OSINT-Cheat-sheet

OSINT CHEAT SHEET - Elenco degli strumenti OSINT Contiene un elenco di strumenti OSINT, suggerimenti OSINT, set di dati, transform di Maltego e altro. Ci sono strumenti gratuiti e a pagamento che puoi utilizzare e il proprietario non è responsabile assumiti i tuoi rischi, solo per scopi di...

mtr

WHAT IS MTR? mtr combines the functionality of the 'traceroute' and 'ping' programs in a single network diagnostic tool. As mtr starts, it investigates the network connection between the host mtr runs on and a user-specified destination host. It sends probes to the destination with successively...

mhr-cfw

MHR-CFW MITM Domain-Fronted HTTP Relay + Uscita Cloudflare Worker Inglese| Persiano ---|--- Come Funziona 1 - GAS + Uscita Cloudflare Worker root@kitploit: Client - Local Relay - Google/CDN Front - GAS Google Apps Script Relay - Cloudflare Worker - Exit | +- Mostra www.google.com al filtro DPI di...

msticpy

MSTIC Jupyter and Python Security Tools Microsoft Threat Intelligence Python Security Tools. msticpy is a library for InfoSec investigation and hunting in Jupyter Notebooks. It includes functionality to: query log data from multiple sources enrich the data with Threat Intelligence, geolocations a...

jarm

JARM Please read the initial JARM blog post for more information. JARM is an active Transport Layer Security TLS server fingerprinting tool. JARM fingerprints can be used to: Quickly verify that all servers in a group have the same TLS configuration. Group disparate servers on the internet by...

slsa

SLSA "salsa" is Supply-chain Levels for Software Artifacts SLSA pronounced "salsa" is a security framework from source to service, giving anyone working with software a common language for increasing levels of software security and supply chain integrity. It’s how you get from safe enough to bein...

python-uncompyle6

|buildstatus| |Pypi Installs| |Latest Version| |Supported Python Versions| |packagestatus| .. contents:: uncompyle6 A native Python cross-version decompiler and fragment decompiler. The successor to decompyle, uncompyle, and uncompyle2. I gave a talk on this at BlackHat Asia 2024 . Introduction...

GHSA-7W8C-QGXG-M7JX LibreNMS — Stored XSS via SNMP/Syslog Data in Legacy Templates

Summary Multiple legacy PHP template files in LibreNMS directly output SNMP-sourced and syslog-sourced data into HTML without escaping. An attacker who controls a monitored network device via compromised SNMP agent or syslog sender can inject arbitrary JavaScript that executes when any...

LibreNMS — Stored XSS via SNMP/Syslog Data in Legacy Templates

Summary Multiple legacy PHP template files in LibreNMS directly output SNMP-sourced and syslog-sourced data into HTML without escaping. An attacker who controls a monitored network device via compromised SNMP agent or syslog sender can inject arbitrary JavaScript that executes when any...

awesome-osint-arsenal

🔍 FANTASTICO OSINT ARSENAL Il kit definitivo di Open-Source Intelligence + Sicurezza 751+ strumenti · 50 categorie · Installer multi-distro · OSINT georgiana · Supporto Termux Il kit di strumenti OSINT e sicurezza più completo su internet — ogni strumento con istruzioni di installazione o un link...

ST3GG

root@kitploit: ███████╗████████╗██████╗ ██████╗ ██████╗ ██╔════╝╚══██╔══╝╚════██╗██╔════╝ ██╔════╝ ███████╗ ██║ █████╔╝██║ ███╗██║ ███╗ ╚════██║ ██║ ╚═══██╗██║ ██║██║ ██║ ███████║ ██║ ██████╔╝╚██████╔╝╚██████╔╝ ╚══════╝ ╚═╝ ╚═════╝ ╚═════╝ ╚═════╝ ⊰•-•✧ DAS ULTIMATIVE STEGANOGRAPHIE-TOOLKIT ✧•-•⊱...

redamon

Unmask the hidden before the world does An autonomous AI framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then goes further by triaging every finding, implementing code fixes, and opening pull requests on your repository. From first packet to merge...

IOSSecuritySuite

⭐️ Vuoi diventare un ingegnere certificato di sicurezza delle applicazioni iOS? ⭐️ Dai un'occhiata al nostro corso pratico e completamente online su: https://courses.securing.pl/courses/iase Descrizione ISS di @r3ggi 🌏 iOS Security Suite è una libreria avanzata e facile da usare per la sicurezza...

UACME

UACMe विंडोज उपयोगकर्ता खाता नियंत्रण UAC को हराने के लिए विंडोज में निर्मित AutoElevate बैकडोर का दुरुपयोग करना। यह परियोजना विभिन्न UAC बायपास तकनीकों का प्रदर्शन करती है और विंडोज सुरक्षा तंत्र को समझने के लिए एक शैक्षिक संसाधन के रूप में कार्य करती है। ⚠️ चेतावनी : यह उपकरण सुरक्षा कमजोरियों क...

opencve

What is OpenCVE? OpenCVE is a Vulnerability Intelligence Platform that helps you monitor and manage CVEs efficiently. It aggregates vulnerabilities from multiple sources MITRE, NVD, RedHat, Vulnrichment... and lets you filter, track, and organize them by vendor, product, severity, and more. You c...

reko

reko - a general purpose decompiler. Reko Swedish: "decent, obliging" is a decompiler for machine code binaries. This project is freely available under the GNU General Public License. The project consists of front ends, core decompiler engine, and back ends to help it achieve its goals. A...

malicious-pdf

Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...

reverse-SynthID

Reverse-Engineering di SynthID Scoprire, rilevare e rimuovere chirurgicamente la filigrana AI di Google tramite analisi spettrale Visitateci su PitchHut Questo fork aggiunge un'app desktop drag and drop per il bypass V3, nessuna riga di comando necessaria dopo l'installazione. Vedi gui/README.md...

ProcDump-for-Linux

ProcDump ProcDump is a Linux and Mac reimagining of the classic ProcDump tool from the Sysinternals suite of tools for Windows. ProcDump provides a convenient way for Linux and Mac developers to create core dumps of their application based on performance triggers. ProcDump for Linux and Mac is pa...

fully-homomorphic-encryption

The FHE Team at Google, in partnership with multiple collaborators, is working to Unlock Fully Homomorphic Encryption for Google and the world. Make it Easy Make it Fast at Scale What started with a C++ transpiler, has morphed into two new libraries: HEIR is the new development platform and...