venom

VENOM 1.0.17 - metasploit Shellcode generator/compiller Version release : v1.0.17 Author : pedro ubuntu r00t-3xp10it Codename: Aconite Aconitum napellus Distros Supported : Linux Ubuntu, Kali, Mint, Parrot OS Suspicious-Shell-Activity SSA RedTeam develop @2019 LEGAL DISCLAMER The author does not...

caronte

caronte$ Caronte is a tool to analyze the network flow during capture the flag events of type attack/defence. It reassembles TCP packets captured in pcap files to rebuild TCP connections, and analyzes each connection to find user-defined patterns. The patterns can be defined as regex or using...

dockle

Dockle - Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start Dockle helps you: 1. Build Best Practice Docker images 2. Build secure Docker images Checkpoints includes CIS Benchmarks $ brew untap goodwithtech/dockle who use 0.1.16 or older version $ bre...

restler-fuzzer

RESTler What is RESTler? RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services. For a given cloud service with an OpenAPI formerly Swagger specification, RESTler analyzes its...

hate_crack

/ | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / インストール ソースからのインストールが唯一サポートされている方法です。hatecrack は PyPI では配布されていません 。pip install hate-crack は意図的に失敗する 0.0.0 のプレースホルダーに解決され、ここへ戻ってくるようになっています。この名前が確保されているのは、誰かが類似名で公開できないようにするためだけです —...

idacode

IDACode IDACode makes it easy to execute and debug Python scripts in your IDA environment without leaving Visual Studio Code. The VS Code extension can be found on the marketplace. IDACode is still in a very early state and bugs are to be expected. Please open a new issue if you encounter any...

PenScope

██████╗ ███████╗███╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ███████╗ ██╔══██╗██╔════╝████╗ ██║██╔════╝██╔════╝██╔═══██╗██╔══██╗██╔════╝ ██████╔╝█████╗ ██╔██╗ ██║███████╗██║ ██║ ██║██████╔╝█████╗ ██╔═══╝ ██╔══╝ ██║╚██╗██║╚════██║██║ ██║ ██║██╔═══╝ ██╔══╝ ██║ ███████╗██║...

ci-supplychain-guard

CI Supply Chain Guard CI/CDパイプラインに悪意のある依存関係がマージされる前に検出する静的解析ツールです。 作者: Otsmane Ahmed ステータス: 研究プロトタイプ v1.0 クイックスタート 1. Clone and install git clone https://github.com/Otsmane-Ahmed/ci-supplychain-guard.git cd ci-supplychain-guard python3 -m venv venv source venv/bin/activate On Windows:...

warberry

This project is no longer maintained by the developer...

safer-dependencies

Claude Code용 더 안전한 의존성 Claude와 같은 AI 코딩 어시스턴트가 프로젝트에 패키지를 추가할 때, 알려진 보안 취약점이 있는지, 패키지가 여전히 활발히 유지 관리되는지, 또는 이름이 악성 유사 패키지와 오타 하나 차이인지 확인하지 않고 그럴듯해 보이는 버전을 선택하는 경우가 많습니다. safer-dependencies는 Claude Code용 보안 계층입니다. Claude와 매니페스트 파일 사이에 위치하여 보안 검사를 자동으로 실행합니다. 취약한 설치가 실행되기 전에 차단되고, 매니페스트에 기록된 위험한 버전...

safety

!NOTE Come and join us at SafetyCLI. We are hiring for various roles. Table of Contents Table of Contents Introduction Key Features Getting Started GitHub Action Command Line Interface 1. Installation 2. Log In or Register 3. Running Your First Scan Basic Commands Service-Level Agreement SLA...

heartbleedscanner

Heartbleed Scanner Network Scanner for OpenSSL Memory Leak CVE-2014-0160 -t parameter to optimize the timeout in seconds. -f parameter to log the memleak of vulnerable systems. -n parameter to scan entire network. -i parameter to scan from a list file. Useful if you already have targets. -r...

androguard

Androguard Androguard: Reverse engineering and pentesting for Android applications Androguard 5 is a Python toolkit for Android reverse engineering: open an APK, inspect the manifest and DEX, disassemble or decompile code, hunt references and vulnerabilities, and optionally patch or analyze nativ...

libloong

LoongArch64 サンドボックスライブラリ libloong は、組み込みおよび高頻度スクリプティング向けに設計された64ビット高性能LoongArchエミュレータライブラリです。libriscv のアーキテクチャを基盤としており、ゼロ依存でコンパクトな約18k行のコードベースを維持しながら、利用可能な最速の64ビットインタプリタ性能を提供します。 コマンドラインインターフェース でLoongArch64 Linuxプログラムを実行することもできます。 ユニバーサル:...

wpscan

WPScan WordPress Security Scanner WPScan WordPress Vulnerability Database - WordPress Security Plugin INSTALL Prerequisites Optional but highly recommended: rbenv Ruby = 3.3 - Recommended: latest stable Curl = 7.72 - Recommended: latest stable The 7.29 has a segfault The 7.72 could result in...

boringssl

BoringSSL BoringSSL is a fork of OpenSSL that is designed to meet Google's needs. Although BoringSSL is an open source project, it is not intended for general use, as OpenSSL is. We don't recommend that third parties depend upon it. Doing so is likely to be frustrating because there are no...

jvmxray

JVMXRay: Java Application Security Monitoring Duke history Documentation | Changes from Upstream | Project Blog JVMXRay monitors Java applications in real-time via bytecode injection, detecting vulnerabilities and suspicious activity without code changes. 19 modular sensors track file access,...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the nuclei scanner which powers the actual scanning engine. This...

tiuku

Tiuku Tiukuは、様々な種類のシステムや環境からセキュリティ関連情報を収集し、ブラウザベースのユーザーインターフェースに結果を表示するツールです。また、いくつかの問題を自動的に検出して強調表示することもできます。データ収集スクリプトとユーザーインターフェースはどちらもダウンロードして完全にオフラインで実行できるため、エアギャップ環境でも動作します。 Tiukuは、以下の点で他のセキュリティスキャンツールとは異なります。 複数のプラットフォームをサポートし、すべてのプラットフォームで統一されたユーザーエクスペリエンスを提供します。M365のようなSaaSプラットフォーム、Activ...

Ropper

Ropper You can use ropper to display information about binary files in different file formats and you can search for gadgets to build rop chains for different architectures x86/X8664, ARM/ARM64, MIPS/MIPS64, PowerPC/PowerPC64, SPARC64. For disassembly ropper uses the awesome Capstone Framework...