39127 matches found
APTSimulator
APT Simulator Important: Don't just ZIP download or clone the repo if you don't plan to develop some test. Use the package in the release which contains a packaged version with encrypted archives that don't contain cleartext samples and tools. APT Simulator is a Windows Batch script that uses a s...
pstf2
pstf^2 Passive Security Tools Fingerprinting Framework Have you ever wanted a simple, easy and stealth bypass for multiple classes of security products? pstf^2 pronounced pstf-square is an implementation of an HTTP server capable of passive browser fingerprinting - and it might just be the thing...
cpu_rec_rs
cpurecrs Determine which CPU architecture is used in a binary file. Example: $ cpurecrs /bin/bash /usr/lib/firmware/rtlwifi/rtl8821aefw Loading corpus from cpureccorpus/.corpus ---------------------------------------------------------------------------------------- File | Range | Detected...
mailMeta
A forensic tool to make analysis of email headers easy to aid in the quick discovery of the attacker. Table of Contents About mailMeta Installation Usage Linux Windows Demo Contributions Inspiration FAQ License About mailMeta What is mailMeta? mailMeta is a python based forensic tool which reads...
knockpy
🔍 Knockpy Subdomain Scan v9.0 ✅ Fast & Async • 🔐 Recon + Brute • 🔧 Easy to Extend KnockPy is a modular Python 3 tool to enumerate subdomains via passive reconnaissance and bruteforce, now with async/await support , enhanced performance, and modern HTTP/TLS handling. 🚀 Features v9 ✅ Async scanning...
react2shell-scanner
react2shell-guard Security scanner for CVE-2025-55182 - a critical CVSS 10.0 unauthenticated Remote Code Execution vulnerability in React Server Components. ⚠️ DISCLAIMER This is a security scanner , NOT an exploit tool. It is designed to help developers and security teams identify vulnerable...
invisible_playwright
Playwright gets caught by anti-bots and captchas. This one runs on an anti-detect Firefox with an undetected fingerprint, compatible with your existing Playwright code. How it works Anti-bots ask two questions, and reCAPTCHA, hCaptcha and Cloudflare Turnstile score the answers. invisibleplaywrigh...
sgxray
SGXRay: Automating Vulnerability Detection for SGX Apps Intel SGX protects isolated application logic and sensitive data inside an enclave with hardware-based memory encryption. To use such hardware-based security mechanism requires a strict programming model on memory usage， with complex APIs in...
vbulletin5-rce
vbulletin5 rce vulnerability detection tool 0x00 Overview In September 2019, vbulletin5 5.0.0-5.5.4 disclosed an RCE vulnerability CVE-2019-16759. Using the file ajax/render/widgetphp and the POST parameter widgetConfigcode, remote code execution can be directly achieved. On August 11, 2020, a...
crypter
Crypter This Crypter is written in python 3, which can be used to obfusticate, encrypt the python source code to bypass AntiVirus. Also Capable to Bypass VM such as VirtualBox, VMware, Sandboxie. Uses AES-256 bit Encryption & Base64 Encoding to Encrypt the Source Code for Twice. 3 Powerfull Metho...
banrays
Ban-Rays Glasses to detect smart-glasses that have cameras I'm experimenting with 2 main approaches: Optics: classify the camera using light reflections. Networking: bluetooth and wi-fi analysis. So far fingerprinting specific devices based on bluetooth BLE is looking like easiest and most reliab...
CVE-2017-10271
CVE-2017-10271 Weblogic wls-wsat Component Deserialization Vulnerability CVE-2017-10271 Detection and Exploitation Script Usage $ python CVE-2017-10271.py -l 10.10.10.10 -p 4444 -r http://will.bepwned.com:7001/ Features Standalone Python script Check functionality to see if any host is vulnerable...
Gitlab-CVE-2021-22205
Gitlab-CVE-2021-22205 Multi-threaded batch detection script for CVE-2021-22205 Use dnslog with poc for detection Use multi-threading for detection Custom command execution...
squidmagic
Squidmagic is a tool designed to analyze a web-based network traffic to detect central command and control C&C servers and Malicious site, using Squid proxy server and Spamhaus. Install dependencies pip install -r requirements.txt Usage python squidmagic.py /squid/access.log | | | | / |/ | | | | ...
ludus-defender-lab
Ludus Defender Lab Ludus range config and Ansible roles for a Windows security lab pre-staged for MDE and MDI, with a fully misconfigured ADCS installation for detection coverage testing. Config| VMs| Purpose ---|---|--- zsec-mde-mdi-lab.yml| DC01 + WKS01| MDE/MDI detection lab with ADCS ESC1–ESC...
In0ri
In0ri is an automated, AI-powered website defacement detection system. Introduction In0ri acts as an intelligent watchdog for your web applications. Instead of relying on traditional source code monitoring, it simulates real-user behavior by periodically taking screenshots of your target websites...
grubcrawler
Agentic web crawler with anti-detection, vision fallback, and peer-to-peer mesh. Full-stack web crawling engine with JavaScript rendering, Camoufox anti-detect browser, per-request proxy routing, and autonomous agent loops. Converts pages to clean markdown with a native Rust extraction engine. Wh...
CVE-2025-55182-NSE
Nmap scripting engine .nse for CVE-2025-55182 https://nvd.nist.gov/vuln/detail/CVE-2025-55182 ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣠⣤⠴⠶⠶⠒⠒⠒⠒⠒⠶⠶⣤⣄⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣀⣤⠶⠛⠉⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠉⠛⢶⣄⠀⣠⠴⠚⠛⠳⣦⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣴⠛⠉⠛⣶⠞⠉⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠦⣄⠀⠀⠀⠀⠀⠀⠈⠻⡅⠀⠀⠀⠀⠈⢷⡀⠀⠀⠀⠀⠀⠀⠀⠀...
heartbleed.js
heartbleed.js openssl Heartbleed bug check for Node.js check result "code":0,"data":"1803021003020ff0d8030253435b909d9b720bbc0cbc2b92a84897cfbd3904cc160a8503909..." code: 0 vulnerable. 存在漏洞 code: 1 not vulnerable. 不存在漏洞 Demo npm install heartbleed-check var heartbleed = require'heartbleed-check';...