sbomlyze

sbomlyze git diff for your SBOM. Compare two Software Bills of Materials and see what changed between builds, versions, and releases. sbomlyze compares component hashes, not only version strings. When an attacker swaps a package without bumping its version, sbomlyze flags it. Generators and...

Cohab_Processes

CohabProcesses This Aggressor script is intended to help internal Red Teams identify suspicious or foreign processes "Cohabitation" running in their environments. Red Teams may assemble a list of "known" processes either independently or in collaboration with Blue force and feed it to the aggress...

van-gonography

Hide any type of files inside a image of your choice Table of Contents Features How it works Installation Usage License Contributing File to hide| Cover image| Cover with file hidden ---|---|--- | Features File Hiding: Hide any type of file within an image of your choice, without altering the...

x8-Burp

This app is no longer supported The tool helps to find hidden parameters that can be vulnerable or can reveal interesting functionality that other hunters miss. Greater accuracy is achieved thanks to the line-by-line comparison of pages, comparison of response code and reflections. Features...

OffsetInspect

OffsetInspect...

wonitor

web monitor fast, zero config web endpoint change monitor. for comparing responses, a selected list of http headers and the full response body is stored on a local key/value store file. no configuration needed. to increase network throughput, a --worker flag allows to set the concurrency when...

Password-Analysis

Password Analysis: Based on Entropy and Dictionaries of Weak Passwords Script in Go that analyzes a list of passwords. Download and Compilation You can download the binary directly from the releases. If you prefer to compile it manually, consider the following steps. root@kitploit: git clone...

windiff

WinDiff About WinDiff is an open-source web-based tool that allows browsing and comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the operating system. The binary database is automatically updated to include information from the latest Windo...

Credential-and-breach-monitoring

Breach / Stealer-Log / Identity Exposure Services Comparison with Scoring This document compares breach intelligence, dark web monitoring, and identity exposure services across practical dimensions relevant to modern security teams. It focuses on: Breach corpus depth Infostealer-log coverage API...

private-landing

Private Landing Learn authentication by building it right. Live Demo · Threat Model · Auth Flows · ADRs Demo note: The login endpoint is protected by adaptive PoW challenges — repeated failures return increasing proof-of-work difficulty. Cache-backed rate limiting is implemented and tested but no...

rematch

|Read The Docs| |Gitter Chat| |Build Status| |Codacy Badge| |idaplugin PyPI| |server PyPI| rematch REmatch, yet another binary comparison tool. Rematch is still a work in progress and is not as feature-rich as we'd like it to be. Basic functionality is available at this point and more advanced...

bypass-403

Bypass-403 A simple script just made for self use for bypassing 403 It can also be used to compare responses on verious conditions as shown in the below snap Usage ./bypass-403.sh https://example.com admin ./bypass-403.sh website-here path-here Features Use 24 known Bypasses for 403 with the help...

SQLbit

SQL Blind Injection Tool A tool for blind SQL injections that uses multithreaded bitwise comparisons to find values of cells in SQL-tables. Works with SQLite at least and supports cookies. It's able to: Search cell values by columns in a table Search characters count in a cells by columns in a...

dawgmon

dawgmon - Dawg the Hallway Monitor SUMMARY The name of this tool is based upon an episode season 10, episode 10 of South Park in which Cartman is Dawg the Hallway Monitor patrolling the hallways of his school. It's a tool which helps one to monitor changes which have taken place on a Linux-based...

dnsglobe

dnsglobe A global DNS propagation checker for your terminal — a Rust TUI that queries 34 public DNS resolvers around the world in parallel, compares their answers, and shows the propagation of your record on a world map. Think dnschecker.org / whatsmydns.net, but in your terminal, with watch mode...

tcpcopy

TCPCopy - A TCP Stream Replay Tool TCPCopy is a TCP stream replay tool for realistic testing of Internet server applications. Getting to Know TCPCopy An Overview of TCPCopy for Beginners A General Overview of TCPCopy Architecture TCPCopy Testing Use Cases TCPCopy Pre-Warming Examples Description...

diaphora

δiaphora Установка Установите с помощью менеджера плагинов Hex-Rays: root@kitploit: hcli plugin install https://github.com/joxeankoret/diaphora/archive/refs/tags/3.4.2.zip Инструкции по установке вручную приведены ниже. Diaphora διαφορά, греческое слово, означающее «различие» версии 3.4 — самый...

binwally

binwally Fuzzy Hashing 개념ssdeep을 사용하는 바이너리 및 디렉터리 트리 비교 도구 자세한 정보: http://w00tsec.blogspot.com/2013/12/binwally-directory-tree-diff-tool-using.html 전제 조건: Python 2.7+ gcc 및 빌드 필수 요소 libffi apt-get install libffi-dev libfuzzy-dev apt-get install libfuzzy-dev python-dev apt-get install python-dev...

CVE-2022-45599

CVE-2022-45599 CVE URL:| https://vulners.com/cve/CVE-2022-45599 ---|--- Сообщил:| TanYeeTat Продукт:| Aztech WMB250AC беспроводные Mesh-маршрутизаторы Затронутая прошивка:| Релиз 2020 года topaz-linux.lzma.img Загрузка прошивки:| закрытый исходный код Руководство по продукту:...

hakoriginfinder

hakoriginfinder Инструмент для обнаружения исходного хоста за обратным прокси. Полезен для обхода WAF и других обратных прокси. Как это работает? Этот инструмент сначала отправляет HTTP-запрос к указанному вами hostname/URL и сохраняет ответ, затем отправляет запрос к каждому IP-адресу из...