cve-2023-34034

cve-2023-34034 Demonstration of CVE-2023-34034 authorization bypass in Spring Security. See CVE-2023-34034 Spring Security Authorization Bypass on Don't Panic!...

pisc

Public OCI-Image Security Checker What is it? PISC Public OCI-Image or docker-image Security Checker is command-line tool to assess the security of OCI container images. Exits with code 1 if any of the following conditions are met: malware 🍄 exploits 🐙, hack-tools 👾, backdoors 🐴, crypto-miners 💰,...

lynis

Documentación ¿Te gusta este software? Marca la estrella del proyecto y conviértete en un stargazer. lynis Lynis - Herramienta de auditoría de seguridad y hardening para sistemas basados en UNIX. Lynis es una herramienta de auditoría de seguridad para sistemas basados en UNIX como Linux, macOS, B...

morf

MORF Marco de Reconocimiento Móvil Un potente kit de herramientas de seguridad ofensiva para el análisis de aplicaciones móviles Encuentra Secretos. Protege Apps. Mantente Seguro. 📋 Tabla de Contenidos 💡 Visión General 🚀 Inicio Rápido 🔍 Características Clave 🏗️ Arquitectura 📋 Casos de Uso Comunes ...

exrex

EXREX Irregular methods for regular expressions. Exrex is a command line tool and python module that generates all - or random - matching strings to a given regular expression and more. It's pure python, without external dependencies. There are regular expressions with infinite matching strings...

nmap

nmap This library aims at providing idiomatic nmap bindings for go developers, in order to make it easier to write security audit tools using golang. What is nmap Nmap Network Mapper is a free and open-source network scanner created by Gordon Lyon. Nmap is used to discover hosts and services on a...

foxcage

foxcage Run Firefox in a rootless Podman container for security isolation. Your browser runs with almost no Linux capabilities, in its own user and network namespace, isolated from the host — while still having full GPU acceleration, audio, and DRM support. Why foxcage? Firefox already has a...

vulnerable-container-hub

The OWASP Vulnerable Container Hub Project Background There are many repositories out there to provide vulnerable environments such as web applications, containers or virtual machines to those who want to learn security, since it helps not only students or someone who recently joined the field to...

InfoSec-Black-Friday

InfoSec Black Friday & Cyber Monday Deals "InfoSec Cares" 2025 Edition All the deals for InfoSec related software/tools this coming Black Friday and Cyber Monday. ALL LINKS UPDATED FOR 2025! Many more incoming... Quick Personal Update After being involved in a car accident and everything going...

KNX-Bus-Dump

KNX Bus Dump KNX es un protocolo popular de automatización de edificios y se utiliza para interconectar sensores, actuadores y otros componentes de un edificio inteligente. Nuestra herramienta KNX Bus Dump utiliza la biblioteca Java Calimero, a la que contribuimos para esta herramienta, para...

openclaw_vulnerabilities_and_solutions

OpenClaw — vulnerabilities, hardening, and VPS deployment Санитизированная публичная документация по безопасному развёртыванию OpenClaw на VPS: архитектура доступа, известные уязвимости и практические инциденты с решениями. Public, sanitized documentation from real OpenClaw operations: how to...

FRAGNESIA-Charan-cve-2026-46300

Charantej Architecture: Hardened Container Staging & Syscall Telemetry Lab An enterprise-grade, defense-in-depth container containment and runtime security telemetry framework. Designed from the perspective of a Cisco Lead Cybersecurity Architect, the Charantej Architecture isolates staging...

netsniff-ng

////////////////////////////////////////////////////////////////////////////// root@kitploit: netsniff-ng - the packet sniffing beast \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ . . netsniff-ng is a free, performant / Linux network analyzer and .' '. networking...

aura-inspector

aura-inspector This is not an officially supported Google product. This project is not eligible for the Google Open Source Software Vulnerability Rewards Program. Introduction aura-inspector is a Swiss Army knife of Salesforce Experience Cloud testing. It facilitates in discovering misconfigured...

gsscred-race

This repository does not have a README...

security-study-plan

Un plan de estudio práctico para convertirte en un ingeniero de ciberseguridad exitoso basado en roles como Pentest, AppSec, Cloud Security, DevSecOps, etc., con recursos gratuitos/de pago, herramientas y conceptos para sobresalir. Cubrirá, pero no se limitará a: Hecho 1. Habilidades comunes para...

msnm-sensor

Description MSNM-S Multivariate Statistical Network Monitoring-Sensor shows the practical suitability of the approaches found in PCA-MSNM and in Hierarchical PCA-MSNM works. The first one present the MSNM approach and new multivariate statistical methodology for network anomaly detection while th...

cve-2024-22017_to_test

cve-2024-22017totest...

confused

Confused A tool for checking for lingering free namespaces for private package names referenced in dependency configuration for Python pypi requirements.txt, JavaScript npm package.json, PHP composer composer.json or MVN maven pom.xml. What is this all about? On 9th of February 2021, a security...

pacu

Quick reference Where to get help : the Rhino Security Labs Discord, or Stack Overflow Where to file issues : https://github.com/RhinoSecurityLabs/pacu/issues Maintained by : Rhino Security Labs What is Pacu? Pacu is an open-source AWS exploitation framework, designed for offensive security testi...