ssh_scan

sshscan Сканер конфигурации и политик SSH ⚠️ Уведомление об устаревании ⚠️ Mozilla больше не поддерживает проект SSH Scan. Пожалуйста, сделайте форк, чтобы продолжить разработку. Ключевые преимущества Минимальные зависимости - Использует нативные Ruby и BinData для работы, без тяжелых...

Scout2

AWS Scout2 .. image:: https://travis-ci.org/nccgroup/Scout2.svg?branch=master :target: https://travis-ci.org/nccgroup/Scout2 .. image:: https://coveralls.io/repos/github/nccgroup/Scout2/badge.svg?branch=master :target: https://coveralls.io/github/nccgroup/Scout2 .. image::...

volatility

This project is archived. See Volatility 3 for modern investigations: https://github.com/volatilityfoundation/volatility3 ============================================================================ Volatility Framework - Volatile memory extraction utility framework The Volatility Framework is a...

vulnreport

Abandoned Project This project is not currently maintained and has been abandoned. Vulnreport Pentesting management and automation platform Vulnreport is a platform for managing penetration tests and generating well-formatted, actionable findings reports without the normal overhead that takes up...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue. Hackable HTTP proxy to simulate server failure scenarios , systems resiliency testing and unexpected network conditions , built for node.js. It was mainly...

scanner-cli

Deprecation Notice: Hawkeye has reached its end of life. There are more modern options out there for you and your project. If you wish to pick up maintenance of the project, please feel free to contact me. You'll find means of reaching out to me on my personal homepage. . . . . . . The Hawkeye...

opencspm

OpenCSPM Open Cloud Security Posture Management, OpenCSPM, — это платформа с открытым исходным кодом для получения более глубокого понимания конфигурации и метаданных вашего облака, помогающая оценивать и снижать риски с течением времени. Для кого предназначен OpenCSPM? Для команд безопасности,...

reternal-quickstart

RE:TERNAL Note: Still under development, only use for testing and do not expose interfaces! Current compose doesn't work yet, only try when you know what you're doing RE:TERNAL is a centralised purple team orchestration service to manage third-party C2 frameworks. Agents are installed on endpoint...

trident

trident The Trident project is an automated password spraying tool developed to meet the following requirements: the ability to be deployed on several cloud platforms/execution providers the ability to schedule spraying campaigns in accordance with a target’s account lockout policy the ability to...

kube-scan

Kube-Scan Попробуйте наш бесплатный инструмент оценки рисков Kubernetes уже сегодня. Запускайте его на любом кластере в любое время. Никакие данные не покидают ваш кластер. Мы не собираем никакой информации. Для получения дополнительной информации об Octarine посетите https://www.octarinesec.com...

columbus-server

Columbus server This repository is deprecated! ‼️ The server component is moved to https://github.com/elmasy-com/columbus. Columbus Project is an API first subdomain discovery service, blazingly fast subdomain enumeration service with advanced features. Subdomain Lookup Columbus returned 638...

atomic-operator

license atomic-operator This python package is used to execute Atomic Red Team tests Atomics across multiple operating system environments. What's new? Why? atomic-operator enables security professionals to test their detection and defensive capabilities against prescribed techniques defined with...

reposaur

Reposaur Reposaur — это инструмент обеспечения соответствия с открытым исходным кодом для платформ разработки. Аудируйте, проверяйте и составляйте отчёты по вашим данным и конфигурациям легко с помощью предопределённых и/или пользовательских политик. Поддерживает GitHub. Поддержка GitLab, BitBuck...

melting-cobalt

melting-cobalt 👀 A tool to hunt/mine for Cobalt Strike beacons and "reduce" their beacon configuration for later indexing. Hunts can either be expansive and internet wide using services like SecurityTrails, Shodan, or ZoomEye or a list of IP's. Getting started 1. Install melting-cobalt 2. Configu...

authcov

AuthCov Web app authorisation coverage scanning. Introduction AuthCov crawls your web application using a Chrome headless browser while logged in as a pre-defined user. It intercepts and logs API requests as well as pages loaded during the crawling phase. In the next phase it logs in under a...

LambdaGuard

LambdaGuard AWS Lambda — это управляемая событиями бессерверная вычислительная платформа, предоставляемая Amazon Web Services. Это сервис, который выполняет код в ответ на события и автоматически управляет вычислительными ресурсами, необходимыми для этого кода. LambdaGuard — это инструмент аудита...

CVE-2026-25049

🚨 CVE-2026-25049 – n8n 무인증 설정 정보 노출 📌 개요 CVE ID: CVE-2026-25049 영향 받는 소프트웨어: n8n 심각도: 치명적 분류: 부적절한 접근 제어 / 정보 노출 이 취약점은 특정 n8n 배포 환경에서 REST API 엔드포인트를 통해 내부 구성 데이터에 인증 없이 접근 할 수 있게 합니다. 🧭 목차 개요 기술적 세부 사항 영향 영향 받는 버전 검증 완화 조치 보안 참고 사항 면책 조항 🔍 기술적 세부 사항 취약한 구성에서 다음 엔드포인트는 인증 없이 접근할 수 있습니다: GET...

CVE-2012-1823---PHP-CGI---RCE

CVE-2012-1823 | Эксплойт удаленного выполнения кода RCE в PHP-CGI Эксплойт на Python для CVE-2012-1823. Эта уязвимость позволяет атакующему выполнить произвольный код на сервере, работающем под уязвимой версией PHP-CGI, путем внедрения аргументов командной строки через строку запроса. 📝 Обзор...

WordPress DZS Zoomsounds <=6.50 - Local File Inclusion

WordPress Zoomsounds plugin 6.45 and earlier allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the dzsapdownload action using directory traversal in the link parameter. id: CVE-2021-39316 info: name: WordPress DZS Zoomsounds =6.51 to fix t...

CVE-2026-2699

CVE-2026-2699 — Progress ShareFile Storage Zones Controller 인증 우회 고객 관리형 Progress ShareFile Storage Zones Controller SZC ≤ 5.12.3의 치명적 인증 우회CVSS 9.8 📋 개요 CVE-2026-2699 은 Progress ShareFile Storage Zones Controller고객 관리형 배포의 웹 인터페이스에 영향을 미치는 심각한 인증 우회 취약점입니다. 인증되지 않은 원격 공격자가 제한된 구성 페이지에 접근할 수 있으며,...