NSE--CVE-2023-22515

NSE script for checking the presence of CVE-2023-22515...

OpenSSH-Vulnerability-test

OpenSSH CVE-2024-6387 Vulnerability Checker Overview This C program scans specified IP addresses or network ranges to check if the servers are running a potentially vulnerable version of OpenSSH. It checks if the SSH port default is 22 is open, retrieves the SSH banner, and determines if the serv...

five-nights-at-follina-s

Five Nights at Follina's A Fullstack Academy Cybersecurity project examining the full cycle of the Follina CVE-2022-30190 vulnerability, from exploit to detection and defense. Team: Brian Aldrich YoungWa Kim Jay O'Neill Binyang Jeffrey Xu This set of tools assumes that you have a web host or can...

Anti-Virus-Evading-Payloads

🚩 Anti-Virus-Evading-Payloads !CAUTION During the exploitation phase of a pen test or ethical hacking engagement, you will ultimately need to try to cause code to run on target system computers. Whether accomplished by phishing emails, delivering a payload through an exploit, or social engineerin...

DBShield

DBShield Protects your data by inspecting incoming queries from your application server and rejecting abnormal ones. How it works? For example, this is how web server normally interacts with database server: By adding DBShield in front of database server we can protect it against abnormal queries...

phpMussel

What is phpMussel? An ideal solution for shared hosting environments, where it's often not possible to utilise or install conventional anti-virus protection solutions, phpMussel is a PHP script designed to detect trojans, viruses, malware and other threats within files uploaded to your system...

keyhog

Website · Documentation · Architecture · Vyre GPU engine KeyHog: GPU-accelerated secret scanner for code, cloud, and CI KeyHog is an open-source secret scanner in Rust that finds and verifies leaked API keys, tokens, passwords, and credentials across source code, Git history, containers, cloud...

frida

Frida Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers. Learn more at frida.re. Two ways to install 1. Install from prebuilt binaries This is the recommended way to get started. All you need to do is: pip install frida-tools CLI tools pip install frida...

wifi-monitor

wifi-monitor Prints the IPs on your local network that're sending the most packets ack = 802.11 control frame acknowledgement or block acknowledgement req = 802.11 control frame request to send clear = 802.11 control frame clear to send data = QoSData or Data Options: -j: prints new devices that...

aparoid

Aparoid Aparoid is a framework designed for Android application analysis. It offers an automated set of tools to discover vulnerabilities and other risks in mobile applications. It is built using the Flask framework and offers a web GUI to upload APK files and explore the contents / results. The...

Specter-FlipperZero

The waveform is not a graphic. It is 128 columns of 13.56 MHz carrier that Specter recorded off a real polling reader at 8 ms per column, read back out of the screenshot beside it. Its duty measures 28% where the device's own counter printed 27%, and both numbers are on the banner. Sweep for the...

Sirius

Sirius Scan Sirius is an open-source vulnerability scanner with automated discovery, CVE-based detection, and a modern web UI. Clone, run four commands, start scanning. Quick Start git clone https://github.com/SiriusScan/Sirius.git cd Sirius docker compose -f docker-compose.installer.yaml run --r...

gitGraber

About gitGraber gitGraber is a tool developed in Python3 to monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon AWS, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe, Twilio... How it works ? It's important to understand th...

CVE-2023-25194

This tool is intended for security testing purposes only. Do not engage in any illegal activities. Any consequences resulting from misuse are solely your responsibility. The CVE-2023-25194 detection tool utilizes JNDI to load the response content returned by the DNS log platform to determine the...

engine

Droidefense Engine Advance Android Malware Analysis Framework Latest release Download What Droidefense is Droidefense originally named atom: a nalysis t hrough o bservation m achine is the codename for android apps/malware analysis/reversing tool. It was built focused on security issues and trick...

ore-mal-pkg-inspector

OreWatch Multi-Ecosystem Malicious Package Detection and Supply Chain Security Scanner A production-grade security tool for detecting malicious packages and supply chain threats across npm, PyPI, Maven, RubyGems, Go, and Cargo ecosystems. Leverages automated threat intelligence collection from...

LogonTracer

Concept LogonTracer v2 is a tool to investigate malicious logon by visualizing and analyzing Windows Active Directory event logs. This tool associates a host name or an IP address and account name found in logon-related events and displays it as a graph. This way, it is possible to see in which...

BadExclusionsNWBO

BadExclusions Now With Better Opsec BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR. How it works? BadExclusionsNWBO copies and runs HookChecker.exe in all folders and subfolders of a given path. You need to have HookChecker.exe ...

weblogic_2019_2725_wls_batch

weblogic20192725wlsbatch weblogic CVE-2019-2725 vulnerability Exp, targeting the wls-wsat component vulnerability. It uses three exploits for batch detection. At the time of writing, I didn't think too much about it — just verifying the existence of the vulnerability was enough. So the script's...

LLMReaper

Passive LLM Conversation Capture & Sensitive Data Exposure Research Chromium MV3 Extension • Real-Time DOM Capture • Secret Detection • FastAPI Backend !WARNING This project is provided strictly for security research, educational use, and defensive awareness purposes. Unauthorized deployment...