scilla

🏴‍☠️ Information Gathering tool 🏴‍☠️ - DNS / Subdomains / Ports / Directories enumeration Coded with 💙 by edoardottt Share on Twitter! Install • Get Started • Examples • Changelog • Contributing • License Installation 📡 Homebrew brew install scilla Snap sudo snap install scilla Golang go install -v...

webkiller

WebKiller V2 Tool Information Gathering Write With Python. PreView ██╗ ██╗███████╗██████╗ ██╗ ██╗██╗██╗ ██╗ ███████╗██████╗ ██║ ██║██╔════╝██╔══██╗██║ ██╔╝██║██║ ██║ ██╔════╝██╔══██╗ ██║ █╗ ██║█████╗ ██████╔╝█████╔╝ ██║██║ ██║ █████╗ ██████╔╝ ██║███╗██║██╔══╝ ██╔══██╗██╔═██╗ ██║██║ ██║ ██╔══╝...

tsunami-security-scanner

Tsunami Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence. To learn more about Tsunami, visit our documentation. Tsunami relies heavily on its plugin system to provide basic scanning capabilities...

jadx

JADX jadx - Dex to Java decompiler Command line and GUI tools for producing Java source code from Android Dex and Apk files !WARNING Please note that in most cases jadx can't decompile all 100% of the code, so errors will occur. Check Troubleshooting guide for workarounds. Main features: decompil...

CVE-2017-5638_struts

Scott Campbell의 스크립트를 더 확장하고 더 복잡하게 만들었습니다 : "HTTPStrutsAttack"이 정찰을 100% 차단하지만, 취약한 시스템을 스캐너가 발견하면 스캐너를 차단하더라도 취약한 시스템이 HTTP 요청에 포함된 wget을 실행해 악성코드를 다운로드할 아주 작은 가능성이 여전히 존재합니다. wget URL에 있는 악성코드 다운로드 IP는 거의 항상 정찰 IP와 다르기 때문에 우리는 그 IP를 차단하지 않고 있습니다. 그래서 확장된 스크립트는 악성코드 다운로드 IP도 추출합니다. 1. 다음 알림을...

CVE-2025-6586

Download Plugin 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft forever 2: eth0: mtu 1500 qdisc...

sharingIsCaring

sharingIsCaring TwonkyMedia Server 해킹됨 CVE-2018-7171 배경 정보 이 GitHub 저장소는 CVE-2018-7171에 관한 모든 관련 정보를 보관하고 있습니다. 그 이상도 포함 CVE-2018-7171은 TwonkyMedia Server 버전 7.0.11-8.5최신 버전의 디렉터리/파일 트래버설 취약점입니다. 이 취약점을 악용하면 공격자는 TwonkyMedia Server를 실행 중인 장치의 플랫폼과 무관하게 해당 장치에 있는 모든 파일을 나열할 수 있습니다. 나아가 공격자는 이 취약점을...

ocr-recon

ocr-recon This tool is useful to find a particular string in a list of URLs using tesseract's OCR Optical Character Recognition capabilities Usage Usage: python3 ocr-recon.py listwithURLs stringtosearch...

zeek

The Zeek Network Security Monitor A powerful framework for network traffic analysis and security monitoring. Key Features — Documentation — Getting Started — Development — License Key Features In-depth Analysis Zeek ships with analyzers for many protocols, enabling high-level semantic analysis at...

boofuzz

.. image:: https://github.com/jtpereyda/boofuzz/raw/master/artwork/boo-logo-dark.svg :width: 60% :alt: boofuzz logo boofuzz: Network Protocol Fuzzing for Humans .. image:: https://github.com/jtpereyda/boofuzz/actions/workflows/test.yml/badge.svg?branch=master :target:...

lk_scraper

LinkedIn Scraper Scrapes Any LinkedIn Data Installation $ pip install git+git://github.com/jqueguiner/lkscraper Setup Using Docker compose $ docker-compose up -d $ docker-compose run lkscraper python3 Using Docker only for Selenium server First, you need to run a Selenium server $ docker run -d -...

yara

!IMPORTANT This project is in maintenance mode. More info: https://virustotal.github.io/yara-x/blog/yara-x-is-stable/ YARA in a nutshell YARA is a tool aimed at but not limited to helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malwar...

CVE-2024-25897

매개변수 ip , puerto , ruta 익스플로잇 출력 도움말 패널 익스플로잇 설명 코드 설명은 다음과 같습니다: 코드 설명 이 스크립트는 JenkinsCVE-2024-23897의 특정 취약점을 악용하도록 설계되었습니다. Jenkins 서버에서 JAR 파일을 다운로드하고 페이로드를 실행하여 Jenkins 노드를 연결할 수 있도록 합니다. 아래는 코드의 각 부분에 대한 설명입니다. 모듈 가져오기 import argparse import requests import os import subprocess import sys...

zmap

ZMap: The Internet Scanner ZMap is a fast stateless single packet network scanner designed for Internet-wide network surveys. On a typical desktop computer with a gigabit Ethernet connection, ZMap is capable of scanning the entire public IPv4 address space on a single port in under 45 minutes. Fo...

termshark

Termshark A terminal user-interface for tshark, inspired by Wireshark. V2.4 is out now with packet search and profiles for colors and columns! See theChangeLog. If you're debugging on a remote machine with a large pcap and no desire to scp it back to your desktop, termshark can help! Features Rea...

flashsploit

Exploitation Framework for ATtiny85 HID Attacks Twitter - Telegram - Blog Available in Flashsploit is an Exploitation Framework for Attacks using ATtiny85 HID Devices such as Digispark USB Development Board, flashsploit generates Arduino IDE Compatible .ino Scripts based on User Input and then...

burpsuite-copy-as-xmlhttprequest

Copy as XMLHttpRequest BurpSuite extension The extension adds a context menu to BurpSuite that allows you to copy multiple requests as Javascript's XmlHttpRequest, which simplifies PoC development when exploiting XSS. Installation download the latest JAR from releases or build manually add JAR to...

dcrawl

dcrawl dcrawl is a simple, but smart, multi-threaded web crawler for randomly gathering huge lists of unique domain names. How it works? dcrawl takes one site URL as input and detects all links in the site's body. Each found link is put into the queue. Successively, each queued link is crawled in...

antisquat

AntiSquat AntiSquat leverages AI techniques such as natural language processing NLP, large language models ChatGPT and more to empower detection of typosquatting and phishing domains. How to use Clone the project via git clone https://github.com/redhuntlabs/antisquat. Install all dependencies by...

kernelpop

kernelpop kernelpop is a framework for performing automated kernel vulnerability enumeration and exploitation on the following operating systems: Linux Mac It is designed to be python version-agnostic, meaning that it should work with both python2 and python3 please let me know if you find that i...