DahuaConsole

Dahua Console Version: Pre-alpha Bugs: Indeed TODO: Lots of stuff Install requirements sudo pip3 install -r requirements.txt Arguments -h, --help show this help message and exit --rhost RHOST Remote Target Address IP/FQDN --rport RPORT Remote Target Port --proto dhip,dvrip,3des,http,https Protoco...

udpx

빠르고 가벼운 UDPX는 Go로 작성된 단일 패킷 UDP 스캐너로, 45개 이상의 서비스 검색을 지원하며 사용자 정의 서비스를 추가할 수 있습니다. 사용하기 쉽고 이식성이 뛰어나며 Linux, Mac OS, Windows에서 실행할 수 있습니다. zgrab2나 zmap과 같은 인터넷 전체 스캐너와 달리 UDPX는 이식성과 사용 편의성에 중점을 두고 설계되었습니다. 빠릅니다. 단일 서비스에 대해 전체 /16 네트워크를 약 20초 안에 스캔할 수 있습니다. libpcap이나 다른 종속성을 설치할 필요가 없습니다. Linux, Ma...

TaskHound

Windows Privileged Scheduled Task Discovery Tool for fun and profit. TaskHound hunts for Windows scheduled tasks that run with privileged accounts and stored credentials. It enumerates tasks over SMB, parses XMLs, and identifies high-value attack opportunities through BloodHound integration. For...

CVE-2023-47460

CVE-2023-47460 Description SQL injection vulnerability in Knovos Discovery v.22.67.0 allows a remote attacker to execute arbitrary code via the /DiscoveryProcess/Service/Admin.svc/getGridColumnStructure component Vulnerability Type SQL Injection Vendor of Product Knovos Discovery Affected Product...

scanopy

Scanopy Network documentation, without the drawing. Scanopy replaces manual network diagrams with a continuously maintained model of what's actually running. A single daemon scans on a schedule and produces four views from each scan: L2 physical, L3 logical, workloads, and applications. Unlike...

Complete-google-dorks

Complete-google-sql-dorks news/news.php?id= -site:php.net -"The PHP Group" inurl:source inurl:url ext:pHp !Host=. intext:encUserPassword= ext:pcf ?action= ?cat= ?id= ?intitle:index.of? mp3 artist-name-here ?intitle:index.of? mp3 name ?page= ?pagerequested= ?pid= " -FrontPage-" ext:pwd inurl:servi...

dufflebag

Dufflebag Dufflebag is a tool that searches through public Elastic Block Storage EBS snapshots for secrets that may have been accidentally left in. You may be surprised by all the passwords and secrets just laying around! The tool is organized as an Elastic Beanstalk "EB", not to be confused with...

Firmware_Slap

Firmware Slap Firmware slap combines concolic analysis with function clustering for vulnerability discovery and function similarity in firmware. Firmware slap is built as a series of libraries and exports most information as either pickles or JSON for integration with other tools. Slides from the...

CloudFail

CloudFail CloudFail is a tactical reconnaissance tool which aims to gather enough information about a target protected by Cloudflare in the hopes of discovering the location of the server. Using Tor to mask all requests, the tool as of right now has 3 different attack phases. 1. Misconfigured DNS...

secator

The pentester's swiss knife. Features • Supported commands • Installation • Usage • Documentation • Join us on Discord ! secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to improve productivity for pentesters a...

OpenAnt

OpenAnt OpenAnt from Knostic is the first open source LLM-based vulnerability discovery product now called a harness that helps defenders proactively find verified security flaws while minimizing both false positives and false negatives. Stage 1 detects. Stage 2 attacks. What survives is real. Do...

ParamFinder

ParamFinder Discover hidden parameters straight from Caido! Installation Via Community Store Recommended 1. In your Caido, go to the Plugins page 2. Navigate to the Community Store 3. Search for ParamFinder 4. Click Install 5. Done! 🎉 Manual Installation 1. Navigate to the Releases page 2. Downlo...

trackerjacker

trackerjacker 연결되지 않은 WiFi 네트워크를 매핑하는 nmap과 같은 도구입니다. 원시 802.11 모니터링을 통해 WiFi 네트워크와 장치를 매핑하고 추적합니다. PyPI 페이지: https://pypi.python.org/pypi/trackerjacker 설치 pip3 install trackerjacker 지원 플랫폼 : Linux Ubuntu, Kali, RPi에서 테스트 및 macOS pre-alpha trackerjacker는 다음과 같은 작업에 도움이 됩니다: 주변의 모든 WiFi 네트워크를 알고 각...

RogueAssemblyHunter

. . \ / \ | | | .. | // \ / | | / \ / / \ \ / // // \ / | | | // | /\ / / | \ \ \ /| Y Y \ \ \ | | || // /|/ | / || / // | / // / / / / / / / / / | \ / | / \ | / \ / \ Y / | / | \ | \ /| | / | /|/|| /| | / / / Rogue Assembly Hunter Rogue Assembly Hunter is a utility for discovering 'interesting'...

troll-a

Troll-A Troll-A is a command line tool for extracting secrets such as passwords, API keys, and tokens from WARC Web ARChive files. Troll-A is an easy-to-use , comprehensive , and fast solution for finding secrets in web archive. Features Protocols: Supports retrieving web archives directly from a...

cygor

Cygor General Overview Cygor is a modular asset discovery framework that brings scanning, parsing, and service enumeration together in one workflow. It replaces the patchwork of separate tools with an automated process that handles discovery, enrichment, and targeted enumeration seamlessly —...

ODIN

ODIN Observe, Detect, and Investigate Networks Current version: v2.0.0 "Huginn" ODIN is Python tool for automating intelligence gathering, asset discovery, and reporting. Remember, check the dev branch for the bleeding edge, and feedback is welcome! See the GitHub wiki for details and installatio...

apkleaks

APKLeaks APK 파일에서 URI, 엔드포인트 및 비밀 정보를 스캔합니다. 설치 PyPi에서 설치 소스에서 설치 Docker에서 설치 사용법 옵션 출력 패턴 디스어셈블러용 인수 라이선스 감사의 말 설치 APKLeaks 설치는 매우 간단합니다: PyPi에서 설치 $ pip3 install apkleaks 소스에서 설치 저장소를 클론하고 필요한 패키지를 설치합니다: $ git clone https://github.com/dwisiswant0/apkleaks $ cd apkleaks/ $ pip3 install -r...

domain-to-webapp

domain-to-webapp A simple bash script for finding web application hosted within a domain Requirements curl Subfinder docker image Usage $./webAppChecker businesssolutions.com ./ouputdir ./scope.txt | \ | | \ \ / /| | / \ | | | |/ | ' \ / | | ' \ | / \ \ \ /\ / / \ ' \ / \ | ' | ' \ | || | | | | |...

OneForAll

OneForAll 👊OneForAll is a powerful subdomain integration tool 📝中文文档 🚀Start Guide 📢 Please read this document to help you start quickly! 🐍Installation requirements OneForAll is developed and tested based on Python 3.6.0, OneForAll needs to be higher than Python 3.6.0 to run. For more information o...