16503 matches found
CVE-2019-3396TEST
CVE-2019-3396테스트 테스트...
nautilus
Nautilus 2.0 Nautilus is a coverage guided, grammar based fuzzer. You can use it to improve your test coverage and find more bugs. By specifying the grammar of semi valid inputs, Nautilus is able to perform complex mutation and to uncover more interesting test cases. Many of the ideas behind this...
test-your-sysadmin-skills
:star: "Un grand administrateur n'a pas besoin de tout savoir, mais il doit être capable de trouver des solutions étonnantes à des projets impossibles. " - cwheeler33 ServerFault :star: "Mes compétences consistent à faire fonctionner les choses, pas à connaître un milliard de faits. ... Si je doi...
CyberStrike
English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português Brasil | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | Tiếng Việt | हिन्दी Le premier agent IA open source concu pour la securite offensive. Test...
lava
LAVA: Large Scale Automated Vulnerability Addition Evaluating and improving bug-finding tools is currently difficult due to a shortage of ground truth corpora i.e., software that has known bugs with triggering inputs. LAVA attempts to solve this problem by automatically injecting bugs into...
spiderfoot
SpiderFoot is an open source intelligence OSINT automation tool. It integrates with just about every data source available and utilises a range of methods for data analysis, making that data easy to navigate. SpiderFoot has an embedded web-server for providing a clean and intuitive web-based...
paskto
Paskto - Passive Web Scanner Paskto will passively scan the web using the Common Crawl internet index either by downloading the indexes on request or parsing data from your local system. URLs are then processed through Nikto and known URL lists to identify interesting content. Hash signatures are...
XPRTestSuite
XProtect Remediator 테스트 스위트 향후 XProtect RemediatorXPR 연구를 돕기 위한 스크립트와 문서 모음으로, Black Hat USA 2025에서 발표되었습니다. 이 저장소에 대해 이 저장소에는 다음이 포함되어 있습니다: XPR의 각 스캔 모듈의 교정remediation을 재현하는 무해한 최소 파일과 프로세스를 생성하는 스크립트 RemediationBuilder DSL을 사용하여 역공학한 XPR 교정또는 탐지 로직을 설명하는 문서 이 스크립트와 문서는 XPR 역공학의 검증 목적으로 제작되었습니다...
keimpx
Introduction keimpx is an open source tool, released under the Apache License 2.0. It can be used to quickly check for valid credentials across a network over SMB. Credentials can be: Combination of user / plain-text password. Combination of user / NTLM hash. Combination of user / NTLM logon...
detection-rules
Detection Rules Detection Rules is the home for rules used by Elastic Security. This repository is used for the development, maintenance, testing, validation, and release of rules for Elastic Security’s Detection Engine. This repository was first announced on Elastic's blog post, Elastic Security...
tcpreplay
Tcpreplay Tcpreplay is a suite of GPLv3 licensed utilities for UNIX and Windows under Cygwin for editing and replaying network traffic previously captured by tools like tcpdump and Wireshark. It classifies traffic as client or server, rewrites Layer 2/3/4 headers, and replays it back onto the...
Shellcode-Test-Harness
Harness de test de shellcode Un harness de test léger conçu pour accélérer le développement de shellcode en fournissant un environnement d'exécution avec des diagnostics de plantage intégrés et une redirection de la sortie de débogage. Fonctionnalités Exécute le shellcode par écrasement de module...
cve-2025-55182-test-lab-windows
Test de CVE-2025-55182 React2Shell ⚠️ Avertissement : Contient une vulnérabilité d'exécution de code à distance RCE fonctionnelle. 📋 Table des matières Aperçu Informations sur la vulnérabilité Démarrage rapide Démonstration d'attaque réelle Environnement de test Règles de défense WAF Structure des...
datapower-redis-rce-exploit
datapower-redis-rce-exploit CVE-2020-5014 POC для эксплойта IBM DataPower Authenticated Redis RCE, злоупотребляющего функцией «Тестовое сообщение». Полное объяснение и демонстрация на YouTube Статья в блоге на tomcope.com Объяснение Используя функцию DataPower «Отправить тестовое сообщение»,...
wycheproof
Проект Wycheproof Проект Wycheproof — это репозиторий, управляемый сообществом, содержащий тестовые векторы, которые могут использоваться разработчиками криптографических библиотек для проверки на известные атаки, несоответствия спецификациям и другие различные ошибки реализации. Тестовые векторы...
CVE-2014-0346
CVE-2014-0160 Heartbleed Тестовый скрипт Этот скрипт проверяет наличие пресловутой уязвимости Heartbleed CVE-2014-0160 на SSL/TLS-серверах. 📜 Авторы Основан на оригинальном скрипте Джареда Стаффорда [email protected] Изменён и обновлён Сонгюль Кызылай в образовательных и исследовательских...
test_for6387
cve-2024-6387-poc...
ffuf
ffuf - Fuzz Faster U Fool A fast web fuzzer written in Go. Installation Example usage Content discovery Vhost discovery Parameter fuzzing POST data fuzzing Using external mutator Configuration files Help Interactive mode Installation Download a prebuilt binary from releases page, unpack and run! ...
jndi-ldap-test-server
jndi-ldap-test-server Это минималистичный LDAP-сервер, предназначенный для проверки уязвимости к JNDI+LDAP инъекционным атакам в Java, особенно к CVE-2021-44228. Как проверить уязвимость к CVE-2021-44228 1. Скачайте бинарный файл тестового сервера для вашей платформы все бинарные файлы можно найт...