raptor

Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...

raptor

Raptor 是一个基于网页（Web服务+UI）的、以 GitHub 为中心的源码漏洞扫描器——它只需提供 GitHub 仓库 URL 即可扫描仓库。你可以设置 Webhook，以确保每次提交或合并 Pull Request 时自动扫描。扫描是异步进行的，结果仅对启动扫描的用户可见。 Raptor 的部分特性： 插件架构（即插即用外部工具，生成统一报告） Web 服务可用于自定义自动化（无需 UI） 轻松创建/编辑/删除新漏洞和/或编程语言的签名...

cloudfoundry_uaa

CloudFoundry 用户账户与认证（UAA）服务器 UAA 是一个多租户身份管理服务，用于 Cloud Foundry，但也可以作为独立的 OAuth2 服务器使用。它的主要角色是作为 OAuth2 提供者，为客户端应用程序在代表 Cloud Foundry 用户执行操作时颁发令牌。 它还可以使用用户的 Cloud Foundry 凭证对用户进行认证， 并且可以作为使用这些凭证（或其他凭证）的 SSO 服务。它 具有用于管理用户账户和注册 OAuth2 客户端的端点，以及各种其他管理功能。 坐标 令牌：关于令牌、作用域和权限的说明 技术论坛：cf-dev 邮件列表 文档：docs/...

rekall

Rekall discontinuation This project is no longer maintained. In December 2011, a new branch within the Volatility project was created to explore how to make the code base more modular, improve performance, and increase usability. This branch was later forked to become Rekall. The modularity allow...

super-xray

Super Xray 如果本项目有帮助到你，可以点个Star支持作者 介绍 xray 是一款优秀的漏洞扫描工具，但目前只有命令行版本，通过 config.yaml 配置文件启动，很多情况下不好上手，需要一款 GUI 工具来帮助新人更快使用。本工具仅是简单的命令行包装，并不是直接调用方法。在 xray 的规划中，未来会有一款真正的完善的 GUI 版 XrayPro 工具，敬请期待。 使用前提： 本地有 JRE/JDK 8+ 环境（如果使用内置JRE的exe版本无需Java环境）...

super-xray

Super Xray 如果本项目有帮助到你，可以点个Star支持作者 介绍 xray 是一款优秀的漏洞扫描工具，但目前只有命令行版本，通过 config.yaml 配置文件启动，很多情况下不好上手，需要一款 GUI 工具来帮助新人更快使用。本工具仅是简单的命令行包装，并不是直接调用方法。在 xray 的规划中，未来会有一款真正的完善的 GUI 版 XrayPro 工具，敬请期待。 使用前提： 本地有 JRE/JDK 8+ 环境（如果使用内置JRE的exe版本无需Java环境） 使用 java -jar SuperXray.jar 启动（在Windows中双击启动会有权限问题） 前往...

WhoDat

WhoDat Project NOTE: During development of PyDat 5, internal operations has shifted their direction leading to the retirement of the PyDat project. Although a lot of the work has been done to finalize PyDat 5's capabilities, some capabilties remain not fully tested. The WhoDat project is an...

arachni

Notice Arachni has become obsolete, try out its next-gen successor Ecsypno Spectre Scan! Arachni - Web Application Security Scanner Framework Synopsis Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the...

quarantyne

=== 此项目已归档 === Quarantyne · 现代 Web 防火墙 🛃 自动化网络安全，如此简单 太长不看 Quarantyne 是一个反向代理，可实时保护 Web 应用和 API 免受欺诈行为、滥用、机器人及网络攻击。 系统要求 简介 功能特性 覆盖范围 被动模式 vs 主动模式 配置 快速运行 发行版本 邮件列表 许可证 系统要求 Java 8 简介 Quarantyne 是一个用 Java 编写的反向代理。它位于 Web 应用或 API 之前，保护其免受欺诈行为、滥用、机器人及网络攻击的侵害。它无法阻止所有攻击，但绝对会让攻击变得更加困难且成本更高。...

kamerka

NOT SUPPORTED OR DEVELOPED ANYMORE PLEASE USE GUI VERSION https://github.com/woj-ciech/Kamerka-GUI ꓘamerka 2.0 aka FIST Flickr, Instagram, Shodan, Twitter Build interactive map of cameras, printers, tweets and photos. The script creates a map of cameras, printers, tweets and photos based on your...

gryffin

ARCHIVED Gryffin beta Gryffin is a large scale web security scanning platform. It is not yet another scanner. It was written to solve two specific problems with existing scanners: coverage and scale. Better coverage translates to fewer false negatives. Inherent scalability translates to capabilit...

CVE-2026-8778

The MIPL Grouped Checkout Fields for WooCommerce – Customize & Organize Checkout Fields. plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the miplwcuploadfile function in all versions up to, and including, 1.2.1. This makes it possible for...

manticore

⚠️ Project is archived ⚠️ This project is no longer internally developed and maintained. Manticore Manticore is a symbolic execution tool for the analysis of smart contracts and binaries. Features Program Exploration : Manticore can execute a program with symbolic inputs and explore all the...

r2kit

r2kit The code previously found in this repository has been properly re-designed and packaged. As such, this repository is no longer maintained. You can check the "old" branch to see the last state; however, due to changes in the r2pipe API, most of the code in the "old" branch is not functional...

security_monkey

NOTE: Security Monkey is in maintenance mode and will be end-of-life in 2020. For AWS users, please make use of AWS Config. For GCP users, please make use of Cloud Asset Inventory. Security Monkey Security Monkey monitors your AWS and GCP accounts for policy changes and alerts on insecure...

viper

This repository is archived and development of Viper 1.x is discontinued. A full refactor of the project started withViper 2. Viper is a binary analysis and management framework. Its fundamental objective is to provide a solution to easily organize your collection of malware and exploit samples a...

moonwalk

moonwalk Cover your tracks during Linux Exploitation / Penetration Testing by leaving zero traces on system logs and filesystem timestamps. 📖 Table of Contents Introduction Features Installation Usage Contribution License ℹ️ Introduction moonwalk is a 400 KB single-binary executable that can clear...

ProbeManager

ProbeManager .. image:: https://www.ko-fi.com/img/donatesm.png :alt: Donate :target: https://ko-fi.com/mtreussart |Licence| |Version| .. image:: https://api.codacy.com/project/badge/Grade/afc2ab5226584ac3b594eb09ebcc2ccc?branch=master :alt: Codacy Grade :target:...

CVE-2014-0160-Chrome-Plugin

Heartbleed chrome 插件 已弃用 Chrome 插件，用于检查当前网站（及其所有调用的子域）是否容易受到 CVE-2014-0160 影响。 漏洞检查通过一个现已失效的 API 服务完成（它在 2014 年时还在运作！） 也许代码对某些人仍有帮助，如果有人找到了新的 Heartbleed 检测 API 提供商的话。 另见，修改过的 CVE-2014-0160 漏洞利用代码...

SocialFishMobile

SocialFish Mobile This app is an open-source project to remote control SocialFish, it does not work independently. How to build root@kitploit: Prepare your Flutter environment Go to https://flutter.dev/docs/get-started/install After configured go ahead Clone this repository $ git clone...