attack-stix-data

ATT&CK® STIX Data MITRE ATT&CK is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and ...

pmd

PMD - source code analyzer PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex , but supports 16 other languages. It comes with 400...

sectemplates

Sectemplates I'd like to announce the creation of SecTemplates.com, a website where infosec professionals, and startup engineering teams lacking a security team, can find templates to help bootstrap their programs. The primary focus of this site will be to provide starting points for Preparation...

halogen

Halogen is a tool to automate the creation of yara rules based on the image files embedded within a malicious document. This can assist cyber security professionals in writing detection rules for malicious threats as well as help responders in identifying with particular threat they are dealing...

uro

uro Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: incremental urls e.g. /page/1/ and /page/2/ blog posts and similar human written conten...

titus

Titus: High-Performance Secrets Scanner Titus is a high-performance secrets scanner that detects credentials, API keys, and tokens in source code, files, and git history. It ships with 487 detection rules covering hundreds of services and credential types, drawn from NoseyParker and Kingfisher...

ios11-cookie-set-expire-issue

iOS 11 Cookie Set / Expire Issue There appears to be an intermittent issue with setting and expiring cookies in iOS 11 home screen web apps. Two erroneous behaviors can be observed: When a cookie is set and then the app is closed and re-opened, the cookie may no longer be present upon re-opening...

rack-bug

Rack::Bug Code Climate Repository: http://github.com/brynary/rack-bug Description Rack::Bug adds a diagnostics toolbar to Rack apps. When enabled, it injects a floating div allowing exploration of logging, database queries, template rendering times, etc. Features Password-based security IP-based...

AppSecEzine

AppSec Ezine Raising awareness towards the prevention of security risks is challenging. Most people are unaware of or just don’t have access to the right information. Keeping up the pace in the tech world is a golden rule. If you are not ready to deal with security issues, you are heading in the...

Digital-Signature-Forgery-Attack

In this article, we will look at the cryptographic attack of digital signature forgery Digital Signature Forgery Attack, its consequences pose a threat to the security of transactions in the Bitcoin network, since digital signatures confirm the ownership and authorization of cryptocurrency...

pymultitor

PyMultiTor Python Multi Threaded Tor Proxy, Did you ever want to be at two different places at the same time? When I asked myself this question, I actually started developing this solution in my mind. While performing penetration tests there are often problems caused by security devices that bloc...

sh00t

A Testing Environment for Manual Security Testers Sh00t is a task manager to let you focus on performing security testing provides To Do checklists of test cases helps to create bug reports with customizable bug templates Features: Dynamic Task Manager to replace simple editors or task management...

huntr-com-bug-bounties-collector

huntr.com bugs collector New bug bountyvulnerabilities collector Requirements Chrome with GUI If you encounter trouble with script execution, check the status of VMs GPU features, if available. Chrome WebDriver Preview python3 main.py 2024-02-20 16:14:47.836189 1. Arbitrary File Reading due to La...

shellsploit-framework

We'll back in several years. update...

Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes

Penetration Testing, Beginners To Expert! This guide is designed for both beginners and experienced penetration testers. It covers all aspects of web application penetration testing, including foundational concepts, setting up testing environments with tools such as Burp Suite and bWAPP, and...

web-hacking-playground

Web Hacking Playground Description Web Hacking Playground is a controlled web hacking environment. It consists of vulnerabilities found in real cases, both in pentests and in Bug Bounty programs. The objective is that users can practice with them, and learn to detect and exploit them. Other topic...

HowToHunt

HowToHunt A collection of practical guides, methodologies, and resources for hunting vulnerabilities From Hackers for Community, because Hacking is not just a skill It’s a Mindset 💡 What is HowToHunt? HowToHunt is a collaborative repository of step-by-step guides, methodologies, and hands-on...

fcn-

fcn free connect your private network from anywhere 1. What is fcn fcnfree connect is a foolproof one-click tool for accessing private networks, consisting of the server side and the client side fcn uses fcn public data servers and data encryption technology to virtually connect user clients to...

solidity_CVE-2021-42574-POC

solidityCVE-2021-42574-POC Jan 31 2023, Altin tin-z, github.com/tin-z PoC POC of CVE-2021-42574 for solidity and solc compiler. install solc and select 0.8.17 version https://github.com/crytic/solc-select foundry https://github.com/foundry-rs/foundry deploy contract SOLV=0.8.17 foldert=testopen...

bugz-tools

bugz-tools A collection of tools I wrote for bug bounty or hacking and don't mind publishing it 😄 Donation If my work has been useful for you, feel free to thank me by buying me a coffee or more : Disclaimer All tools here are created to help in penetration testing/bug bounty and not responsible...