nikto

nikto Nikto web server scanner - https://cirt.net/Nikto2 Full documentation - https://github.com/sullo/nikto/wiki Run normally: git clone https://github.com/sullo/nikto Main script is in program/ cd nikto/program Run using the shebang interpreter ./nikto.pl -h http://www.example.com Run using per...

nikto

nikto Сканер веб-серверов Nikto — https://cirt.net/Nikto2 Полная документация — https://github.com/sullo/nikto/wiki Обычный запуск: git clone https://github.com/sullo/nikto Main script is in program/ cd nikto/program Run using the shebang interpreter ./nikto.pl -h http://www.example.com Run using...

nautilus

Nautilus 2.0 Nautilus is a coverage guided, grammar based fuzzer. You can use it to improve your test coverage and find more bugs. By specifying the grammar of semi valid inputs, Nautilus is able to perform complex mutation and to uncover more interesting test cases. Many of the ideas behind this...

sgn

SGN — это полиморфный бинарный энкодер для целей наступательной безопасности, например для создания статически необнаруживаемых бинарных полезных нагрузок. В нём используется аддитивный контур обратной связи для кодирования заданных бинарных инструкций, аналогичный LFSR. Этот проект является...

deadfinder

Find dead-links broken links Documentation • Installation • Github Action • Contributing • Changelog Dead link broken link means a link within a web page that cannot be connected. These links can have a negative impact to SEO and Security. This tool makes it easy to identify and modify. Looking f...

PoshSecFramework

PoshSec Framework Чтобы сценарии и модули работали, обратитесь к приведенной ниже документации. PoshSec Framework или PSF — это графическая утилита для запуска сценариев, модулей и командлетов PowerShell. PSF предоставляет PowerShell части своего интерфейса в рамках отдельных PSessions. Каждый...

lowkey

Self-Hosted AI Coding Agents on AWS — OpenClaw, Claude Code, Codex, Kiro, NemoClaw, Hermes ▶️ Watch the full walkthrough on YouTube 📝 Read the blog post: "I Gave My Agent Its Own AWS Account" TL;DR — deploy Lowkey: curl -sfL install.lowkey.run | bash Works in bash , zsh , and AWS CloudShell. The...

yolobox

██╗ ██╗ ██████╗ ██╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗ ╚██╗ ██╔╝██╔═══██╗██║ ██╔═══██╗██╔══██╗██╔═══██╗╚██╗██╔╝ ╚████╔╝ ██║ ██║██║ ██║ ██║██████╔╝██║ ██║ ╚███╔╝ ╚██╔╝ ██║ ██║██║ ██║ ██║██╔══██╗██║ ██║ ██╔██╗ ██║ ╚██████╔╝███████╗╚██████╔╝██████╔╝╚██████╔╝██╔╝ ██╗ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝ ╚═════╝...

odat

Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid...

zelos

Zelos Zelos Z eropoint E mulated L ightweight O perating S ystem is a python-based binary emulation platform. One use of zelos is to quickly assess the dynamic behavior of binaries via command-line or python scripts. All syscalls are emulated to isolate the target binary. Linux x8664 32- and...

IDAssist

IDAssist AI 기반 IDA Pro 리버스 엔지니어링 플러그인 Author: Jason Tang 설명 IDAssist는 LLM 기반 분석을 IDA 인터페이스에 직접 통합하는 IDA Pro 플러그인입니다. 구성 가능한 LLM 공급자, 의미론적 지식 그래프, RAG 문서 검색을 통해 AI 지원 바이너리 리버스 엔지니어링을 제공하며, 다양한 LLM 공급자를 지원합니다. Python과 PySide6로 제작된 IDAssist는 IDA Pro 9.0+ 내에서 도킹 가능한 패널로 실행되며, LLM 공급자OpenAI, Anthropic...

avml

AVML Acquire Volatile Memory for Linux Summary A portable volatile memory acquisition tool for Linux. AVML is an X8664 userland volatile memory acquisition tool written in Rust, intended to be deployed as a static binary. AVML can be used to acquire memory without knowing the target OS distributi...

SharpImpersonation

SharpImpersonation Это был проект "обучение на практике" с моей стороны. Используются известные техники для создания очередного инструмента для имперсонации с некоторыми улучшениями по сравнению с другими публичными инструментами. Кодовая база взята из: https://github.com/0xbadjuju/Tokenvator...

honggfuzz

Honggfuzz A security-oriented, feedback-driven, evolutionary fuzzer. Honggfuzz is a general-purpose fuzzer that uses code coverage software and hardware-based to find bugs. It is multi-process, multi-threaded, and supports persistent fuzzing for extreme speed. Key Features Fast : Multi-process an...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

kaiju

CERT Kaiju Binary Analysis Framework for GHIDRA CERT Kaiju is a collection of binary analysis tools for Ghidra. This is a Ghidra/Java implementation of some features of the CERT Pharos Binary Analysis Frameworkpharos, particularly the function hashing and malware analysis tools, but is expected t...

kaiju

Среда бинарного анализа CERT Kaiju для GHIDRA CERT Kaiju — это набор инструментов бинарного анализа для Ghidra. Это реализация на Ghidra/Java некоторых возможностей фреймворка CERT Pharos Binary Analysis Frameworkpharos, особенно инструментов хеширования функций и анализа вредоносного ПО, но со...

teampcp-supply-chain-attack

TeamPCP 공급망 공격: 기술 분석 및 탐지 가이드 CVE-2026-33634 CVSS 9.4 — 2026년 현재까지 가장 영향력이 큰 CI/CD 공급망 공격. 2026년 3월 19일부터 25일 사이, 위협 행위자 TeamPCPDeadCatx3, PCPcat, ShellForce, CanisterWorm으로도 추적됨는 GitHub Actions, Docker Hub, OpenVSX, npm, PyPI 등 5개 생태계에 걸친 연쇄적 공급망 손상을 실행했습니다. 불완전하게 순환된 단일 GitHub PAT에서 시작된 이 캠페인은...

awesome-ida-x64-olly-plugin

Awesome IDA, Ghidra, x64DBG, GDB & OllyDBG 플러그인 IDA, x64DBG, Ghidra, GDB 및 OllyDBG 플러그인의 큐레이션된 목록입니다. IDA는 바이너리를 분석할 수 있는 강력한 디스어셈블러이자 디버거이며, 디컴파일러도 포함합니다. X64DBG는 Windows용 오픈소스 x64/x32 디버거입니다. OllyDbg는 Windows용 32비트 어셈블러 레벨 분석 디버거입니다. 목차 IDA 플러그인 Ghidra 플러그인 X64dbg 플러그인 OllyDBG 플러그인 GDB 플러그인 IDA...

ODBParser

| ODBParser ---|--- TL;DR ODBParser — это инструмент для поиска PII, раскрытой в открытых базах данных. ТОЛЬКО для выявления раскрытой PII и предупреждения владельцев серверов о безответственном обслуживании баз данных ИЛИ для запросов к базам данных, на доступ к которым у вас есть разрешение!...