CertEagle

CertEagle - Utilidad de monitoreo de activos utilizando feeds de registros CT en tiempo real La descripción detallada se puede encontrar aquí : Leer Blog aquí : https://medium.com/@Asm0d3us/weaponizing-live-ct-logs-for-automated-monitoring-of-assets-39c6973177c7 Introducción En Bugbounties “Si no...

submonitor

submonitor por xpl0ited1 Descripción Monitor de subdominios con capacidades de reporte a Slack, Discord y Telegram Uso: Configure los objetivos de escaneo en el archivo targets.txt, establezca la configuración de reporte en config.yaml, luego cree un cronjob para ejecutar cada día root@kitploit:...

GitSecure

GitSecure Acerca de GitSecure GitSecure es una acción de GitHub que se puede utilizar para alertar a los equipos de seguridad sobre cualquier clave API expuesta en solicitudes push y pull. Cuando se añaden o modifican archivos en un repositorio de GitHub, esta acción se iniciará y comenzará a...

T3SF

T3SF Framework de Simulación de Ejercicios Técnicos de Mesa Tabletop Tabla de Contenidos Acerca de Preparando las Cosas TODO CHANGELOG Contribuir Acerca de T3SF es un framework que ofrece una estructura modular para la orquestación de eventos basados en una lista maestra de eventos de escenario...

ShunyaNet-Sentinel

ShunyaNet Sentinel ACTUALIZADO: 03/02/2026 ShunyaNet Sentinel es un programa ligero con temática cyberpunk que ingiere fuentes RSS por ejemplo, noticias de última hora, redes sociales, las envía a un LLM para su análisis y entrega alertas e informes resumidos directamente a la interfaz gráfica y ...

SlackShell

SlackShell Description & Changelog v1.0 This PowerShell module includes various functions that utilize the Slack API to create a command and control channel. The main function, Start-Shell, will connect to a user-specified Slack channel and authenticate using a supplied API authentication token f...

sublert

root@kitploit: / / / / / / / / \ / / / / / / / / / / / // / // / / / / / / //,/.//// / Author: Yassine Aboukir Version: 1.4.7 What's this about? Sublert is a security and reconnaissance tool that was written in Python to leverage certificate transparency for the sole purpose of monitoring new...

sublert

root@kitploit: / / / / / / / / \ / / / / / / / / / / / // / // / / / / / / //,/.//// / Autor: Yassine Aboukir Versión: 1.4.7 ¿De qué se trata? Sublert es una herramienta de seguridad y reconocimiento escrita en Python que aprovecha la transparencia de certificados con el único propósito de...

domain-protect

domain-protect Domain Protect is now an OWASP project moved to: github.com/domain-protect/domain-protect...

supply-chain-monitor

Monitor de Cadena de Suministro Monitoreo automatizado de los paquetes principales de PyPI y npm para detectar compromisos en la cadena de suministro. Consulta ambos registros en busca de nuevas versiones, compara cada versión con su predecesora y utiliza un LLM a través de Cursor Agent CLI para...

moniorg

moniorg Description By looking through CT logs an attacker can gather a lot of information about organization's infrastructure i.e. internal domains,email addresses in a completly passive manner. moniorg leverage certificate transparency logs to monitor for newly issued domains based on...

CVE-2026-24055-OAuth-Langfuse

CVE-2026-24055 — Unauthenticated Slack OAuth Install in Langfuse Đồ án môn Bảo mật Web và Ứng dụng — Nhóm 06, lớp NT213.Q21.ANTT 📌 Tóm tắt Dự án tái hiện lại reproduce một lỗ hổng bảo mật thực tế đã được công bố CVE-2026-24055 trên nền tảng Langfuse — một endpoint OAuth cho phép kẻ tấn công chiếm...

attack_range

Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs — Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...

terragoat

TerraGoat - Vulnerable Terraform Infrastructure...

dradis-ce

Welcome to the Dradis Framework An Automated Pentest Reporting Tool Dradis is an open-source collaboration framework and penetration testing report generator that helps InfoSec teams streamline reporting workflows. With support for importing data from tools like Burp Suite, Nessus, and Nmap, Drad...

mihari

mihari A query aggregator for OSINT based threat hunting. Mihari can aggregate multiple searches across multiple services in a single rule & persist findings in a database. Mihari supports the following services by default. Censys CIRCL passive DNS / passive SSL crt.sh dnstwister Fofa GreyNoise...

vthunting

VT Hunting VThunting is now featured on VirusTotal. Virus Total Hunting is a tiny tool based on the VT api version 3 to run daily, weekly or monthly report about malware hunting. The report can be send via email, Slack channel or Telegram. The tool can also be used in cli to get a report anytime...

sliver-n8n-notifications

Integración de Sliver C2 + n8n Notificaciones en tiempo real para callbacks de implants de Sliver C2 mediante Discord y Slack Descripción general Este proyecto integra Sliver C2 framework de Comando y Control con n8n automatización de flujos de trabajo para proporcionar notificaciones en tiempo...

SecureCodingDojo

About the Secure Coding Dojo The Secure Coding Dojo is a platform for delivering secure coding training. While it comes with its own vulnerable training application the Insecure.Inc website the training portal can be used in conjunction with other training applications. The strength of the platfo...

keyhacks

KeyHacks shows methods to validate different API keys found on a Bug Bounty Program or a pentest. @Gwen001 has scripted the entire process available here and it can be found here Table of Contents ABTasty API Key Algolia API key Amplitude API Keys Asana Access token AWS Access Key ID and Secret...