CitrixHoneypot

Honepot for CVE-2019-19781 Citrix ADC Detect and log CVE-2019-19781 scan and exploitation attempts. Requirements: python3 openssl Usage: 1. Clone repo: git clone https://github.com/MalwareTech/CitrixHoneypot.git CitrixHoneypot && cd CitrixHoneypot 2. Make ssl and logs directory: mkdir logs ssl 3...

smart-tree

🌳 Smart Tree - The Smart Treehouse: Cyber-Botanical Dashboard & Agent-Agnostic Hooks! 🌐 Smart Tree is a blazingly fast, AI-friendly directory visualization tool that's 10-24x faster than traditional tree. Now with Security Scanner for supply chain attack detection, Aye Consciousness preservation,...

analyzer

This project automates the daily tasks of Threat Intelligence Analyzer role internally without external resources' interaction. It analyzes, visualizes and structures sensitive files Malware or data by extracting features, artifacts and IoC using different modules. The output of those modules can...

Log4j-CVE-Detect

Log4J-CVE-Detect This repository contains a set of YARA rules for detecting versions of log4j which are vulnerable to CVE-2021-44228, CVE-2021-45046, and / or CVE-2021-45105 by looking for a number of features which appear in affected versions. This tool works recursively on binary files such as...

CloudGrappler

CloudGrappler Permiso: https://permiso.io Read our release blog: https://permiso.io/blog/cloudgrappler-a-powerful-open-source-threat-detection-tool-for-cloud-environments CloudGrappler is a purpose-built tool designed for effortless querying of high-fidelity and single-event detections related to...

vulnerability-spoiler-alert

Vulnerability Spoiler Alert Know about security patches before the CVE drops. View Live Site | Subscribe via RSS A monitoring hub that watches popular open-source repositories and uses AI to detect when commits are patching security vulnerabilities - often before a CVE is even assigned. Findings...

log4shell-tools

log4shell.tools log4shell.tools is a tool that allows you to run a test to check whether one of your applications is affected by the recent vulnerabilities in log4j: CVE-2021-44228 and CVE-2021-45046. This is the code that runs https://log4shell.alexbakker.me. If you'd like to inspect the code or...

Minio-CVE-2023-28432

Minio-CVE-2023-28432 Detection tool for Minio-CVE-2023-28432 information leak. For learning and authorized testing only. Personal analysishttps://lhxhl.github.io/2023/04/03/minio2023/ Usage Requires golang environment go build main.go ./main -h // help ./main -u url // single URL detection ./main...

CVE-2024-50379-PoC

See more PoCs at https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X Script Usage Batch detection: python poc.py -f url.txt Single detection: python poc.py -u your-ip...

detect-secrets

detect-secrets About detect-secrets is an aptly named module for surprise, surprise detecting secrets within a code base. However, unlike other similar packages that solely focus on finding secrets, this package is designed with the enterprise client in mind: providing a backwards compatible ,...

altair

ALTAIR - A Modular Web Vulnerability Scanner Copyleft by Simone Margaritelli [email protected] http://www.evilsocket.net - http://www.backbox.org Usage: altair options -u EXAMPLES: altair --filter=lfi,rfi --url=http://www.somesite.com altair --filter=sqli --load-modules=sqlmap...

sniffglue

sniffglue sniffglue is a network sniffer written in rust. Network packets are parsed concurrently using a thread pool to utilize all cpu cores. Project goals are that you can run sniffglue securely on untrusted networks and that it must not crash when processing packets. The output should be as...

php-reverse-shell

PHP Reverse Shell Just a little refresh on the popular PHP reverse shell script pentestmonkey/php-reverse-shell. Credits to the original author! Works on Linux OS and macOS with /bin/sh and Windows OS with cmd.exe. Script will automatically detect the underlying OS. Works with both, ncat and...

pivotnacci

pivotnacci Pivot into the internal network by deploying HTTP agents. Pivotnacci allows you to create a socks server which communicates with HTTP agents. The architecture looks like the following: This tool was inspired by the great reGeorg. However, it includes some improvements: Support for...

CVE-2022-1388

CVE-2022-1388 F5 BigIP exploit CVE-2022-1388 scanner...

fingerprint

fingerprint Monitoring Registry and File Changes in Windows - forensic analytics for windows registry and files "fingerprint" records the state of a windows system, in terms of files and registry. Such fingerprints can be compared to find all changed data. The data can be narrowed with procmon...

CVE-2022-35914

CVE-2022-35914 Batch Detection Tool Create a target.txt file, import the URLs to be detected, and then start batch detection. If an error occurs, please disable the proxy...

KubeLight

OWASP KubeLight - Kubernetes Security Scanner Scan your Kubernetes Cluster for Security & Compliance 1. Scan K8s clusters to detect Misconfiguration. 2. Lightweight, Pure python, fast, multithreaded tool. 3. NoSQL Query Engine. 4. Realtime alerts on Slack 5. SBOM generation and Image Vulnerabilit...

Zircolite

Standalone Sigma-based detection for EVTX, Auditd, Sysmon for Linux, XML, CSV and JSON logs Zircolite runs Sigma rules over your logs. It flattens events into SQLite, turns each rule into an SQL query and reports what matches, offline, in one command. Many log formats , detected automatically:...

dexfinder

dexfinder English | 中文 | Website Website : junelegency.github.io/dexfinder Cross-platform APK/DEX method & field reference finder with call chain tracing, ProGuard/R8 deobfuscation, and Android hidden API detection. Inspired by Android's veridex tool, reimplemented in Go with enhanced capabilitie...