sslscan

sslscan2 sslscan version 2 has now been released. This includes a major rewrite of the backend scanning code, which means that it is no longer reliant on the version of OpenSSL for many checks. This means that it is possible to support legacy protocols SSLv2 and SSLv3, as well as supporting TLSv1...

aws-key-disabler

AWS Lambda - Desactivador de Claves de Acceso IAM El desactivador de claves de AWS es una función Lambda que desactiva las claves de acceso de usuarios IAM de AWS después de un tiempo determinado para reducir el riesgo asociado a claves de acceso antiguas. Arquitectura de AWS Lambda Salida de...

social-analyzer

Social Analyzer - API, CLI, and Web App for analyzing & finding a person's profile across +1000 social media \ websites. It includes different analysis and detection modules, and you can choose which modules to use during the investigation process. The detection modules utilize a rating mechanism...

rekono

Automatiza el reconocimiento y reserva tu tiempo para la parte que realmente necesita a un hacker Piensa en cómo empieza realmente una evaluación. Recopilas información pública sobre el objetivo. Descubres sus hosts, enumeras sus puertos e identificas los servicios que hay detrás. Luego ejecutas...

authz0

Authz0 es una herramienta automatizada de pruebas de autorización. Se puede identificar el acceso no autorizado basándose en URLs y Roles y Credenciales. Las URLs y Roles se gestionan como plantillas basadas en YAML, que se pueden crear y añadir automáticamente mediante authz0. También puede...

Nerv0usR4bbit

ɴᴇʀᴠ0ᴜs ʀ4ʙʙɪᴛ Herramienta automatizada de enumeración posterior a la explotación para sistemas Windows Autor : @34zY /!\ NUEVA VERSIÓN PORTÁTIL DISPONIBLE PRONTO. root@kitploit: ---------------------------------------------------------------------------- | .--, \ 🐰 | \ / | \ / | | / ,/ /\ \ 💙 | ...

catnip

Cat-Nip Automated Basic Pentest Tool this tool will make your basic pentesting task like Information Gathering, Auditing, And Reporting so this tool will do every task fully automatic. Usage Guide Download / Clone Cat-Nip git clone https://github.com/baguswiratmaadi/catnip Go Inside Cat-Nip Dir c...

MSHTML-CVE-2021-40444

https://github.com/lockedbyte/CVE-2021-40444 Consulta el README real desde NotREADME.md Hice pequeños ajustes y automaticé el proceso si tienes DLL sudo bash run.sh -i interface -d dll si quieres que compile el dll por ti sudo bash run.sh -i interface -c "command"...

kev-investigator

KEV Investigator An automated investigation draft generator f...

Obelix: Mitigating Side-Channels through Dynamic Obfuscation

Trusted execution environments TEEs offer hardware-assisted means to protect code and data. However, as shown in numerous results over the years, attackers can use side-channels to leak data access patterns and even single-step the code. While the vendors are slowly introducing hardware-based...

commix

This is an automated all-in-one OS command injection exploitation tool. It is designed to automate the detection and exploitation of command injection vulnerabilities. The tool is written in Python and is available on GitHub under the GPLv3 license. It can be installed by cloning the official Git...

[SECURITY] Fedora 41 Update: selenium-manager-4.34.0-2.fc41

Selenium Manager is a command-line tool implemented in Rust that provides automated driver and browser management for Selenium...

Callisto - An Intelligent Binary Vulnerability Analysis Tool

Callisto is an intelligent automated binary vulnerability analysis tool. Its purpose is to autonomously decompile a provided binary and iterate through the psuedo code output looking for potential security vulnerabilities in that pseudo c code. Ghidra's headless decompiler is what drives the bina...

GSD-2023-1001996 ice: Add check for kzalloc

ice: Add check for kzalloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit 96a9873188552ebb2afe76033d7329a5ecabef6e, it was...

HTTPLoot - An Automated Tool Which Can Simultaneously Crawl, Fill Forms, Trigger Error/Debug Pages And "Loot" Secrets Out Of The Client-Facing Code Of Sites

An automated tool which can simultaneously crawl, fill forms, trigger error/debug pages and "loot" secrets out of the client-facing code of sites. Usage To use the tool, you can grab any one of the pre-built binaries from the Releases section of the repository. If you want to build the source cod...

GSD-2022-1007404 md: Replace snprintf with scnprintf

md: Replace snprintf with scnprintf This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit 97238b88583c27c9d3b4a0cedb45f816523f17c3,...

Ultimate Facebook Scraper - A Bot Which Scrapes Almost Everything About A Facebook User'S Profile Including All Public Posts/Statuses Available On The User'S Timeline, Uploaded Photos, Tagged Photos, Videos, Friends List And Their Profile Photos

Tooling that automates your social media interactions to collect posts, photos, videos, friends, followers and much more on Facebook. Features A bot which scrapes almost everything about a facebook user's profile including uploaded photos tagged photos videos friends list and their profile photos...

SysAnalyzer - Automated Malcode Analysis System

SysAnalyzer is an open-source application that was designed to give malcode analysts an automated tool to quickly collect, compare, and report on the actions a binary took while running on the system. A full installer for the application is available and can be downloaded here. The application...

Automated Pentest Recon Scanner: Sn1per

Sn1per is an automated scanner that can be used during a penetration test to enumerate and scan for vulnerabilities. Features: Automatically collects basic recon ie. whois, ping, DNS, etc. Automatically launches Google hacking queries against a target domain Automatically enumerates open ports vi...

SQLMap v1.2.10 - Automatic SQL Injection And Database Takeover Tool

SQLMap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lastin...