uberscan

uberscan Security program for pen-testing servers, routers and IoT devices btw my bitcoin address is 3A7yuqBcPAcVEM59bNAVQdTCmkxRb5JRgE Here's an alternative, also for BTC, as I've been getting reports of some bitcoin wallets not supporting certain addresses: 1PEDKUiUTxGNJ3XTPfXCTAjpzVzX1VZAme...

Dosinator

DoSinator DoSinator is a powerful Denial of Service DoS testing tool developed in Python. Designed for security professionals and researchers, this tool allows them to simulate various DoS attacks, providing a realistic environment for assessing the resilience of networks, systems, and applicatio...

CVE2022-1388_TestAPI

CVE2022-1388TestAPI A Test API for testing the POC against CVE-2022-1388 To run from host. pip install -r requirements.txt uvicorn main:app --reload To run from Docker. make build make run...

CVE-2025-61882-POC

CVE-2025-61882 Security Testing Tool 🚨 CRITICAL LEGAL WARNING See our blog post for technical details THIS TOOL IS FOR AUTHORIZED SECURITY TESTING ONLY ╔══════════════════════════════════════════════════════════════╗ ║ ║ ║ 🚨 UNAUTHORIZED ACCESS TO COMPUTER SYSTEMS IS ILLEGAL 🚨 ║ ║ ║ ║ By using th...

msdat

Quentin HARDY --- [email protected] [email protected] MSDAT MSDAT M icros oft SQL D atabase A ttacking T ool is an open source penetration testing tool that tests the security of Microsoft SQL Databases remotely. Usage examples of MSDAT: You have a Microsoft database listening remotely...

Log4j-JNDIServer

Log4j-JNDIServer This project will help to test the Log4j CVE-2021-44228/CVE-2021-45046 vulnerabilities. Installation and Building Load the project on Intellij Idea Select JDK in "Projects Settings" CTRL + ALT + SHIFT + S In "Project Settings", create the Artifact - "Artifacts" - "Create JAR from...

badsuccessor

BadSuccessor.py A penetration testing tool that exploits the dMSA delegated Managed Service Account privilege escalation vulnerability in Windows Server 2025 Active Directory environments. Legal Disclaimer This tool is for authorized penetration testing and security research only. Using it agains...

Juiceshopgl

Juice Shop Logo OWASP Juice Shop Test Coverage Maintainability The most trustworthy online shop out there. @dschadow — The best juice shop on the whole internet! @shehackspurple — Actually the most bug-free vulnerable application in existence! @vanderaj — First you 😂😂then you 😢 @kramse — But this...

crucible

██████╗██████╗ ██╗ ██╗ ██████╗██╗██████╗ ██╗ ███████╗ ██╔════╝██╔══██╗██║ ██║██╔════╝██║██╔══██╗██║ ██╔════╝ ██║ ██████╔╝██║ ██║██║ ██║██████╔╝██║ █████╗ ██║ ██╔══██╗██║ ██║██║ ██║██╔══██╗██║ ██╔══╝ ╚██████╗██║ ██║╚██████╔╝╚██████╗██║██████╔╝███████╗███████╗ ╚═════╝╚═╝ ╚═╝ ╚═════╝ ╚═════╝╚═╝╚════...

ddossnake

ddossnake terminal Load tester. Rust, full screen terminal app. Green on black, boot sequence, packet graph, and a menu for every function the old go build had. build Rust 1.75 or newer. No cgo, no other tools. cargo build --release Binary lands in target/release/ddossnake.exe, or...

COFFLoader

COFF Loader This is a quick and dirty COFF loader AKA Beacon Object Files. Currently can run un-modified BOF's so it can be used for testing without a CS agent running it. The only exception is that the injection related beacon compatibility functions are just empty. The main goal is to provide a...

PRET

PRET - Printer Exploitation Toolkit Is your printer secure? Check before someone else does... PRET is a new tool for printer security testing developed in the scope of a Master's Thesis at Ruhr University Bochum. It connects to a device via network or USB and exploits the features of a given...

Dirty-COW-CVE-2016-5195-Testing

Dirty-COW-CVE-2016-5195-Testing Dirty COW CVE-2016-5195 Testing...

aura-inspector

aura-inspector This is not an officially supported Google product. This project is not eligible for the Google Open Source Software Vulnerability Rewards Program. Introduction aura-inspector is a Swiss Army knife of Salesforce Experience Cloud testing. It facilitates in discovering misconfigured...

DirtyCOWTester

Dirty COW Tester...

sslscan

sslscan2 sslscan version 2 has now been released. This includes a major rewrite of the backend scanning code, which means that it is no longer reliant on the version of OpenSSL for many checks. This means that it is possible to support legacy protocols SSLv2 and SSLv3, as well as supporting TLSv1...

macnoise

MacNoise MacNoise generates real macOS telemetry: network connections, file writes, process spawns, plist mutations, TCC probes, and more. Point it at a machine running your EDR, SIEM, or firewall stack and see what actually fires - not what the vendor datasheet claims will fire. For background o...

CVE-2026-59827

Authorized Metabase CVE-2026-59827 Penetration Testing Tool An authorized security assessment utility for validating the presence of CVE-2026-59827 in Metabase deployments during approved penetration testing engagements. This tool is designed to demonstrate the existence of the vulnerability whil...

Integer-Overflow-test

This repository does not have a README...

openssl-ccs-cve-2014-0224

Adam Langley's tool for testing for OpenSSL CVE-2014-0224, originally published here: https://www.imperialviolet.org/2014/06/05/earlyccs.html To build the tool: $ export GOPATH=$pwd $ go build openssl-ccs-cve-2014-0224.go Tested with go 1.2.2 and 1.3. The src/my-tls directory contains the patched...