nodejsscan

nodejsscan Static security code scanner SAST for Node.js applications powered by libsast and semgrep. Made with in India Support nodejsscan Donate via Paypal: Sponsor the Project: e-Learning Courses & Certifications OpSecX Node.js Security: Pentesting and Exploitation - NJS Run nodejsscan docker...

RFIDIOt

/ RFIDIOt.py - RFID IO tools for python Adam Laurie [email protected] http://rfidiot.org/ This code is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or a...

beagle

Beagle 1. About Beagle 2. Installation 1. Docker 2. Python Package 3. Configuration 3. Web Interface 1. Uploading Data 2. Browsing Existing Graphs 3. Graph Interface 1. Inspecting Nodes and Edges 2. Expanding Neighbours 3. Hiding Nodes 4. Running Mutators 5. Toggling Node and Edge Types 6...

beagle

Beagle 1. Über Beagle 2. Installation 1. Docker 2. Python-Paket 3. Konfiguration 3. Weboberfläche 1. Daten hochladen 2. Vorhandene Graphen durchsuchen 3. Graph-Schnittstelle 1. Knoten und Kanten inspizieren 2. Nachbarn erweitern 3. Knoten ausblenden 4. Mutators ausführen 5. Knoten- und Kantentype...

twittor

Twittor Ein heimlicher Python-basierter Backdoor, der Twitter Direktnachrichten als Command-and-Control-Server verwendet. Dieses Projekt wurde inspiriert von Gcat, das dasselbe tut, aber ein Gmail-Konto verwendet. Einrichtung Damit dies funktioniert, benötigst du: Ein Twitter-Konto Verwende ein...

boofuzz

.. image:: https://github.com/jtpereyda/boofuzz/raw/master/artwork/boo-logo-dark.svg :width: 60% :alt: boofuzz logo boofuzz: Network Protocol Fuzzing for Humans .. image:: https://github.com/jtpereyda/boofuzz/actions/workflows/test.yml/badge.svg?branch=master :target:...

xortool

xortool.py A tool to do some xor analysis: guess the key length based on count of equal chars guess the key base on knowledge of most frequent char Notice: xortool is now only running on Python 3. The old Python 2 version is accessible at the py2 branch. The pip package has been updated...

kippo

NOTE: For more recent development, check out Michel Oosterhof's fork Kippo Kippo is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker. Kippo is inspired, but not based on Kojoney. Demo Some interesti...

kippo

HINWEIS: Für neuere Entwicklungen siehe Michel Oosterhofs Fork Kippo Kippo ist ein SSH-Honeypot mit mittlerer Interaktion, der Brute-Force-Angriffe und vor allem die gesamte Shell-Interaktion des Angreifers protokolliert. Kippo ist von Kojoney inspiriert, baut aber nicht darauf auf. Demo...

APKiD

APKiD APKiD liefert Ihnen Informationen darüber, wie eine APK erstellt wurde. Es identifiziert viele Compiler, Packer, Obfuscatoren und andere seltsame Dinge. Es ist PEiD für Android. Weitere Informationen darüber, wofür dieses Tool verwendet werden kann, finden Sie hier: Android Compiler...

trape

trape stable v2.0 People tracker on the Internet: Learn to track the world, to avoid being traced. Trape is an OSINT analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time. It was created with the aim of teaching the world how larg...

unicorn

unicorn Written by: Dave Kennedy @HackingDave Website: https://www.trustedsec.com Magic Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David...

CVE-2025-50420

Vor Poppler Version 25.07.0 enthält das Dienstprogramm pdfseparate eine Schwachstelle in der PDFDoc-Verarbeitungslogik: manipulierte „/Annots“-Wörterbücher, die auf sich selbst oder gegenseitig referenzieren, führen zu einer Endlosrekursion in „PDFDoc::markAnnotations -- PDFDoc::markPageObjects -...

class-dump

class-dump class-dump एक कमांड-लाइन उपयोगिता है जो Mach-O फ़ाइलों के Objective-C खंड की जांच करती है। यह क्लास, कैटेगरी और प्रोटोकॉल के लिए घोषणाएँ उत्पन्न करता है। यह वही जानकारी है जो 'otool -ov' के उपयोग से मिलती है, लेकिन इसे सामान्य Objective-C घोषणाओं के रूप में प्रस्तुत किया जाता है। नवीनत...

IntruderPayloads

IntruderPayloads Eine Sammlung von Burpsuite Intruder Payloads, BurpBounty Payloads https://github.com/wagiro/BurpBounty, Fuzz-Listen und Pentesting-Methodiken. Um alle Repos von Drittanbietern herunterzuladen, führen Sie install.sh im selben Verzeichnis des IntruderPayloads-Ordners aus. Autor:...

fail2ban

/ | | | | / | | |/ /| ' / | ' \ || ,||/|./,|||| v1.1.0.dev1 20??/??/?? Fail2Ban: ban hosts that cause multiple authentication errors Fail2Ban scans log files like /var/log/auth.log and bans IP addresses conducting too many failed login attempts. It does this by updating system firewall rules to...

Apktool

Apktool Dies ist das Repository für Apktool. Die Website befindet sich im Repositoryapktool.org. Apktool ist ein Tool zum Reverse Engineering von Drittanbieter-, geschlossenen, binären Android-Apps. Es kann Ressourcen nahezu in die ursprüngliche Form dekodieren und nach einigen Änderungen...

Adobe ColdFusion - Cross-Site Scripting

Adobe Coldfusion versions 2016 update 16 and earlier, 2018 update 10 and earlier and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability. An attacker could abuse this vulnerability to execute arbitrary JavaScript code...

wpDiscuz <= 5.3.5 - SQL Injection

A SQL injection issue in the gVectors wpDiscuz plugin 5.3.5 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the order parameter of a wpdLoadMoreComments request. id: CVE-2020-13640 info: name: wpDiscuz = 5.3.5 - SQL Injection author: Sourabh-Sahu severity:...

Dompdf < v0.6.0 - Local File Inclusion

A vulnerability in dompdf.php in dompdf before 0.6.1, when DOMPDFENABLEPHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the inputfile parameter, as demonstrated by a...