Scout2

AWS Scout2 .. image:: https://travis-ci.org/nccgroup/Scout2.svg?branch=master :target: https://travis-ci.org/nccgroup/Scout2 .. image:: https://coveralls.io/repos/github/nccgroup/Scout2/badge.svg?branch=master :target: https://coveralls.io/github/nccgroup/Scout2 .. image::...

omigood

omigood OM I GOOD? This repository contains a free scanner to detect VMs vulnerable to one of the "OMIGOD" vulnerabilities discovered by Wiz's threat research team, specifically CVE-2021-38647. Original blog post from Wiz: https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure...

ZeroScout

🦅 ZeroScout The Autonomous Local & Cloud Threat Hunter "Don't just scan files. Visualize the battlefield." 🇹🇷 Türkçe Dökümantasyon İçin Tıklayın Read in Turkish 🚀 What is ZeroScout? ZeroScout is a next-generation threat hunting framework designed for Incident Responders DFIR , SOC Analysts , and...

CVE-2026-41096-Attack-Surface

CVE-2026-41096 Real World Attack Surface Attack surface in the real-world environment of CVE-2026-41096 Links Detailed analytical article Author: Two Seven One Three...

qyvora-anansi

; & ;; ;& ;;; ;;; ; ;;; ;;; ; ;;; ;;; ; ;; ;;; ;;; ;;;; ;;;; ;;; && ;;; ;;;; ;;;; ;;;; ;;;; ;;;;;;;;;; ;;;; ;;;; ;;;;;;;;; ;;;;;;;;;;;;;;;; ;;;;;;;;; &;;;;;;;;;;;;$x;;;;;;;;;;;; ;;;;;;;;;;&&&+++&&&;;;;;;;;;;; ;;;;;;;;; ;;;&&+&&&&&+&&;;; ;;;;;;;;;; ;;;& ;; ;;;&+&&&&&&&+&&;;; ;; &;;; ;;; ;;;;...

sdwan-scanner-CVE-2026-20127

Cisco SD-WAN Exposure Scanner CVE-2026-20127 A specialized passive fingerprinting tool designed to identify internet-facing Cisco SD-WAN vManage / Viptela instances. This tool helps security researchers and system administrators manage their external attack surface by detecting potentially expose...

awesome-attack-surface-management

Awesome Attack Surface Management A curated list of tools, resources, and best practices for Attack Surface Management ASM, External Attack Surface Management EASM, and continuous security monitoring. Attack Surface Management is the continuous discovery, analysis, classification, and monitoring ...

CVE-2017-11610

LAB 3- CVE-2017-11610 I. SYSTEM ANALYSIS Identifying Attack Surface from the Docker Environment Starting with what is running in the environment. I list all active containers: docker ps-a The victim exposes a single port:9001. Port 9001 is not a standard web app. Looking up the port database show...

oORecon

oORecon — Attack Surface Discovery TUI oORecon is an open-source Python terminal UI for web reconnaissance and attack surface discovery. It helps bug bounty hunters , penetration testers , and OSINT researchers map a domain quickly: DNS recon , subdomain enumeration , port scanning , reverse IP...

gaia

Gaia - Attack Surface Discovery & AI-Assisted Triage Gaia is a CLI-first attack surface analysis tool that discovers endpoints and parameters, reduces noise, and highlights security-relevant risks using static heuristics and optional AI reasoning. It orchestrates Katana, gau, arjun, linkfinder, a...

Anvil

Runtime-first privilege escalation and attack surface assessment for Windows thick clients. Anvil is a runtime-first privilege escalation and attack surface assessment tool for Windows thick client applications. Rather than scanning the filesystem blindly, it pairs Procmon capture with Windows...

CVEngine

The most advanced external attack surface assessment you can get for free. cvENGINE automatically discovers and maps your internet-facing assets, fingerprints every service and version it finds, and tells you which of today's exploited CVEs actually hit you, then reproduces what it can with safe,...

CVEngine

The most advanced external attack surface assessment you can get...

Accountable Partial Understanding: Securing the Epistemic Attack Surface of Agentic Systems

Attackers profit from what defenders do not understand. Software security has treated the gap between system behavior and human comprehension as a condition to narrow through analysis and assurance, booking the remainder as accepted risk. Agentic AI systems change that gap: when software reads,...

Beyond Maliciousness: Static and Runtime Attack-Surface Profiling of Agent Skills

Agent skills are Markdown documents that a tool-using agent reads as instructions and then acts on with the privileges of the session that loaded them. Installing one grants authority the standing to direct the agent, not new privilege, and the size of that grant is what we measure. We present a...

Joern 4.0.654

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

amass

Proyecto OWASP Amass El Proyecto OWASP Amass realiza mapeo de redes de superficies de ataque y descubrimiento de activos externos utilizando técnicas de recopilación de información de fuentes abiertas y reconocimiento activo. Instalación Puedes encontrar instrucciones adicionales de instalación y...

reconspider

El Marco de Inteligencia de Fuentes Abiertas OSINT Más Avanzado ReconSpider ReconSpider es el marco de Inteligencia de Fuentes Abiertas OSINT más avanzado para escanear direcciones IP, correos electrónicos, sitios web, organizaciones y obtener información de diferentes fuentes. ReconSpider puede...

noir

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface. Documentation • Installation • Usage • Github Action • Contributing • Changelog Noir is a SAST tool that reads source code and extracts the endpoints an application exposes — paths, methods, parameters, headers, cookies...

frogy2.0

Orbis - Inteligencia de Superficie de Ataque Inteligencia de Superficie de Ataque de Espectro Completo Orbis mapea automáticamente toda la superficie de ataque orientada a internet de su organización, subdominios, puertos abiertos, aplicaciones web, infraestructura en la nube, certificados TLS,...