secrets-manager-rs

secs-man secs-man is a tool for managing backups of secrets with tool-independence in mind: if you encrypt your secrets with this software, you should be able to decrypt and restore them without this software. Even if secs-man disappears from the face of the Earth, your data is still accessible...

EternalView

EternalView EternalView is an all in one basic information gathering CLI tool made purely in BASH EternalView in action CAUTION: This tool is purely for educational purposes, don't use it on any website without the permission of it's owner. The user is responsible for his/her actions! Update:...

EvilWinRM-NG

EvilWinRM-NG Getting started To make it easy for you to get started with GitLab, here's a list of recommended next steps. Already a pro? Just edit this README.md and make it your own. Want to make it easy? Use the template at the bottom! Add your files Create or upload files Add files using the...

Bug-Bounty-Wordlists

Bug-Bounty-Wordlists A repository that includes all the important wordlists used while bug hunting. Wordlists will be updated regularly Also you are welcome to contribute in this project and upload your own wordlists. Highly Appreactiable. Note : This repository contains some public available...

SIPI

Simple IP Information Tools sIPI for IP Reputation Data Analysis @st2labs Simple IP Information Tool @st2labs Author : Julian J. Gonzalez Caracuel - Twitter: @rhodius | @seguriadxato2 | @st2labs Vesion : 0.1 Abstracts This tool is aimed for Incident Response Team and anyone what's want to know th...

JAW

J A W Website | Docs | Setup | Crawler | Quick Start Docker Example JAW An open-source, prototype implementation of property graphs for JavaScript based on the esprima parser, and the EsTree SpiderMonkey Spec. JAW can be used for analyzing the client-side of web applications and JavaScript-based...

chackd

chackd chackd is a daemon which randomize each second the kernel parameter tcpchallengeacklimit to prevent side channel attacks Introduction A shortly presented side-channel attack has given strong attention of the community 1 . For lots of servers or smartphone devices this attack considered...

SecureAI-Scan

SecureAI-Scan An offline scanner for the code that talks to LLMs, MCP servers, vector stores, and Agent Skills. It finds prompt injection, MCP command injection and path traversal, RAG data leaks, and poisoned skills, and it proves each finding with a source → sink trace through your real imports...

urless

About - v2.7 This is a tool used to de-clutter a list of URLs. As a starting point, I took the amazing tool uro by Somdev Sangwan. But I wanted to change a few things, make some improvements like deal with GUIDs and make it more customizable. Installation urless supports Python 3. Install urless ...

BlackWidow

ABOUT: BlackWidow is a python based web application spider to gather subdomains, URL's, dynamic parameters, email addresses and phone numbers from a target website. This project also includes Inject-X fuzzer to scan dynamic URL's for common OWASP vulnerabilities. DEMO VIDEO: BlackWidow Demo...

wordlist.rb

Wordlist Source Issues Documentation Description Wordlist is a Ruby library and CLI for reading, combining, mutating, and building wordlists, efficiently. Features Supports reading .txt wordlists, and .gz, .bz2, .xz, .zip, and .7z compressed wordlists. Supports building wordlists from arbitrary...

domi-owned

Domi-Owned Summary Domi-Owned is a tool used for compromising IBM/Lotus Domino servers. Tested on IBM/Lotus Domino 8.5.2, 8.5.3, 9.0.0, and 9.0.1 running on Windows and Linux. Requirements Domi-Owned uses Python 3, which can be install through your distribution's package manager apt, yum, etc...

CrackMapExecWin

CrackMapExecWin Description The great CrackMapExec tool compiled for Windows Features Latest 2.2 version Compiled for x86 so should work on x86 and x64 platforms Usage 1. Download the whole archive 2. Extract it and run crackmapexec.exe 3. Profit Older versions Browse the release section to find...

iKy

Description | Installation | Website | Modules | Issues | Supporting iKy Description iKy is an OSINT tool that collects information from an email address or other selectors and displays the results in a visual interface. pending update: reflects the previous frontend Video Demo Installation...

teletunnel

TeleTunnel v2 A Telegram-based remote access tool for Windows. Disclaimer: For authorized use on systems you own only ! Please 🙇 Features Remote administration via a Telegram bot. Secure control only accepts commands from your specified Telegram user ID. The bot have these features: ᴛᴇʟᴇᴛᴜɴɴᴇʟ ᴠ2...

Subhunter

Subhunter A fast subdomain takeover tool Description: Subdomain takeover is a common vulnerability that allows an attacker to gain control over a subdomain of a target domain and redirect users intended for an organization's domain to a website that performs malicious activities, such as phishing...

kraken

Warning I have been reviewing the Kraken-Client code and since this was my first ever react app, its old, clunky and it needs major improvement the server needs some work too. In the next few weeks/months I will do my best to rewrite it in either updated React or in another framework. Please feel...

botb

Break out the Box BOtB BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies. What does it do? BOtB is a CLI tool which allows you to: Exploit common container vulnerabilities Perform commo...

Arduino-Netcat-Backdoor

Arduino - Netcat - Backdoor for Windows Name suggestions welcome. Proof Of Concept. Not intended for real life use. I can't take responsibillity for stuff other people do with this Attacks a Windows machine running Windows 7 or later, creating a persistent Backdoor. Funtionallity The Arduino-scri...

CANalyzat0r

This software project is a result of a Bachelor's thesis created atSCHUTZWERK in collaboration with Aalen University by Philipp Schmied @CaptnBanana. Please refer to the correspondingblog post for more information. Why another CAN tool? Built from scratch with new ideas for analysis mechanisms...