CVE-2017-9798

Check for CVE-2017-9798 This small script checks a shared hosting environment for CVE-2017-9798 and exits with a return code of 1 if a vulnerable .htaccess file has been found. Example usage python check.py --path /var/customers/webs/...

modsecurity-cve-2018-6389

modsecurity-cve-2018-6389 A ModSecurity ruleset for detecting potential attacks using CVE-2018-6389. For more information, see https://www.rastating.com/protecting-wordpress-against-cve-2018-6389/...

netsentryx

NetSentryx PRO 🛡️ AI-Driven, High-Performance Real-Time Network Observability & Threat Detection Engine NetSentryx PRO is a next-generation, event-driven network monitoring and threat intelligence platform. Combining rule-based signatures with a PyTorch Deep Autoencoder, it provides sub-10ms packe...

detect_bruteforce

detectbruteforce...

GoDefender

🛡️ GoDefender 🛡️ A powerful Go-based security toolkit designed to detect and defend against debugging, virtualization, and DLL injection attacks. GoDefender provides comprehensive protection mechanisms to make reverse engineering and analysis significantly more difficult. ⚠️ WINDOWS ONLY - Designed...

CVE-2021-3438

What is included? CVE-2021-3438detection v2sccm.ps1 is a script to run via sccm to get a small report on the vulnerability of managed devices. CVE-2021-3438detection.ps1 is a script to run manually or remote on a managed device. CVE-2021-3438remediation.ps1 is a script to check and run the...

MIDAS

MIDAS Mac Intrusion Detection Analysis System MIDAS has been archived MIDAS is no longer supported and has been archived. The original source is available via https://github.com/etsy/MIDAS/tree/prearchive. Take a look at Open Source Spring Cleaning for more details...

mongobleedburp

MongoBleed Burp Extension Burp Suite extension to detect CVE-2025-14847 MongoBleed via manual leak tests from a dedicated UI tab. Repository: https://github.com/j0lt-github/mongobleedburp Current version: 1.1.0 Features Manual test UI tab with host/port and min/max offsets Temporary-file leak...

cq

cq Code Query, a universal code security scanning tool. CQ scans code for security vulnerabilities and other items of interest to security-focussed code reviewers. It outputs text files containing references to issues found, into an output directory. These output files can then be reviewed,...

KilledProcessCanary

Windows Killed Process Canary A Windows Service to detect if it has been shutdown and hibernate if multiple instances are. Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com...

metasploitavevasion

Metasploit AV Evasion Metasploit payload generator that avoids most Anti-Virus products. Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Daniel Compton, daniel dot compton at nccgroup dot com https://github.com/nccgroup/metasploitavevasion Released under AGPL see...

React2shell-CVE-2025-55182-checker

CVE-2025-55182 React2Shell Detection Tool Detection tools for finding vulnerable React Server Components in your infrastructure. Quick Start Install dependencies pip3 install requests Version detection passive, safe for production python3 checker.py -u https://your-app.com What's Vulnerable React...

WindowsMemPageDelta

Windows Executable Memory Page Delta Reporter A Windows Service to performantly produce telemetry on new or modified Windows memory pages that are now executable every 30 seconds. Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Ollie Whitehouse, ollie dot whitehou...

yaml2yara

Introduction Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by David Cannings @edeca [email protected] http://www.github.com/nccgroup/yaml2yara This project is released under the AGPL license. Please see LICENSE for more information. Overview This repository...

aem-xss

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install aem-xss Run bellow command to check aem-xss -h Configurations 2. We integrated with the Telegram API to receive instant...

laravel-ignition-Rxss

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install laravel-ignition-rxss Run bellow command to check laravel-ignition-rxss -h Configurations 2. We integrated with the Telegram AP...

Zimbra-CVE-2026-73570-Rules

Wazuh Rules CVE-2026-73570 Zimbra OS Command Injection Detection rules for CVE-2026-73570 , an OS command injection in Zimbra Collaboration Suite via the SNMP trap notification parameter snmpnotify. Vulnerability Field| Detail ---|--- CVE| CVE-2026-73570 Type| OS command injection Affected| Zimbr...

GuardModel

GuardModel Block malicious AI models in your pipeline with one line of YAML. GuardModel is a GitHub Action that automatically scans ML model files for malicious code, vulnerabilities, and security risks in CI/CD pipelines. It blocks dangerous models before they reach production by detecting pickl...

AgrusScanner

Agrus Scanner Network reconnaissance tool with deep AI/ML service detection. Scans your network to discover hosts, open ports, and identifies AI services running across your infrastructure. Built for security teams, IT admins, and researchers who need visibility into shadow AI, rogue LLM...

honeypot

🍯 Honeypot Research Project What is a Honeypot A honeypot is a computer system or network that is intentionally left vulnerable to hackers in order to detect, analyse, and respond to potential security threats. The goal of a honeypot is to gather information about the tactics, techniques, and...