sncscan

sncscan Strumento per analizzare SAP Secure Network Communications SNC. Come usare? Nello stato attuale, sncscan può essere usato per leggere le configurazioni SNC per le connessioni SAP Router e DIAG SAP GUI. L'implementazione per il protocollo SAP RFC è attualmente in fase di sviluppo. SAP Rout...

aws-key-disabler

AWS Lambda - IAM Access Key Disabler The AWS Key disabler is a Lambda Function that disables AWS IAM User Access Keys after a set amount of time in order to reduce the risk associated with old access keys. AWS Lambda Architecture SysOps Output for EndUser Developer Toolchain Current Limitations A...

subfinder

Fast passive subdomain enumeration tool. Features • Install • Usage • API Setup • Library • Join Discord subfinder is a subdomain discovery tool that returns valid subdomains for websites, using passive online sources. It has a simple, modular architecture and is optimized for speed. subfinder is...

Security_incident_report

01. Configurazione dell'infrastruttura L'infrastruttura di questo progetto non è gestita tramite codice IaC come Terraform: è stata configurata installando pfSense e Wazuh e modificando direttamente le impostazioni dalla schermata di amministrazione GUI. Qui quindi non c'è "codice", ma uno schema...

evilgrade

Faraday Security Research -- | ISR-evilgrade | www.faradaysec.com | -- .:: BRIEF OVERVIEW ::. Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates. It comes with pre-made binaries agents, a working default configuration...

CVE-2022-33980-Apache-Commons-Configuration-RCE

CVE-2022-33980-Apache-Commons-Configuration-RCE...

snort3

Snort++ Snort 3 ist die nächste Generation des Snort-IPS Intrusion Prevention System. Diese Datei zeigt Ihnen, was Snort++ zu bieten hat, und führt Sie durch die Schritte vom Download bis zur Demo. Wenn Sie mit Snort nicht vertraut sind, sollten Sie sich zunächst die Snort-Dokumentation ansehen...

hontel

HonTel HonTel is a Honeypot for Telnet service. Basically, it is a Python v2.x application emulating the service inside the chroot environment. Originally it has been designed to be run inside the Ubuntu/Debian environment, though it could be easily adapted to run inside any Linux environment...

gixy

GIXY अवलोकन Gixy एक उपकरण है जो Nginx कॉन्फ़िगरेशन का विश्लेषण करता है। Gixy का मुख्य उद्देश्य सुरक्षा गलत कॉन्फ़िगरेशन को रोकना और दोष का पता लगाने को स्वचालित करना है। वर्तमान में समर्थित Python संस्करण 2.7, 3.5, 3.6 और 3.7 हैं। अस्वीकरण: Gixy का केवल GNU/Linux पर अच्छी तरह से परीक्षण किया गया...

gixy

GIXY Overview Gixy is a tool to analyze Nginx configuration. The main goal of Gixy is to prevent security misconfiguration and automate flaw detection. Currently supported Python versions are 2.7, 3.5, 3.6 and 3.7. Disclaimer: Gixy is well tested only on GNU/Linux, other OSs may have some issues...

krf

KRF KRF is a K ernelspace R andomized F aulter. It currently supports the Linux and FreeBSD kernels. What? Fault injection is a software testing technique that involves inducing failures "faults" in the functions called by a program. If the callee has failed to perform proper error checking and...

dockerized-android

Dockerized Android Dockerized Android is a container-based framework that allows to execute and Android Emulator inside Docker and control it through a browser. This project has been developed in order to provide a starting point for integrating mobile security components into Cyber Ranges but it...

vesta

Un toolkit per l'analisi statica delle vulnerabilità e il rilevamento della configurazione di cluster Docker e Kubernetes, basato su test di penetrazione reali nel cloud computing. English · 简体中文 Panoramica Vesta è un toolkit di analisi statica delle vulnerabilità e rilevamento della configurazio...

toothpicker

ToothPicker ToothPicker is an in-process, coverage-guided fuzzer for iOS. It was developed to specifically targets iOS's Bluetooth daemon bluetoothd and to analyze various Bluetooth protocols on iOS. As it is built using FRIDA, it can be adapted to target any platform that runs FRIDA. This...

sandmap

sandmap Description • How To Use • Command Line • Configuration • Requirements • Other • Contributing • License • Wiki Description sandmap is a tool supporting network and system reconnaissance using the massive Nmap engine. It provides a user-friendly interface, automates and speeds up scanning...

CVE-2017-7921-EXP

CVE-2017-7921 Exploit È stato scoperto un problema di autenticazione impropria nei dispositivi Hikvision. root@kitploit: La vulnerabilità di autenticazione impropria si verifica quando un'applicazione non autentica gli utenti in modo adeguato o corretto. Ciò può consentire a un utente...

SXDork

SXDork v1.0 SXDork é uma ferramenta poderosa que utiliza a técnica de google dorking para buscar informações específicas na internet. Google dorking é um método que usa operadores de busca avançados e palavras-chave para descobrir informações sensíveis que estão disponíveis publicamente na...

CVE-2024-4577

Orange Tsi 🍊 Questa vulnerabilità è stata trovata da Orange Tsai @orange8361 di DEVCORE @d3vc0r3. Assicurati di seguire la sua eccezionale ricerca; il nostro ruolo è stato solo quello di ricreare e sviluppare l'exploit per questo problema. Avviso di sicurezza: CVE-2024-4577 Vulnerabilità di...

CVE-2020-2551

CVE-2020-2551 Weblogic RCE con IIOP 0x01 IIOP abilitato di default 0x02 Demo del PoC...

openwisp-controller

openwisp-controller .. image:: https://github.com/openwisp/openwisp-controller/actions/workflows/ci.yml/badge.svg :target: https://github.com/openwisp/openwisp-controller/actions/workflows/ci.yml :alt: Stato build CI .. image:: https://coveralls.io/repos/openwisp/openwisp-controller/badge.svg...