Obfuscapk

!IMPORTANT Este proyecto está archivado y ya no recibe mantenimiento. Algunas de las preguntas más frecuentes se responden en FAQ y solución de problemas. Una herramienta de ofuscación de caja negra para aplicaciones Android. Obfuscapk es una herramienta modular de Python para ofuscar aplicacione...

drakvuf-sandbox

DRAKVUF Sandbox !WARNING Here be dragons 🐉. Maintaining your own sandbox is a difficult task and this project uses technology that is not user-friendly. Be prepared to brush up on your debugging skills as bugs may be reproducible only on your configuration. On the other hand, it's not purely an R...

wpscan

WPScan WordPress Security Scanner WPScan WordPress Vulnerability Database - WordPress Security Plugin INSTALL Prerequisites Optional but highly recommended: rbenv Ruby = 3.3 - Recommended: latest stable Curl = 7.72 - Recommended: latest stable The 7.29 has a segfault The 7.72 could result in...

KubeStalk

KubeStalk KubeStalk is a tool to discover Kubernetes and related infrastructure based attack surface from a black-box perspective. This tool is a community version of the tool used to probe for unsecured Kubernetes clusters around the internet during Project Resonance - Wave 9. Usage The GIF belo...

cve-2022-31813

CVE-2022-31813 Vulnerability Checker Author : Derek Odiorne GitHub : @dodiorne Version : 1.2 Last Updated : May 21, 2025 MITRE ATT &CK Technique: T1190 – Exploit Public-Facing Application 🧠 Description This tool is a black-box vulnerability scanner for detecting CVE-2022-31813 , a path traversal...

svn-extractor

Svn-Extractor Many a times web application pen-testers are encountered with the presence of .svn folders. For those not aware .svn folder is used by SVN version control system to perform its operations. For a blackbox pentest this folder contains huge amount of information. Some of the key areas...

AGAS

An Efficient and Effective Agentic Group Shilling Attack on Recommender Systems This is the official code to the paper: "An Efficient and Effective Agentic Group Shilling Attack on Recommender Systems". This paper introduces AGAS, which is an LLM-driven shilling attack against black-box...

IDA2Obj

IDA2Obj IDA2Obj is a tool to implement SBI Static Binary Instrumentation. The working flow is simple: Dump object files COFF directly from one executable binary. Link the object files into a new binary, almost the same as the old one. During the dumping process, you can insert any data/code at an...

web-hacking-playground

Web Hacking Playground Description Web Hacking Playground is a controlled web hacking environment. It consists of vulnerabilities found in real cases, both in pentests and in Bug Bounty programs. The objective is that users can practice with them, and learn to detect and exploit them. Other topic...

web-hacking-playground

Web Hacking Playground 설명 Web Hacking Playground는 통제된 웹 해킹 환경입니다. 모의 침투 테스트와 버그 바운티 프로그램에서 발견된 실제 사례의 취약점들로 구성되어 있습니다. 목표는 사용자들이 이 취약점들을 연습하고, 탐지 및 익스플로잇 방법을 배우는 것입니다. 또한 다음과 같은 관심 주제들도 다룰 것입니다: 맞춤형 페이로드를 생성하여 필터 우회, 여러 취약점을 연계한 공격 실행, 개념 증명 스크립트 개발 등이 있습니다. 중요사항 애플리케이션 소스 코드는 공개되어 있습니다. 하지만 랩의 접...

AWSGoat

AWSGoat : A Damn Vulnerable AWS Infrastructure Compromising an organization's cloud infrastructure is like sitting on a gold mine for attackers. And sometimes, a simple misconfiguration or a vulnerability in web applications, is all an attacker needs to compromise the entire infrastructure. Since...

CANToolz

CANToolz a.k.a. YACHT Yet Another Car Hacking Tool CANToolz is a framework for analysing CAN networks and devices. It provides multiple modules that can be chained using CANToolz's pipe system and used by security researchers, automotive/OEM security testers in black-box analysis. CANToolz can be...

SpringBootVulExploit

Spring Boot Vulnerability Exploit Check List Collection of Spring Boot related vulnerability learning materials, exploitation methods and techniques, black-box security assessment check list Statement ⚠️ All content in this project is only for security research and authorized testing. Those who...

pulsar

PULSAR 프로토콜 학습, 시뮬레이션 및 상태 기반 퍼저 Pulsar는 자동 프로토콜 학습 및 시뮬레이션 기능을 갖춘 네트워크 퍼저입니다. 이 도구는 클러스터링, 마르코프 모델과 같은 머신러닝 기술을 통해 프로토콜을 모델링할 수 있습니다. 이러한 모델은 의미적으로 올바른 메시지를 통해 Pulsar와 실제 클라이언트 또는 서버 간의 통신을 시뮬레이션하는 데 사용될 수 있으며, 일련의 퍼징 기본 요소와 결합하여 알려지지 않은 프로토콜 구현의 프로토콜 상태 머신의 더 깊은 상태에서 오류를 테스트할 수 있습니다. Pulsar가 구현...

promptmap

O O o.-. Humans, Do Not Resist! |/ ,-'-. / /, / /|.-.| / --O-- .--""" /\ /\ | o.o / Utku Sen's /|\ -'--' / /| | - | / | | | \ /| | | ' \ '/ \ ' | ' \ | ' / | ' \ | / | | | ./| /||| ./|||,| .// / / |-----| || || || || promptmap2는 맞춤형 LLM 애플리케이션을 위한 자동화된 프롬프트 인젝션 스캐너입니다. 두 가지 테스트 모드를 지원합니다...

bfac

BFAC 웹 애플리케이션을 위한 고급 백업 파일 아티팩트 테스팅 BFACBackup File Artifacts Checker는 웹 애플리케이션의 소스 코드를 노출할 수 있는 백업 아티팩트를 확인하는 자동화 도구입니다. 이러한 아티팩트는 비밀번호, 디렉터리 구조 등 민감한 정보의 유출로 이어질 수도 있습니다. BFAC의 목표는 백업 파일 아티팩트 블랙박스 테스팅을 위한 올인원 도구 가 되는 것입니다. 기능 다중 스레드 스캐닝. 요청 속도 제한 기능 포함. HTTP 프록시 지원. 유효 및 무효 페이지를 자동으로 탐지하기 위해 여러...

bfac

BFAC Advanced Backup-File Artifacts Testing for Web-Applications BFAC Backup File Artifacts Checker is an automated tool that checks for backup artifacts that may disclose the web-application's source code. The artifacts can also lead to leakage of sensitive information, such as passwords,...

drAFL

drAFL Original AFL supports black-box coverage-guided fuzzing using QEMU mode. I highly recommend to try it first and if it doesn't work you can try this tool. Additionally, you might want to try Manul that supports blackbox binaries fuzzing on Windows and Linux. Usage You need to specify DRRUNPA...

nerve

Network Exploitation, Reconnaissance & Vulnerability Engine N.E.R.V.E Table of Contents Continuous Security About NERVE What is NERVE Features Prerequisites Installation Deployment Recommendations Installation - Docker Installation - Bare Metal Installation - Multi Node Upgrade Security Usage...

lightbulb-framework

LightBulb LightBulb is an open source python framework for auditing web application firewalls and filters. Synopsis The framework consists of two main algorithms: GOFA : An active learning algorithm that infers symbolic representations of automata in the standard membership/equivalence query mode...