lightbulb-framework

LightBulb LightBulb is an open source python framework for auditing web application firewalls and filters. Synopsis The framework consists of two main algorithms: GOFA : An active learning algorithm that infers symbolic representations of automata in the standard membership/equivalence query mode...

esperto-wiimote

Esperto Wiimote !IMPORTANTE Este software requer um driver de kernel Wiimote atualizado/corrigido, encontrado aqui. Após a instalação, execute sudo sed -i '/ATTRinhibited="1"/s/^//' /etc/udev/rules.d/99-wiimote.rules para desinibir eventos de IR e acelerômetro. Baseado no sistema de entrada...

catphish

CATPHISH Generate similar-looking domains for phishing attacks. Check expired domains and their categorized domain status to evade proxy categorization. Whitelisted domains are perfect for your C2 servers. Perfect for Red Team engagements. Installation bundle install Current Algorithms...

CVE-2023-50070

CVE-2023-50070 Customer Support System 1.0 - Múltiplas vulnerabilidades de injeção SQL - saveticket Descrição : Múltiplas vulnerabilidades de injeção SQL em /customersupport/ajax.php?action=saveticket no Customer Support System 1.0 permitem que atacantes autenticados executem comandos SQL...

EmBomber

EmBomber Python-Skript für E-Mail-Bombing, das Gmail, Yahoo, Hotmail/Outlook unterstützt Gemacht mit von Mazen Elzanaty Funktionen Unterstützt Gmail Unterstützt Yahoo Unterstützt Hotmail/Outlook Verwendung EmBomber sollte auf allen Linux-Distributionen mit Python 2.7 funktionieren Klonen Sie es...

malicious-devfile-registry

दुर्भावनापूर्ण Devfile रजिस्ट्री इस प्रोजेक्ट में एक दुर्भावनापूर्ण Devfile रजिस्ट्री है जिसका उपयोग Gitlab में CVE-2024-0402 का शोषण करने के लिए किया जा सकता है। शोषण एक nodejs:2.2.1 स्टैक को अनुक्रमित किया गया है, जो registry-support लाइब्रेरी v1.1.0 से पहले में पथ-ट्रैवर्सल समस्या का शोषण करते...

heapinspect

HeapInspect Pwnning ist eine Kunst. HeapInspect wurde entwickelt, um heap viel schöner zu machen. Dieses Tool ist jetzt ein Plugin vonnadbg. Probier es aus! Funktionen Frei von gdb und anderen Anforderungen Multi-glibc-Unterstützung 2.19, 2.23-2.27 derzeit getestet sowohl 32-Bit als auch 64-Bit...

uddup

UDdup - URLs Deduplication Tool The tool gets a list of URLs, and removes "duplicate" pages in the sense of URL patterns that are probably repetitive and points to the same web template. For example: https://www.example.com/product/123 https://www.example.com/product/456...

pagodo

pagodo - Passive Google Dork Einführung pagodo automatisiert die Google-Suche nach potenziell anfälligen Webseiten und Anwendungen im Internet. Es ersetzt die manuelle Durchführung von Google-Dork-Suchen mit einem Web-GUI-Browser. Es gibt 2 Teile. Der erste ist ghdbscraper.py, der die neuesten...

redis-checker

redis-checker Verifica servidores Redis expostos usage: redis-checker.py -h -u URL -f FILE -p PROXY -P PORT -s SSL options: -h, --help show this help message and exit -u URL, --url URL URL to test -f FILE, --file FILE File of urls -p PROXY, --proxy PROXY Proxy for debugging -P PORT, --port PORT...

cansina

Cansina Cansina is a Web Content Discovery Application. It is well known Web applications don't publish all their resources or public links, so the only way to discover these resources is requesting for them and check the response. Cansina duty is to help you making requests and filtering and...

dump1090

Dump1090 README Dump 1090 é um decodificador Mode S especificamente projetado para dispositivos RTLSDR. As principais características são: Decodificação robusta de mensagens fracas, com muitos usuários do mode1090 observando maior alcance em comparação com outros decodificadores populares. Suport...

fim-ebpf

FIM-eBPF: Monitoramento de Integridade de Arquivos com eBPF Um programa eBPF leve para monitorar eventos de criação e modificação de arquivos no Linux. Esta ferramenta utiliza eBPF Extended Berkeley Packet Filter para rastrear operações de arquivos diretamente do kernel, fornecendo monitoramento ...

wrongsecrets-binaries

wrongsecrets-binaries Este é um repositório de apoio para o OWASP WrongSecrets. Aqui criamos os nossos binários que são incluídos no projeto oficial. Quer adicionar um desafio relacionado a segredos escondidos em binários? Abra um ticket em WrongSecrets issues. Quer corrigir algo que encontrou nu...

vapi

vAPI vAPI ist eine absichtlich angreifbar programmierte Schnittstelle Vulnerable Adversely Programmed Interface, eine selbst hostbare API, die Szenarien aus dem OWASP API Top 10 in Form von Übungen nachbildet. Anforderungen PHP MySQL PostMan MITM Proxy Installation Docker docker-compose up -d...

shellsploit-framework

We'll back in several years. update...

CrossC2

CrossC2-Framework README | 中文文档 | READMEFULL | 中文完整文档 CobaltStrike-Unterstützung Unterstützt die Sicherheitsbewertung anderer Plattformen Linux/MacOS/... mittels CobaltStrike und umfasst die Entwicklungsunterstützung für Unix-Post-Penetrationsmodule | CS3.14Fehlerbehebungen| CS4.0| CS4.X 4.14.8...

tangalanga

Tangalanga Zoom-Konferenz-Scanner. Dieser Scanner überprüft eine zufällige Meeting-ID und gibt Informationen zurück, falls verfügbar. Installieren Versuchen Sie zunächst, ob es eine vorgefertigte Version für das Datum gibt: https://github.com/elcuervo/tangalanga/releases. Diese Versionen haben...

OSIB

OWASP Open Security Information Base OSIB Página do Projeto: https://owasp.org/www-project-open-security-information-base Repositório de Software: https://github.com/OWASP/OSIB Ferramentas Fornecidas: mkdocsmacroosib.py módulo Python instalável manualmente osibmacro.py macro para copiar que impor...

viproy-voipkit

Discontinued Viproy was a PoC VoIP security assessment tool which had several modules and exploits to maintain. However, it was developed as a modules set to Metasploit Framework. As Metasploit Framework had significant updates, Viproy's current modules won't be able to work unless you use legacy...