39005 matches found
cve-2020-0601-plugin
Zeek test script for CVE-2020-0601 This script can detect exploit attempts for CVE-2020-0601. It performs a check to see if a known curve is used in a certificate - if this is not the case a notice is raised. Example notice in notice.log: 1579043477.791522 CHhAvVGS1DHFjwGM9 192.241.209.49 46110...
Exploiting-and-Mitigating-CVE-2020-0796-SMBGhost-and-Print-Spooler-Vulnerabilities
Exploiting-and-Mitigating-CVE-2020-0796-SMBGhost-and-Print-Spooler-Vulnerabilities This repository contains detailed documentation and code related to the exploitation, detection, and mitigation of two significant vulnerabilities: CVE-2020-0796 SMBGhost and Print Spooler. The repository showcases...
-cve-2025-55182
CVE-2025-55182 Mass / Single URL Detection Script image An efficient CVE-2025-55182 vulnerability detection tool, supporting single URL quick detection and batch URL detection, automatically generating detailed Excel detection reports, and outputting complete log files. š„ Core Features Supports...
aigate
aigate Secret hygiene for AI-generated code. Catches hardcoded credentials in prompts, tool inputs, generated code, and existing files. Quick start pip install aigate && aigate setup-all That's it. This installs a background proxy redact mode, a PostToolUse hook for file scanning, and registers t...
SkyProfile
SkyProfile SkyProfile is a PyQt5 desktop app for querying ADSBexchange globe history for single or multiple aircraft, detecting multi-leg flights, and exporting KML/CSV/JSON/Excel with rich analytics airports, routes, time buckets, callsigns, FAA metadata. Key Features Date-range query by ICAO he...
NORM-EDR
NORM-EDR NORM Normal EDR is an experimental kernel-mode EDR research project focused on explainable detection rather than silent blocking. Instead of assigning scores or killing processes, NORM answers one question: Why does this binary look suspicious? This project is built step-by-step in publi...
duo-agentflow-auditor
Duo AgentFlow Auditor AI Code Security ā catching what SAST misses in AI-generated code Built on the GitLab Duo Agent Platform 40-62% of AI-generated code contains security vulnerabilities. Traditional SAST catches CVEs. We catch what SAST misses ā prompt injection, LLM output execution, unsafe M...
NotProxyShellHunter
NotProxyShellHunter Check for NotProxyShell CVE-2022-40140 & CVE-2022-41082...
POC-CVE-2018-7600
POC-CVE-2018-7600 Drupal vulnerable to CVE-2018-7600 Drupalgeddon2 Scanner CVE-2018-7600 Simple Python scanner to detect Drupal servers potentially vulnerable to CVE-2018-7600 Drupalgeddon2. The script does not exploit or open a shell , it only: 1. Sends a request to the user/password flow. 2...
cfengine-CVE-2016-2118
+Title: CVE-2016-2118 Inventory and Remediation +SETUPFILE: /src/org-html-themes/setup/theme-readtheorg.setup file:./media/badlock.png This policy detects hosts vulnerable to https://vulners.com/cve/CVE-2016-2118CVE-2016-2118 commonly known as http://badlock.orgBadlock by checking if a known...
CVE-2020-9484-Scanner
This repository does not have a README...
zeek-spicy-openvpn
zeek-spicy-openvpn Questo ĆØ un analizzatore di protocollo che rileva il traffico OpenVPN. Per usare questo pacchetto ĆØ necessario installare Spicy. Blog e webinar che descrivono lo sviluppo di questo analizzatore di protocollo: https://zeek.org/2021/03/16/a-zeek-openvpn-protocol-analyzer/...
zeek-spicy-stun
STUN Session Traversal Utilities for NAT STUN Questo ĆØ un analizzatore di protocollo Zeek che rileva STUN basato su Spicy. Devi installare Spicy per usare questo pacchetto. Questo pacchetto creerĆ due log: stun.log - Questo log contiene ogni messaggio STUN. stunnat.log - Questo log contiene le...
CVE-2024-0235
Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2024-0235 Run bellow command to check CVE-2024-0235 -h Configurations 2. We integrated with the Telegram API to receive...
CVE-2024-29973
CVE-2024-29973 Exploiter a Vulnerability detection and Exploitation tool for CVE-2024-29973 with Asychronous Performance. Installation: git clone https://github.com/RevoltSecurities/CVE-2024-29973 pip install -r requirements.txt python3 exploit.py --help Usage: python3 exploit.py -h / / / / / / /...
React2Shell-CVE-2025-55182-Detector
Prerequisites Access to the project root directory containing package.json One of the following runtimes, depending on the script used: Python Javascript PowerShell Bash with jq installed Usage All scripts must be executed from the root directory of the target project where the package.json file ...
sysmon-config
Sysmon ATT&CK Configuration The file provided should function as a great starting point for system monitoring in a self-contained package. This configuration and results should give you a good idea of what's possible for Sysmon. Please beware that you may need to fine tune and add exclusions...
persistence-info.github.io
The repository tries to gather an information about Windows persistence mechanisms to make the protection/detection more efficient. Most of the information is well known for years, being actively used within various scenarios. Expect more. I am doing my best to add new entries each day. How it...
s3cXSSer
s3cXSSer This extension will help you to detect GET/POST based XSS vulnerability in any website easily , S3C - XSSER - Chrome extension How to add it to chrome or brave browser 1- Go to brave://extensions/ or chrome://extensions/ 2- enable Developer mode and click Load unpacked 3- locate the fold...
YARA_Rules
Yara Rules BY MALGAMY This project contains a collection of Yara rules that can be used to identify and classify various types of files. Table of Contents Overview Installation Usage Contributing Overview Yara is a tool that allows users to create their own rules for identifying and classifying...