JSONPath

see also licenses for dev. deps. JSONPath Plus Analyse, transform, and selectively extract data from JSON documents and JavaScript objects. jsonpath-plus expands on the original specification to add some additional operators and makes explicit some behaviors the original did not spell out. Try th...

nosqlpot

NoSQL-Honeypot-Framework NoPo NoSQL-Honeypot-Framework NoPo is an open source honeypot for nosql databases that automates the process of detecting attackers,logging attack incidents. The simulation engines are deployed using the twisted framework.Currently the framework holds support for redis. N...

SwaggerSpy

SwaggerSpy Overview SwaggerSpy is a tool designed for automated Open Source Intelligence OSINT on SwaggerHub. This project aims to streamline the process of gathering intelligence from APIs documented on SwaggerHub, providing valuable insights for security researchers, developers, and IT...

CVE-2022-22965

Spring4ShellCVE-2022-22965 Spring Framework RCE via Data Binding on JDK 9+ / spring4shell / CVE-2022-22965 Spring4ShellCVE-2022-22965 Exploit Demo https://user-images.githubusercontent.com/57348147/161458377-44ab2f76-f947-4599-aa0a-92cbaac819f8.mp4 Build docker pull me2nuk/cves:2022-22965 docker...

opensnitch

Join the project community on our server! OpenSnitch is a GNU/Linux application firewall. •• Key Features • Download • Installation • Usage examples • In the press •• Key features Interactive outbound connections filtering. Block ads, trackers or malware domains system wide. Ability to configure...

awesome-privacy

Awesome Privacy List of free, open source and privacy respecting services and alternatives to privative services. About | Contributing | Quotes | Discussions !IMPORTANT Anonymity, Privacy, and Security are often used interchangeably, but they actually represent distinct concepts. It is important ...

EasySpider

易采集/EasySpider: Visual Code-Free Web Crawler 一个完全免费 （包括商业使用和二次开发 ）的可视化浏览器自动化测试/数据采集/爬虫软件，可以使用图形化界面，无代码可视化的设计和执行任务。只需要在网页上选择自己想要操作的内容并根据提示框操作即可完成任务的设计和执行。同时软件还可以单独以命令行的方式进行执行，从而可以很方便的嵌入到其他系统中。 A completely free including for commercial use and secondary development visual browser automation...

AI-SPM

Orbyx AI SPM - AI Security Posture Management AI security posture management AI-SPM is a comprehensive approach to maintaining the security and integrity of artificial intelligence AI and machine learning ML systems. It involves continuous monitoring, assessment, and improvement of the security...

AperiSolve

Aperi'Solve Try it now: https://www.aperisolve.com Support Aperi'Solve: Aperi'Solve is an open-source steganalysis web platform that performs automated analysis on images to detect and extract hidden data using common steganography tools and techniques. Key features Visualize each bit layer LSB a...

poc-cve-2018-1273

CVE-2018-1273 Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user or attacker can supply specially crafted...

AzureHound

AzureHound The BloodHound data collector for Microsoft Azure Get AzureHound Release Binaries Download the appropriate binary for your platform from one of our Releases. Rolling Release The rolling release contains pre-built binaries that are automatically kept up-to-date with the main branch and...

RedDrop

RedDrop Exfil Server Check out the accompanying MaverisLabs Blog Post Here! RedDrop Exfil Server is a Python Flask Web Server for Penetration Testers, Red Teamers, and Security Professionals which features: File Upload Automatic Payload Processing Automatic Archive Extraction JSON Logging...

CVE-2025-14847_Expolit

MongoBleed-Pro ☠️ Advanced MongoDB Memory Leak Exploit Tool Keep Learning | Keep Hacking with CyberTechAjju 🔥 About MongoBleed-Pro is an advanced exploitation tool for CVE-2025-14847 , a critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security...

shotlooter

Introduction Shotlooter tool is developed to find sensitive data inside the screenshots which are uploaded to https://prnt.sc/ via the LightShot software by applying OCR and image processing methods. +-------------------+ IMAGE FILE |!/usr/bin/python | +--------------------+ | +-----SENSITIVE...

cve-2025-1323

cve-2025-1323 WP-Recall Plugin SQL Injection ⚠️ Legal Disclaimer This tool is intended for authorized security testing and educational use only. Do not use against systems without explicit permission. Misuse may be illegal. ✅ Requirements Python 3.x requests module Install dependencies: pip instal...

dwipe

dwipe dwipe is a tool to wipe disks and partitions for Linux to help secure your data. dwipe aims to reduce mistakes by providing ample information about your devices during selection. Quick Comparison Feature| dwipe| nwipe| shred| dd ---|---|---|---|--- Firmware wipes SATA/NVMe secure erase| ✓| ...

public-bugbounty-programs

Public BugBounty Programs Community curated list of public bug bounty and responsible disclosure programs. This repo serves as the central management system for the public bug bounty programs used on Chaos by ProjectDiscovery. Data Model Source file: src/data.yaml. Schema: src/data.schema.json...

Photon

Photon Incredibly fast crawler designed for OSINT. Photon Wiki • How To Use • Compatibility • Photon Library • Contribution • Roadmap Key Features Data Extraction Photon can extract the following data while crawling: URLs in-scope & out-of-scope URLs with parameters example.com/gallery.php?id=2...

aisecplus-week01-danielossai

🔐 AISec Plus — Week 1: Map the Threat Researcher: Daniel Ossai Repo: aisecplus-week01-danielossai Submitted: Week 1 · AISec Plus Bootcamp 📌 Incident Name & Date EchoLeak CVE-2025-32711 Discovered: January 2025 · Disclosed: June 2025 · Patched: June 2025 📝 What Happened Researchers at Aim Security...

CVE-2024-1071-PoC-Script

CVE-2024-1071 Exploit Script 🚀 🌟 Disclaimer This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all applicable local, state, and federal...