SAPKiln

OWASP SAPKiln SAP की दुनिया 🌎 बहुत विशाल और अनूठी है। SAP के पास विभिन्न समस्याओं से निपटने के लिए कई उत्पाद हैं, साथ ही NetWeaver जैसे कई तकनीकी प्लेटफॉर्म भी हैं। SAPKiln एक ओपन-सोर्स GUI टूल 💻 है जिसे सुरक्षा शोधकर्ताओं को SAP Logon/GUI डेस्कटॉप एप्लिकेशन के माध्यम से SAP सिस्टम का कुशल ऑडिटिं...

CMS-Made-Simple-2.2.10---SQL-Injection

CMS-Made-Simple-2.2.10---SQL-Injection Google Dorks para detecção de injeção SQL no CMS Made Simple 2.2.10 CVE-2019-9053. Construído para auditoria de segurança e verificação de patches...

lunar

LUNAR Lockdown UNix Auditing and Reporting Version Current version 15.9.1 Refer to lunar.sh and changelog for more up to date version information License CC BY-SA: https://creativecommons.org/licenses/by-sa/4.0/ Fund me here: https://ko-fi.com/richardatlateralblast NOTICE Run this code in audit...

sippts

Che cos'è Sippts? Sippts è un set di strumenti per auditare server e dispositivi VoIP tramite il protocollo SIP. Sippts è programmato in Python e ci permette di verificare la sicurezza di un server VoIP utilizzando il protocollo SIP. È gratuito? Sì. Puoi usarlo, modificarlo e distribuirlo...

pcc

PHP Secure Configuration Checker Überprüft die aktuelle PHP-Konfiguration auf potenzielle Sicherheitslücken. Einfach diese Datei von Ihrem Webserver aus aufrufen oder über die CLI ausführen. Autor Diese Software wurde von Ben Fuhrmannek, SektionEins GmbH, entwickelt, um php.ini-Prüfungen zu...

Bashark

Bashark 2.0 Kit di post-sfruttamento Bashark aiuta i penetration tester e i ricercatori di sicurezza durante la fase di post-sfruttamento di un audit di sicurezza. Utilizzo Per avviare questo strumento su un host compromesso, basta eseguire il sourcing dello script bashark.sh dal terminale: $...

chaosblade

Chaosblade: un toolkit di chaos engineering facile da usare e potente Versione cinese README Wiki: DeepWiki 🔥🔥🔥 Aggiornamento importante: Chaosblade Agent rilasciato - Blade AI Blade AI funge da livello di agente intelligente nell'ecosistema ChaosBlade: a livello fondamentale, richiama ChaosBlade...

MemShellParty

MemShellParty Cinese | English !WARNING Questo strumento è destinato esclusivamente a ricercatori di sicurezza, amministratori di rete e tecnici autorizzati per eseguire test di sicurezza autorizzati, valutazioni delle vulnerabilità e audit di sicurezza. Qualsiasi utilizzo non autorizzato di ques...

otseca

Open source security auditing tool to search and dump system configuration. Introduction | Description | Requirements | Output | Parameters | Reports | How it works | Other Introduction...

sslscan

sslscan2 sslscan version 2 has now been released. This includes a major rewrite of the backend scanning code, which means that it is no longer reliant on the version of OpenSSL for many checks. This means that it is possible to support legacy protocols SSLv2 and SSLv3, as well as supporting TLSv1...

CIS GitLab Benchmark Scanner

CIS GitLab Benchmark-Scanner - gitlabcis Hintergrund Am 17. April 2024 veröffentlichte GitLab™ einen Blogbeitrag, in dem es seinen Center for Internet Security® CIS GitLab-Benchmark vorstellte. Ziel ist es, die Sicherheit des Produkts zu verbessern und Härtungsempfehlungen für GitLab-Kunden...

ImCurvin

ImCurvin' ImCurvin ist ein Open-Source-Tool für Web-Sicherheitsaudits und Penetrationstests, das entwickelt wurde, um die Erkennung von Fehlkonfigurationen in der Umgebung zu automatisieren, exponierte Konfigurations-Blaupausen zu verfolgen und Backend-Schwachstellen zu untersuchen. Detaillierte...

Kestrel

Kestrel BloodHound ti mostra il percorso. Kestrel ti mostra ciò che è già dentro. Tutti mappano la stessa cosa: il percorso di attacco - chi può raggiungere Domain Admin. È la domanda giusta, e gli strumenti che le rispondono sono eccellenti. Ma un grafo di "chi può raggiungere chi" è cieco a...

EUVD-2026-25014

printenv: environment variables with invalid UTF-8 are silently skipped evades inspection...

[SECURITY] Fedora 44 Update: nmap-7.92-11.fc44

Nmap is a utility for network exploration or security auditing. It supports ping scanning determine which hosts are up, many port scanning techniques determine what services the hosts are offering, and TCP/IP fingerprinting remote host operating system identification. Nmap also offers flexible ta...

Revive Adserver 6.0.6 Security Auditor

This script is a defensive security auditing utility designed to identify exposed services, review configuration weaknesses, and collect security posture information from a Revive Adserver deployment without performing direct exploitation...

WebADM Security Auditor and Content Exposure Scanner

This Python script is a defensive security auditing tool designed to analyze a target web application for potential information exposure and security misconfigurations, specifically focusing on environments resembling WebADM. This was tested on version 2.4.17-1...

PCLink 4.1.1 Basic API Exposure / Header Misconfiguration Scanner

This Python script is a lightweight security auditing tool designed to assess a PCLink server for potential exposure of sensitive headers and extension-related API endpoints. It's written to analyze version 4.1.1...

Exploit for Incorrect Privilege Assignment in Litespeedtech Litespeed_Cpanel_Plugin

CVE-2026-48172 - LiteSpeed cPanel Plugin Vulnerability Auditor...

cpython: CPython: Logging Bypass in Legacy .pyc File Handling

A flaw was found in CPython. This vulnerability allows a local user with low privileges to bypass security auditing mechanisms. The issue occurs because the SourcelessFileLoader component, responsible for handling older Python compiled files .pyc, does not properly trigger system audit events. Th...