mad-metasploit

Metasploit custom modules, plugins, resource script and.. awesome metasploit collection https://www.hahwul.com/p/mad-metasploit.html Awesome open awesome.md Add mad-metasploit to metasploit framework 1. config your metasploit-framework directory $ vim config/config.rb $metasploitpath =...

nuclei-templates

Nuclei 模板 English | 简体中文 | 日本語 | 한국어 这个仓库用于存放由社区精心挑选的模板,可以使用nuclei引擎结合模板发现应用中的漏洞。 文档 • 贡献 • 交流 • 社区 • FAQs • 加入Discord 模板是 nuclei 扫描器 的核心. 这个git仓库储存了由PD团队以及社区贡献的各种扫描模板. 我们希望您也能攻通过 pull requests 或者Github issues来提交模板以扩大我们的仓库列表. Nuclei模板项目情况概述...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the nuclei scanner which powers the actual scanning engine. This...

PE-Linux

PE-Linux New Linux Privilege Escalation Tool Getting Started System Information Gatherer Kernel Information Gatherer Checking Development environments on the system Escaping Restricted Shells Extract PATH & environment Information Check Kernel if Vulnerable To Dirty cow Exploit Password Collector...

pocs

pocs publicaremos pocs en este repositorio todos los bugs en este repositorio se divulgan de forma responsable...

CVE-2026-103869

A flaw was found in pulp-ansible's bearer-token refresh for collection remotes. The access token is kept in one module-level variable and reused for every token download in that worker. A user who can sync an Ansible remote that uses token refresh, and can point that remote at a server they...

DShield-SIEM

DShield Sensor Log Collection with Elasticsearch Introducción Este es un fork y una actualización significativa de la publicación inicial en el sitio web de ISC Storm Center por Scott Jensen como un documento BACS y los scripts publicados en Github. https://github.com/fkadriver/Dshield-ELK...

wahh_extras

wahhextras The Web Application Hacker's Handbook - Extra Content For all of you who have read "The web application hacker's handbook vol2", there are several references to extras, questions, source code that are not easy to found. I've collected all in this repository. TOC Web applications...

pDNS2

pDNS2 pDNS2 project pDNS2 is yet another implementation of a passive DNS tool working with Redis as the database. pDNS2 means ‘passive DNS version2’ and favors speed in query over other database features. pDNS2 is based on Florian Weimer’s original dnslogger with improved features for speed and...

CVE-2026-5430

cve-id Donar Ayuda a mantener este proyecto Si encuentras útil este proyecto, considera apoyar su mantenimiento continuo a través de PayPal o ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ El diez por ciento de cada donación se destina al Hospital Infantil...

Windows10Exploits

Windows10Exploits Descargar un solo CVE La variable es solo un ejemplo ; puedes crear tu propio script SVN para descargar una sola carpeta = CVE = BR @nu11secur1ty $CVE = CVE-2018-0833 svn checkout https://github.com/nu11secur1ty/Windows10Exploits/trunk/Undefined/$CVE Tabla de enlace de descripci...

Kunyu

Kunyu坤舆 - More efficient corporate asset collection English | 中文文档 0x00 Introduce Tool introduction Kunyu kunyu, whose name is taken from , is actually a professional subject related to geographic information, which counts the geographic information of the sea, land, and sky. The same applies to...

EDRception

Ver: https://malwaretech.com/2023/12/silly-edr-bypasses-and-where-to-find-them.html...

huntr-com-bug-bounties-collector

huntr.com 漏洞收集器 新的漏洞赏金（漏洞）收集器 环境要求 支持图形界面的 Chrome（如果脚本执行遇到问题，请检查虚拟机的 GPU 功能状态（如果可用）。） Chrome WebDriver 预览 python3 main.py 2024-02-20 16:14:47.836189 1. Arbitrary File Reading due to Lack of Input Filepath Validation - Feb 6th 2024 / High CVE-2024-0964 - gradio-app/gradio -...

awesome-web-hacking

awesome-web-hacking This list is for anyone wishing to learn about web application security but do not have a starting point. You can help by sending Pull Requests to add more information. If you're not inclined to make PRs you can tweet me at @infoslack Table of Contents Books Documentation Tool...

awesome-web-hacking

awesome-web-hacking 此列表面向任何希望学习 Web 应用程序安全但不知从何入手的人。 您可以通过发送 Pull Request 来添加更多信息。 如果您不想提交 PR，可以在 Twitter 上通过 @infoslack 联系我。 目录 书籍 文档 工具 速查表 Docker 漏洞 课程 在线黑客演示站点 实验室 SSL Ruby on Rails 安全 书籍 http://www.amazon.com/The-Web-Application-Hackers-Handbook/dp/8126533404/ 《Web 应用程序黑客手册：发现与利用安全漏洞》...

hakrawler

Hakrawler 用于收集URL和JavaScript文件位置的高速Go语言网络爬虫。这基本上是优秀的Gocolly库的一个简单实现。 使用示例 单个URL： echo https://google.com | hakrawler 多个URL： cat urls.txt | hakrawler 每行标准输入的超时时间设为5秒： cat urls.txt | hakrawler -timeout 5 通过代理发送所有请求： cat urls.txt | hakrawler -proxy http://localhost:8080 包含子域名： echo https://google.co...

dga-collection

Colección de DGA Una colección de Algoritmos de Generación de Dominios conocidos: Torpig ZeusBot Cryptolocker Necurs Symmi Ranbyus Uso Para cada DGA, la lista de dominios puede generarse fácilmente: from datetime import date from Necurs import Necurs Compute domains for the current day/period:...

exploitarium

https://discord.gg/WytKH65ZR join up for research, help, documentation, and more useful information for those interested. Statement This repo was incomplete when published. In regard to AI usage, my fuzzing workflow was automated by AI with a strict workflow. I used GPT-5.3 for ALL the fuzzing, a...

HijackLibs

HijackLibs Este proyecto tiene como objetivo mantener un registro de las oportunidades de secuestro de DLL divulgadas públicamente. Puede encontrar la versión web de este repositorio en https://www.hijacklibs.net. Licencia : GPLv3.0 Código de Conducta : Contributor Covenant Guía de contribución...