sound4-directory-listing

Insignias Licencia MIT...

SecurityExplained

Security Explained SecurityExplained is a new series after the previous learning challenge series Learn365. The aim of SecurityExplained series is to create informational content in multiple formats and share with the community to enable knowledge creation and learning. Below are the various...

osed-scripts

osed-scripts bespoke tooling for offensive security's Windows Usermode Exploit Dev course OSED Table of Contents Standalone Scripts egghunter.py find-gadgets.py shellcoder.py install-mona.sh attach-process.ps1 WinDbg Scripts find-ppr.py find-bad-chars.py search.py Standalone Scripts Installation:...

TarantuBench

TarantuBench v1 A benchmark for evaluating AI agents on web security challenges, generated by the TarantuLabs engine. What is this? TarantuBench is a collection of 100 vulnerable web applications, each containing a hidden flag TARANTU.... An agent's job is to find and extract the flag by...

wwwgrep

WWWGrep OWASP Foundation Web Respository Author: Mark Deen & Aditi Mohan Introduction WWWGrep is a rapid search “grepping” mechanism that examines HTML elements by type and permits focused single, multiple file based URLs and recursive with respect to root domain or not searches to be performed...

quarantyne

=== ESTE PROYECTO ESTÁ ARCHIVADO === Quarantyne · Firewall web moderno 🛃 Seguridad web automatizada simplificada TL;DR Quarantyne es un proxy inverso que protege aplicaciones web y APIs de comportamientos fraudulentos, mal uso, bots y ciberataques en tiempo real. Requisitos Presentación...

gryffin

ARCHIVED Gryffin beta Gryffin is a large scale web security scanning platform. It is not yet another scanner. It was written to solve two specific problems with existing scanners: coverage and scale. Better coverage translates to fewer false negatives. Inherent scalability translates to capabilit...

golismero

¿Qué es GoLismero? GoLismero es un marco de código abierto para pruebas de seguridad. Actualmente está orientado a la seguridad web, pero puede ampliarse fácilmente a otros tipos de escaneos. Las características más interesantes del marco son: Independencia real de plataforma. Probado en Windows,...

parameth

parameth This tool can be used to brute discover GET and POST parameters Often when you are busting a directory for common files, you can identify scripts for example test.php that look like they need to be passed an unknown parameter. This hopefully can help find them. example scan The -off flag...

blind-sql-bitshifting

Blind SQL Injection via Bitshifting This is a module that performs blind SQL injection by using the bitshifting method to calculate characters instead of guessing them. It requires 7/8 requests per character, depending on the configuration. Usage root@kitploit: import blind-sql-bitshifting as x...

explo

explo explo is a simple tool to describe web security issues in a human and machine readable format. By defining a request/condition workflow, explo is able to exploit security issues without the need of writing a script. This allows to share complex vulnerabilities in a simple readable and...

tbhm

La Metodología del Cazador de Bugs TBHM ¡Bienvenido! Este repositorio es una colección de consejos trucos herramientas análisis de datos y notas relacionadas con las evaluaciones de seguridad de aplicaciones web y, más específicamente, con la caza de bugs en programas de bug bounty. Las secciones...

Introducing AI Assistant for Akamai Web Security Analytics

Discover how AI Assistant for Akamai Web Security Analytics helps SOC and AppSec teams investigate events faster and take guided action with natural language...

CHIYU TCP/IP Converter - Cross-Site Scripting

CHIYU BF-430, BF-431 and BF-450M TCP/IP Converter devices contain a cross-site scripting vulnerability due to a lack of sanitization of the input on the components man.cgi, if.cgi, dhcpc.cgi, and ppp.cgi. id: CVE-2021-31250 info: name: CHIYU TCP/IP Converter - Cross-Site Scripting author: geeknik...

offensive-security-writeups

Offensive Security Write-ups from the CTF challenges tackled...

PENTEST-LAB

PENTEST-LAB A modern vulnerable application & cyber range for learning web, API, cloud, AI, and blue-team security through hands-on attack chains. root@kitploit: ╔═══════════════════════════════════════════════════════════════╗ ║ ██████╗ ███████╗███╗ ██╗████████╗███████╗███████╗████████╗ ║ ║...

Google-chrome-zero-day

Google Chrome Zero-Day — Web Security Track Learn, practice, and defend — ethically. This repository contains course materials and labs for the Web Security module . Use only in controlled, legal environments VMs, lab networks and follow the Responsible Disclosure & Code of Conduct below. Table o...

ImCurvin

ImCurvin' ImCurvin es una herramienta de código abierto para auditoría de seguridad web y pruebas de penetración, diseñada como una Prueba de Concepto PoC para automatizar la detección de configuraciones erróneas del entorno, rastrear planos de configuración expuestos y sondear vulnerabilidades d...

CVE-2026-79070

A flaw was found in Google Chrome. Incorrect reference resolution within the browser's cache allows a remote attacker to bypass the web origin policy. This can be achieved by enticing a user to visit a specially crafted HTML page, potentially leading to unauthorized access to sensitive informatio...

DEBIAN-CVE-2026-79141

Incorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...