webtech

WebTech Identify technologies used on websites. More info on the release's blogpost. CLI Installation WebTech is available on pip: pip install webtech It can be also installed via setup.py: python setup.py install --user Burp Integration Download Jython 2.7.0 standalone and install it into Burp. ...

protobuf-inspector

protobuf-inspector Simple program that can parse Google Protobuf encoded blobs version 2 or 3 without knowing their accompanying definition. It will print a nice, colored representation of their contents. Example: As you can see, the field names are obviously lost, together with some high-level...

Log4j-RCE-Scanner

Feature • Requirements • Installation • Usage • Contact RCE scanner for Log4j Using this tool, you can scan for remote command execution vulnerability CVE-2021-44228 on Apache Log4j at multiple addresses. Affected versions If you want to scan with a domain name, you must additionally install...

wa-tunnel

wa-tunnel - TCP Tunneling through Whatsapp This is a Baileys based piece of code that lets you tunnel TCP data through two Whatsapp accounts. This can be usable in different situations, for example network carriers that give unlimited whatsapp data or airplanes where you also get unlimited social...

DIRT

DIRT: Driver Initial Reconnaissance Tool I'm writing this tool to learn C++ and get an initial assessment of drivers installed on a Windows system e.g. master images developed by OEMs or enterprises. It's supposed to help with target selection, finding low-hanging fruit, and some assistance with...

Hack Tools

Hack Tools This repository contains a collection of 200+ tools and resources that can be useful for red teaming activities. Some of the tools may be specifically designed for red teaming, while others are more general-purpose and can be adapted for use in a red teaming context. Warning The...

wa-crypt-tools

WhatsApp Crypt Tools Decrypt and encrypt WhatsApp and WA Business' .crypt12, .crypt14 and .crypt15 files with ease! For decryption, you NEED the key file or the 64-characters long key or a screenshot of it. The key file is named "key" if the backup is crypt14 or "encryptedbackup.key" if the backu...

vuln-scanner

vuln-scanner An automated vulnerability assessment platform that orchestrates 210 open-source security tools , aggregates and deduplicates findings, optionally chains tools into a discovery data-flow graph , runs an optional OpenAI-compatible LLM analysis layer for triage, clustering, and...

CVE-2023-43261

CVE-2023-43261 - PoC Critical Vulnerability Exposes Sensitive Information and Enables Unauthorized Access in Milesight Routers Date: 1 October 2023 Vendor of the product: Milesight Formerly Xiamen Ursalink Technology Co., Ltd. Affected Products: UR5X, UR32L, UR32, UR35, UR41 and there might be...

ZipRarHunter

ZipRarHunter ZipRarHunter is a powerful command-line ethical hacking tool designed to crack passwords of ZIP and RAR archive files using a wordlist.It automates the process of password recovery from encrypted archives Features Cracking ZIP files encrypted with both ZipCrypto and AES-256 encryptio...

vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen Abstract For a system administrator, having to perform security vulnerability analysis and software update on a daily basis can be a burden. To avoid downtime in a production...

BrokenPipe

BrokenPipe - Steam Client Service LPE Vulnerability This is the single-script version. The original compiled C++ PoC is on the legacy branch. Thanks to John Hammond for the suggestion, subscribe to him! PoC video: YouTube John Hammond's breakdown: YouTube Greetz to @MSNIGHTMARE2000 for the inspo ...

log4j_checker_beta

log4jcheckerbeta - Linux, macOS and Windows Scripts If you want to use the windows/linux download cradles below, please review the scripts beforehand. Loading code from the internet and execute it is what brought us here with Log4Shell - right? ;- Linux and macOS servers or clients The...

CVE-2026-26335-Calero-VeraSMART-RCE

👤 Author Mohammed Idrees Banyamer Security Researcher GitHub: https://github.com/mbanyamer Instagram: https://instagram.com/banyamersecurity CVE-2026-26335 - Calero VeraSMART ViewState RCE Exploit 📌 Description CVE‑2026‑26335 is a critical unauthenticated remote code execution vulnerability in...

ssh-hardening

SSH Hardening Lock down SSH on Debian/Ubuntu in one run: new port, no root login, key-based auth, optional UFW and Fail2Ban. What you’ll see When you run the script, it detects your OS and shows the settings before asking to continue: Quick start step-by-step 1️⃣ Install git if needed On...

nox-framework

███╗ ██╗ ██████╗ ██╗ ██╗ ████╗ ██║██╔═══██╗╚██╗██╔╝ ██╔██╗ ██║██║ ██║ ╚███╔╝ ██║╚██╗██║██║ ██║ ██╔██╗ ██║ ╚████║╚██████╔╝██╔╝ ██╗ ╚═╝ ╚═══╝ ╚═════╝ ╚═╝ ╚═╝ Cyber Threat Intelligence Framework OSINT framework for red teaming, digital forensics, and corporate exposure analysis. Introduction NOX is ...

malcom

Malcom - Malware Communication Analyzer Malcom is a tool designed to analyze a system's network communication using graphical representations of network traffic, and cross-reference them with known malware sources. This comes handy when analyzing how certain malware species try to communicate wit...

CVE-2019-13272

CVE-2019-13272 Linux local root exploit Linux 4.10 5.1.17 PTRACETRACEME local root CVE-2019-13272 In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtai...

joy

| |/ | | | | | | | || |/ |/ , | |/ | / A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring. TLS Fingerprinting Addendum: For our most recent network fingerprinting tools and data, please see Mercury. Overview Joy is ...

termshark

Termshark A terminal user-interface for tshark, inspired by Wireshark. V2.4 is out now with packet search and profiles for colors and columns! See theChangeLog. If you're debugging on a remote machine with a large pcap and no desire to scp it back to your desktop, termshark can help! Features Rea...