓█ ▄ ▒██ ▒██ ▒██▄█▓▒ ▒▒▓█ ▄ ▒ ██▒░ ▓██▓ ░ ▒██▒ ░ ░▒████▒▒██▒ ░██▒▒██▒ ░ ░░▒████▒▒██████▒▒ ▒██▒ ░...

decider

Decider This work is licensed under a Creative Commons Attribution 4.0 International License. This project makes use of MITRE ATT&CK® - ATT&CK Terms of Use. 📰 3.0.0 - Kiosk is Here Decider is now login-less and responsive. Content updates have been simplified to copying files and restarting Docke...

Top10

Top10 Repositorio oficial de documentos del OWASP Top 10 OWASP Top 10 2025 - PUBLICADO Hemos publicado el OWASP Top 10:2025 Final: OWASP Top10:2025 Por favor, registra aquí cualquier comentario, sugerencia o incidencia. OWASP Top 10 2021 - SUSTITUIDO OWASP Top10:2021 OWASP Top 10 2017 - HISTÓRICO...

peniot

PENIOT: 物联网渗透测试工具 目录 项目描述 什么是PENIOT？ 为什么需要PENIOT？ PENIOT提供了什么？ 构建说明 文档 测试 贡献者 开发者说明 项目海报 项目描述 什么是PENIOT？ PENIOT 是一个针对物联网（IoT）设备的渗透测试工具。 它通过针对设备的互联网连接发起不同类型的安全攻击，帮助您测试/渗透设备。 换句话说，您可以让设备暴露在主动和被动安全攻击之下。在确定目标设备及其必要信息（或参数）后， 您可以执行主动安全攻击，例如篡改/消耗系统资源、重放有效的通信单元等。 同时，您还可以执行被动安全攻击，例如破坏重要信息的机密性或进行流量分析。...

WMD

WMD Weapon of Mass Destruction This is a python tool with a collection of IT security software. The software is incapsulated in "modules". The modules does consist of pure python code and/or external third programs. Main functions 1. To use a module, run the command "use modulecall", e.g. "use...

PyRIT

Herramienta Python de Identificación de Riesgos para IA generativa PyRIT La herramienta Python de Identificación de Riesgos para IA generativa PyRIT es un marco de código abierto creado para capacitar a los profesionales de la seguridad y a los ingenieros a identificar riesgos de forma proactiva ...

pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

killerbee

KillerBee KillerBee 是一个用于测试和审计 ZigBee 及 IEEE 802.15.4 网络的框架与工具集 注意 usb0.x 支持正在被弃用/移除 Apimote v1 支持正在被弃用/移除 如果你需要这些功能，请创建一个 issue 说明你的使用场景和需求。 KillerBee 3.0.0-beta 更新 大家好，感谢大家一直以来对 KillerBee 的支持与关注。 当我们正在投入新精力清理代码、迁移到 Python 3、添加功能、提升一致性与连贯性时，我们利用这次重构的机会重新审视项目的目标和用途，以及实现这些目标的最佳方式。...

1earn

Everything is hard at the beginning, and then it stays hard... Introduction : The original intention of this project is to share knowledge resources, allowing more people to access and understand the fields of security and operations. However, due to my limited ability, there will inevitably be...

hakkuframework

Hakku Framework Hakku is a simple framework that is made for penetration testing tools. Hakku framework has a simple structure, basic CLI, and useful features for penetration testing modules development. Getting started Use the "help" command to see all available commands. Here is a video if you...

heaphopper

heaphopper HeapHopper is a bounded model checking framework for Heap-implementations. Overview Setup root@kitploit: sudo apt update && sudo apt install build-essential python3-dev virtualenvwrapper git clone https://github.com/angr/heaphopper.git && cd ./heaphopper mkvirtualenv -ppython3 heaphopp...

byob

Questions? Check out the docs or join our Discord support server Disclaimer : This project should be used for authorized testing or educational purposes only. BYOB is an open-source post-exploitation framework for students, researchers and developers. It includes features such as: Command & contr...