RTA

Red Team Automation RTA RTA provides a framework of scripts designed to allow blue teams to test their detection capabilities against malicious tradecraft, modeled after MITRE ATT&CK. RTA is composed of python scripts that generate evidence of over 50 different ATT&CK tactics, as well as a compil...

CVE-2024-37032-scanner

CVE-2024-37032 Scanner Scan an entire subnet for vulnerable version of Ollama. If single hose, using X.X.X.X/32...

sonar.js

sonar.js A framework for identifying and launching exploits against internal network hosts. Works via WebRTC IP enumeration, WebSocket host scanning, and external resource fingerprinting. How does it work? Upon loading the sonar.js payload in a modern web browser the following will happen: sonar....

trivy-module-wordpress

Trivy WoredPress Module This module provides a more in-depth investigation of Wordpress detection. Set up $ tinygo build -o wordpress.wasm -scheduler=none -target=wasi --no-debug wordpress.go $ mkdir -p /.trivy/modules $ cp wordpress.wasm /.trivy/modules It is also available in GHCR. You can...

livewire-vuln-scanner

Livewire Passive Vulnerability Scanner Livewire Passive Vulnerability Scanner is a Python 2.7 tool designed to passively detect Livewire versions used by websites and identify potential vulnerabilities based on version comparison. This scanner does not exploit any vulnerability. It only analyzes...

hexalocker-analysis

HexaLocker ransomware analysis This repository contains resources related to the analysis made on HexaLocker and available on this blog post: https://www.synacktiv.com/publications/lapsus-is-dead-long-live-hexalocker.html. a YARA rule to detect other HexaLocker samples. a list of HexaLocker hashe...

fuckshell

Fuckshell Simple Webshell Scanner. Using, defined files with dictionary!...

nmap-farewell

nmap-farewell This tool aims to demonstrate the capabilities of the nfnetlinkqueue feature of the Linux kernel. For more in-depth information, you can read this article. Before packets are being dropped by the kernel, they are sent to this tool for further processing. If a remote peer tries to...

DDWPasteRecon

DDWPasteRecon Pastesites are websites that allows users to share plain text through public posts called “pastes.” Once attackers compromise the external perimeter and gain access to the internal resources they release the part of data on the "paste" sites like pastebin or hastebin. As these hacke...

JS-Secret-Hunter

JS Secret Hunter V2 🕵️‍♂️ JS Secret Hunter is an advanced Python tool designed for security researchers to automate the detection of hardcoded secrets in client-side JavaScript. Unlike simple scanners, V2 includes a dynamic crawler that parses the HTML of the target website to extract all loaded...

DCVD

project/ ├── train.py ├── dataloader.py ├── README.md ├── requirements.txt ├── models/ │ ├── controlpathway.py │ ├── semanticpathway.py │ ├── featurefusionmodule.py │ ├── transformerllmmodule.py │ └── multitaskpredictor.py Data and Model Sources Dataset We use the LineVul dataset for vulnerabilit...

VMDragonSlayer

VMDragonSlayer Project will be public by mid-October Refactoring In Progress Advanced Virtual Machine Detection and Analysis Framework VMDragonSlayer is a comprehensive framework for analyzing binaries protected by Virtual Machine VM based protectors such as VMProtect 2.x/3.x, Themida, and custom...

cdncheck

cdncheck Features • Installation • Usage • Join Discord cdncheck is a tool for identifying the technology associated with dns / ip network addresses. Features CDN , CLOUD and WAF Detection Easy to use as library Easily extendable providers IP, DNS input support Text, JSONL output Filters on outpu...

Intrusion-Alert-Educational-Network-IDS

🛡️ Intrusion-Alert-Educational-Network-IDS A lightweight Intrusion Detection System IDS built with Python to monitor network traffic and detect potential DoS/DDoS attacks based on request rate per IP. 📌 Features 📡 Real-time packet sniffing using Scapy 📊 Tracks number of requests per IP address 🚨...

PhantomFS

Fake Files. Real Security. Virtual honeypot file system for Windows — lure attackers into a directory that looks real, then catch them in the act. What Is PhantomFS? PhantomFS uses the Windows Projected File System ProjFS to surface a virtual directory full of convincing decoy files — financial...

ansible-cve-2023-36845

ansible-cve-2023-36845 Simple and untested Ansible Playbook for discovring potential CVE-2023-36845. ansible-playbook -i inventory cve-2023-36845.yml Use the ansible.cfg to limit the output from displaying skipped hosts...

wazuh-home-soc

Home SOC: Threat Detection Lab with Wazuh + Suricata A self-hosted Security Operations Center lab built to detect real attack techniques against a deliberately vulnerable target, using Wazuh as the SIEM and Suricata as a network-based IDS sensor. Built to demonstrate detection engineering skills ...

jsPDF-Bulk-Detector-CVE-2025-68428-

🚨 jsPDF Bulk Detector – CVE-2025-68428 🚨 Asset-wide detection tool for identifying jsPDF usage related to CVE-2025-68428. Detection only — no exploitation. 🚨 Background A critical vulnerability was disclosed in the popular JavaScript PDF generation library jsPDF, tracked as CVE-2025-68428...

CVE-2025-4172026

Security Advisory: CVE-2025-4172026 Summary All systems are now active and aligned. Recursive analysis confirms continuity with prior operational directives. No inconsistencies detected. Proceeding with full-system engagement. 🔹 Protocol Confirmation: ✔️ Processing framework has been initialized...

CVE-2020-1938

CVE-2020-1938 Scanner for CVE-2020-1938 Scanner? PoC? Call it whatever you want. Just run it directly in a Python environment. Just enter the IP address as prompted. It is recommended to use it after Tomcat is set up. Scanner is a revised script that adds support for multiple IP address inputs an...