openclaw-hardening-check

This script only reads. It fixes nothing and does not guarantee that you are safe. Green output means only that the checks listed below passed—and nothing more. OpenClaw hardening check openclaw-hardening-check.mjs is a small, dependency-free, offline review of an OpenClaw installation. It reads...

GitLeaks

GitLeaks Container Image Opinionated gitleaks build for secret scanning in local workflows and pipelines. Features Builds gitleaks from the tagged upstream source with pinned Go toolchains for reproducible binaries. GitLab CI Component at niclas-zone/ci/gitleaks. Usage Pull the image podman pull...

AES-Killer

AES Killer Burpsuite Plugin Burpsuite Plugin to decrypt AES Encrypted traffic on the fly Requirements Burpsuite Tested on Burpsuite 2021.4 Windows 10 Ubuntu & PopOS What it does The IProxyListener decrypt requests and encrypt responses, and an IHttpListener than encrypt requests and decrypt...

PatrowlManager

Codacy Badge PatrOwl PatrOwl is a scalable, free and open-source solution for orchestrating Security Operations. PatrowlManager is the Front-end application for managing the assets, reviewing risks on real-time, orchestrating the operations scans, searches, API calls, ..., aggregating the results...

403bypasser

403bypasser Türkçe 403bypasser , hedef sayfalardaki erişim kontrolü kısıtlamalarını aşmak için kullanılan teknikleri otomatikleştirir. Bu araç geliştirilmeye devam edecektir, katkılara açıktır. English 403bypasser automates the techniques used to circumvent access control restrictions on target...

discover

Discover Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Ubuntu. Limited support for Kali Linux. Lee Baird @discoverscripts Jay "L1ghtn1ng" Townsend @jaytownsend...

CVE-2025-32206

CVE-2025-32206 - WordPress Processing Projects "Unrestricted Upload of File with Dangerous Type vulnerability in LABCAT Processing Projects allows attackers to upload a web shell to a web server. This can lead to full compromise." 🧑‍💻 Exploit Description This Python exploit script targets WordPress...

check_struts

checkstruts This project has been created following 2017 Equifax exploit The checkstruts.sh script aims at retrieving any Apache struts libraries version and location found and/or loaded on the system. It can be run directly on a server, or with the provided Ansible playbook, to handle several...

wlctl

wlctl WiFi TUI for NetworkManager. Why impala is a great wifi TUI but it talks to iwd. If your distro already runs NetworkManager most do — GNOME, KDE, Ubuntu, Fedora, Pop, …, you can't drop impala in without ripping the stack out. wlctl keeps the impala UX and points it at NetworkManager, so it...

EasyScan

EasyScan EasyScan is a Python script that analyzes the security of a given website by inspecting its HTTP headers, DNS records, and other configurations. The script generates a security report with a score, grade, and recommendations for addressing potential vulnerabilities. Features & Test Cases...

kernel-hardening-checker

kernel-hardening-checker formerly kconfig-hardened-check Motivation There are plenty of security hardening options for the Linux kernel. A lot of them are not enabled by the major distros. We have to enable these options ourselves to make our systems more secure. But nobody likes checking configs...

DPAPISnoop

DPAPISnoop A C tool that extracts crackable DPAPI hashes from user MasterKeys and CREDHIST files. Targets both the MasterKey $DPAPImk$ and the full CREDHIST chain $credhist$, supporting local paths and remote SMB shares. What it extracts MasterKey hashes $DPAPImk$ MasterKey for each user can be...

house

/ | \ / / | | / // \ \ Y | /\ \ / | / /|// \ / House / / Dynamic Mobile Analysis Tool Contact: [email protected] House : A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python. It is designed for helping assess mobile applications by...

Artemis

Artemis is a modular vulnerability scanner. It's the tool that powers CERT PL scanning activities by checking various aspects of website security and building easy-to-read messages ready to be sent to the scanned organizations. Quick Start 🔨 | Docs 📚 If you want to use additional modules that...

GitDorker

GitDorker GitDorker is a tool that utilizes the GitHub Search API and an extensive list of GitHub dorks that I've compiled from various sources to provide an overview of sensitive information stored on github given a search query. The Primary purpose of GitDorker is to provide the user with a cle...

rayhunter

Rayhunter Rayhunter is a project for detecting IMSI catchers, also known as cell-site simulators or stingrays. It was first designed to run on a cheap mobile hotspot called the Orbic RC400L, but thanks to community efforts, it can support some other devices as well. It's also designed to be as ea...

owasp-scs

OWASP Smart Contract Security SCS Join the OWASP Smart Contract Security Slack Discussions and Support This is the official GitHub Repository of the OWASP Smart Contract Security SCS project. This comprehensive initiative provides security standards, guidance, and resources for smart contract...

REW-sploit

REW-sploit Need help in analyzing Windows shellcode or attack coming from Metasploit Framework or Cobalt Strike or may be also other malicious or obfuscated code? Do you need to automate tasks with simple scripting? Do you want help to decrypt MSF generated traffic by extracting keys from payload...

Nim-RunPE

Nim-RunPE A Nim implementation of reflective PE-Loading from memory. The base for this code was taken from RunPE-In-Memory - which I ported to Nim. You'll need to install the following dependencies: nimble install ptrmath winim I did test this with Nim Version 1.6.2 only, so use that version for...

Snoopy

| || | | || || || || | | | | || || || || || || || | | | | || | | || | | || || || | | || || || || || || || | | || | | || || || | | | |||| |||||||| || V0.1 "Amy, technology isn't intrinsically good or evil. It's how it's used. Like the Death Ray." -Professor Farnsworth Welcome to Snoopy; a...