13459 matches found
wappalyzer-next
Wappalyzer Next This project is a command line tool and python library that uses the Wappalyzer browser extension and its fingerprints to detect technologies. Other projects that emerged after the discontinuation of the official open-source project are using outdated fingerprints and lack accurac...
Nameles
Auditable Invalid Traffic Detection Nameles β’ Key Features β’ Performance β’ Examples β’ Install β’ Support β’ Docs β’ Issues β’ License β’ Download Nameles brings state-of-the-art invalid traffic detection, analysis and real-time filtering to every advertiser, data scientist, advertising technology...
webstor
WebStor Fast Identification of Vulnerable Web Technologies in your Organization WebStor is a tool implemented in Python under the MIT license for quickly enumerating all websites across all of your organization's networks, storing their responses, and querying for known web technologies and...
trufflehog
TruffleHog Find leaked credentials. π Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. π TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...
WhatWeb
WhatWeb - Next generation web scanner Developed by Andrew Horton urbanadventurer and Brendan Coles bcoles Latest Release: v0.6.4. April 3, 2026 License: GPLv2 This product is subject to the terms detailed in the license agreement. For more information about WhatWeb visit...
HoneyWire
HoneyWire π Table of Contents Overview Showcase The Universal Event Standard Features Architecture Quick Start Guide Security Notes Tech Stack Roadmap & Development Versioning and API Reference Overview HoneyWire is a lightweight, Distributed High-Signal Security Early-Warning System Builder,...
python-uncompyle6
|buildstatus| |Pypi Installs| |Latest Version| |Supported Python Versions| |packagestatus| .. contents:: uncompyle6 A native Python cross-version decompiler and fragment decompiler. The successor to decompyle, uncompyle, and uncompyle2. I gave a talk on this at BlackHat Asia 2024 . Introduction...
mimicry
Mimicry Mimicry Mimicry is a security tool developed by Chaitin Technology for active deception in exploitation and post-exploitation. Active deception can live migrate the attacker to the honeypot without awareness. We can achieve a higher security level at a lower cost with Active deception...
graphw00f
Credits to Nick Aleks for the logo! graphw00f - GraphQL Server Fingerprinting Table of Contents How does it work? Detections GraphQL Threat Matrix Prerequisites Installation Configuration Example Usage Fingerprinting GraphQL Detecting & Fingerprinting GraphQL Support & Issues Resources How does i...
riotpot
π’ ATTENTION!!! --- This repository has been moved to the Honeynet Project : RIoTPot RIoTPot is a hybrid interaction honeypot, primarily focused on the emulation IoT and OT protocols, although, it is also capable of emulating other services. In essence, RIoTPot acts as a proxy service for other...
webtech
WebTech Identify technologies used on websites. More info on the release's blogpost. CLI Installation WebTech is available on pip: pip install webtech It can be also installed via setup.py: python setup.py install --user Burp Integration Download Jython 2.7.0 standalone and install it into Burp. ...
Longjing Technology BEMS API 1.21 - Unauthenticated Arbitrary File Download
Longjing Technology BEMS API 1.21 is vulnerable to local file inclusion. Input passed through the fileName parameter through the downloads API endpoint is not properly verified before being used to download files. This can be exploited to disclose the contents of arbitrary and sensitive files...
EUVD-2026-114905
A security flaw has been discovered in Shanghai Xi Yu Ji Zhi Technology Minimax Code 0.5.8. This affects an unknown part of the component Find Command Handler. The manipulation of the argument -exec results in os command injection. The attack may be performed from remote. The vendor was contacted...
veinmind-tools
veinmind-tools Documentation veinmind-tools is self-developed by chaitin technology οΌ cloudwalker team incubationοΌa container security toolset based on veinmind-sdk π₯ Demo Veinmind has been connected to openai. You can use openai to conduct a user-friendly analysis of the scan results, allowing y...
ATSCAN
ATSCAN SCANNER Advanced Mass Search / Dork / Exploitation Scanner | Alisam Technology is not responsible for any misuse, damage caused by this script or attacking targets without prior mutual consent! It is your responsibility to obey laws! ---|--- Codename:| 4n0n4t ---|--- AUTHOR:| Ali MEHDIOUI...
CVE-2026-120275
A security flaw has been discovered in Shanghai Xi Yu Ji Zhi Technology Minimax Code 0.5.8. This affects an unknown part of the component Find Command Handler. The manipulation of the argument -exec results in os command injection. The attack may be performed from remote. The vendor was contacted...
CVE-2026-120275
A security flaw exists in Shanghai Xi Yu Ji Zhi Technology Minimax Code 0.5.8 affecting the Find Command Handler component. Improper neutralization of special elements allows for OS command injection via the manipulation of the -exec argument. This vulnerability can be triggered remotely, potenti...
CVE-2026-120275 Shanghai Xi Yu Ji Zhi Technology Minimax Code Find os command injection
A security flaw has been discovered in Shanghai Xi Yu Ji Zhi Technology Minimax Code 0.5.8. This affects an unknown part of the component Find Command Handler. The manipulation of the argument -exec results in os command injection. The attack may be performed from remote. The vendor was contacted...
web-scanner
π Web Scanner Tool π Developed by tmrswrr Version 1.0.0 A comprehensive tool for Web Domain Scanning including Subdomain Discovery, Directory Enumeration, Network Scanning, and Website Identification. π· Screenshots π· π π« How to Use π« π π Read Me π The Advanced Web Scanner is a versatile...
CVE-2026-120226
A security vulnerability has been detected in Hangzhou Xiongmai Technology P2PAPI.dll 1.3.3.32 on Windows. Affected by this issue is the function P2PAPIConnect of the component P2P SDK. Such manipulation of the argument input as part of String leads to buffer overflow. An attack has to be...