zeek-spicy-wireguard

zeek-spicy-wireguard This package provides a Spicy based Wireguard protocol analyzer for Zeek. You must install Spicy to use this package. This is a straightforward implementation following https://www.wireguard.com/protocol/ Wireguard Wireguard Logs separator \x09 setseparator , emptyfield empty...

poorskeme

poorSKeme OSINT - Data Visualization - Blockchain - Awareness - Scam Install Go to this site and click on the downdload button Or go to release section. Download the ZIP file called poorSKeme.zip Unzip it, install requeriments and execute it. unzip poorSKeme.zip cd poorSKeme pip install -r...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

super

SUPER Android Analyzer Secure, Unified, Powerful and Extensible Rust Android Analyzer SUPER is a command-line application that can be used in Windows, MacOS X and Linux, that analyzes .apk files in search for vulnerabilities. It does this by decompressing APKs and applying a series of rules to...

MemProcFS-Analyzer

MemProcFS-Analyzer MemProcFS-Analyzer.ps1 is a PowerShell script utilized to simplify the usage of MemProcFS and to optimize your memory analysis workflow. MemProcFS - The Memory Process File System by Ulf Frisk https://github.com/ufrisk/MemProcFS Features: Fast and easy memory analysis! You can...

cfripper

CFRipper CFRipper is a Library and CLI security analyzer for AWS CloudFormation templates. You can use CFRipper to prevent deploying insecure AWS resources into your Cloud environment. You can write your own compliance checks by adding new custom plugins. Docs and more details available in...

BloodBash

BloodBash A SquidSec Open Source Project SquidOffense.com · GitHub BloodBash is an open source offline SharpHound and AzureHound JSON analyzer, created and managed by SquidSec. It builds a graph, surfaces AD/Entra attack paths and misconfigs, and prints prioritized findings. No Neo4j or BloodHoun...

latma

Lateral movement analyzer tool Lateral movement analyzer LATMA collects authentication logs from the domain and Azure AD environments and searches for potential lateral movement attacks and suspicious activity, the lateral movement can be in the AD environment or between cloud and on-prem. The to...

spidump

spidump — SPI/QSPI trace capture & reconstruction spidump parses logic-analyzer captures of a device reading its SPI/QSPI NOR flash at boot and reconstructs the flash image from the read traffic — no direct chip read required. The flash command set is modelled with Scapy, so a read transaction is...

airpydump

airpydump Analyze Wireless Packets on the fly. Currently supporting three working Modes Reader, Live, Stealth Description airpydump is a wireless packet analyzer, providing the interface most likely that of airodump-ng from aircrack suite. It currently provides three working modes which are Reade...

peanalyzer

peanalyzer Advanced Portable Executable File Analyzer Python 3.5.2 : Tested Working Usage python peanalyzer.py --file file.exe --show all|file-path|general|dos-header|file-header|optional-header|data-directory|section-headers|imports python peanalyzer.py --file file.exe --disassemble all...

ManageEngine Firewall Analyzer 7.2 - Cross-Site Scripting

Multiple cross-site scripting vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow remote attackers to inject arbitrary web script or HTML via the 1 subTab or 2 tab parameter to createAnomaly.do; 3 url, 4 subTab, or 5 tab parameter to mindex.do; 6 tab parameter to index2.do; or 7 port...

SolarWinds Database Performance Analyzer 11.1.457 - Cross-Site Scripting

SolarWinds Database Performance Analyzer 11.1.457 contains a reflected cross-site scripting vulnerability in its idcStateError component, where the page parameter is reflected into the HREF of the 'Try Again' Button on the page, aka a /iwc/idcStateError.iwc?page= URI. id: CVE-2018-19386 info: nam...

sast-rules

Semgrep rules This is the central Semgrep rule repository that hosts the Semgrep rules for the GitLab semgrep analyzer. The repository is structured as follows: . ├── mappings │ ├── findsecbugs.yml │ ├── eslint.yml │ └── ... ├── rules │ ├── lpgl │ │ ├── java │ │ │ ├── webview │ │ │ │ ├──...

GPT_Vuln-analyzer

GPTVuln-analyzer GVA GVA is an AI-assisted reconnaissance and vulnerability-analysis toolkit. It runs the scan nmap, DNS, subdomains, JWT, PCAP, GeoIP, then hands the raw output to a large language model that returns a structured, pentester-oriented analysis. It ships with both a command-line...

zeek-openvpn

zeek::openvpn THIS IS DEPRECATED IN FAVOR OF https://github.com/corelight/zeek-spicy-openvpn A plugin to detect and parse OpenVPN in the following modes: UDP w/ TLS UDP w/ TLS & TLS Auth TCP w/ TLS TCP w/ TLS & TLS Auth So far this will not detect shared key mode for UDP or TCP. If this protocol...

tcpdump

TCPDUMP 4.x.y by The Tcpdump Group To report a security issue please send an e-mail to [email protected]. To report bugs and other problems, contribute patches, request a feature, provide generic feedback etc please see the guidelines for contributing in the tcpdump source tree root. Anonymo...

dae

dae 简体中文 Config-driven Dart AOT snapshot analyzer and debug-info exporter. No Dart SDK, never runs the target: locates the embedded snapshot inside Mach-O / ELF / PE, exports the same symbols and structs as blutter for IDA / radare2 / Frida with six deliberate corrections where the reference it w...

JSAnalyzer

JS Analyzer - Burp Suite Extension by Jensec https://x.com/jensec A powerful Burp Suite extension for JavaScript static analysis. Extracts API endpoints, URLs, secrets, and email addresses from JavaScript files with intelligent noise filtering. The goal is reduce noise as much as possible to ensu...

L0p4Map

L0p4Map Nmap was blind. L0p4Map sees. Professional network monitoring & visualization tool built for security researchers. https://github.com/user-attachments/assets/745eb888-0636-47e8-9293-38a706a8e897 What is L0p4Map? L0p4Map is a professional grade network monitoring tool that combines the pow...