otseca

Herramienta de auditoría de seguridad de código abierto para buscar y volcar la configuración del sistema. Introducción | Descripción | Requisitos | Salida | Parámetros | Informes | Cómo funciona |...

otseca

Open source security auditing tool to search and dump system configuration. Introduction | Description | Requirements | Output | Parameters | Reports | How it works | Other Introduction...

CVE-2025-32433

Working PoC for CVE-2025-32433 Blog post: https://platformsecurity.com/blog/CVE-2025-32433-poc...

athena

Dive into a new Pentesting Experience with Athena OS...

Brida

Brida Brida is a Burp Suite Extension that, working as a bridge between Burp Suite and Frida, lets you use and manipulate applications’ own methods while tampering the traffic exchanged between the applications and their back-end services/servers. It supports all platforms supported by Frida...

CVE-2015-8562

This repository does not have a README...

BTPS-SecPack

The Blue Team PowerShell Security Package Using Microsoft Teams for Alerts Instead of Email If you wish to use Microsoft Teams for sending alerts instead of using email you will want to load the microsoft-teams branch for this repository which has the Teams alert modifications. It will take me a...

fibratus

Fibratus Sensor de seguridad para la detección y protección de amenazas en tiempo real Comenzar » Documentación • Reglas • Filaments • Descargas • Debates Fibratus detecta y erradica tácticas avanzadas de atacantes, malware y amenazas emergentes al examinar y contrastar un amplio espectro de...

CloudPrivs

CloudPrivs I got creds, now what? Overview CloudPrivs is a tool that leverages the existing power of SDKs like Boto3 to brute force privileges of all cloud services to determine what privileges exist for a given set of credentials. This tool is useful for Pentesters, Red Teamer's and other securi...

INtrack

INtrack - Internet Crawler & Security Scanner INtrack is a powerful, multi-threaded security scanner and internet crawler designed for network reconnaissance, vulnerability detection, and security assessment. It can scan for a wide variety of instances, vulnerabilities, IoT devices, exposures, an...

shellcodetester

Probador de Shellcode ShellcodeTester es compatible oficialmente con Python 3.8+. Características principales...

CVE-2018-6574

CVE-2018-6574 CVE-2018-6574 go get...

DarkSide

A tool with an awesome user interface. Features: Hacker Dashboard Hacker News thehackernews.com/ New Exploits Exploit-db.com Hacking Tutorials Video youtube.com The Latest Prices OF Digital Currencies Rials , Usd Information Gathering Bypass Cloud Flare Cms Detect Trace Toute Reverse IP Port Scan...

dockerscan

DockerScan v2.0 El escáner de seguridad Docker más completo...

simple-maven

Damn Vulnerable C Application API Only Getting Started Note: This is a deliberately vulnerable app, please do not host it on production or Internet/public facing servers. Use with caution. kk Docker test root@kitploit: docker-compose up tets Manual Install .NET Core 2.x SDK Microsoft .NET Core SD...

OBO

Off-By-One Slides from Off-By-One Conferences Watch all the talks Year ↓| Slides| Youtube playlist ---|---|--- 2024| Slides for Day 1...

http-request-smuggling

HTTP Request Smuggling Detection Tool HTTP request smuggling is a high severity vulnerability which is a technique where an attacker smuggles an ambiguous HTTP request to bypass security controls and gain unauthorized access to performs malicious activities, the vulnerability was discovered back ...

dwipe

dwipe dwipe is a tool to wipe disks and partitions for Linux to help secure your data. dwipe aims to reduce mistakes by providing ample information about your devices during selection. Quick Comparison...

CVE-2023-23397

This repository does not have a README...

Payload-and-Polyglot-Lists

Payload & Polyglot Lists Found a payload that doesn't work? Please open an issue with the payload, target context, and what you expected to happen. Pull requests with fixes or new payloads are always welcome. Research is ongoing. This project is under active development and will be updated...