60331 matches found
cerbos
What is Cerbos? Cerbos is an authorization layer that evolves with your product. It enables you to define powerful, context-aware access control rules for your application resources in simple, intuitive YAML policies; managed and deployed via your Git-ops infrastructure. It provides highly...
atlant-harden
AtlantHarden β Herramienta de endurecimiento de seguridad para Windows, navegadores y Office AtlantHarden es una aplicaciΓ³n integral de endurecimiento de seguridad para Windows 10/11 con una interfaz de usuario moderna y profesional. Aplica 606 configuraciones de endurecimiento β incluyendo 354...
TriforceAFL
New: For those looking to play with TriforceAFL and TLSF, Richard Johnson created a Dockerfile which installs both and even builds a Linux kernel for you. It's available here https://hub.docker.com/r/moflow/afl-triforce/tags/. Also new: afl-tmin now works with the forkserver!...
GitHound
GitHound Overview GitHound is a BloodHound OpenGraph collector for GitHub, designed to map your organizationβs structure and permissions into a navigable attackβpath graph. It: Models Key GitHub Entities GHOrganization : Your GitHub org metadata GHUser : Individual user accounts in the org GHTeam...
ephemora-cell
Ephemora Cell The execution layer for untrusted AI-generated code. Fast, capability-based WASM execution with explicit CPU, memory, time, I/O, and filesystem limits β sub-millisecond warm execution with signed execution records. Built for AI agents, MCP tools, plugins, code interpreters, and othe...
Zhilly
AI Pentester Assistant π‘οΈ Zhilly AI Pentester Assistant AI-Powered, Portable Cyber Security & Cyber Interaction Tool Yapay Zeka Destekli, TaΕΔ±nabilir Siber GΓΌvenlik ve Siber EtkileΕim AracΔ± π¬π§ English β’ πΉπ· TΓΌrkΓ§e β’ β‘ Web Flasher π¬π§ English / English Version π About the Project This project is an...
scrying
NCC Group Scrying Una nueva herramienta para recopilar capturas de pantalla de RDP, web y VNC en un solo lugar Esta herramienta aΓΊn estΓ‘ en desarrollo y deberΓa ser mayormente utilizable, pero aΓΊn no estΓ‘ completa. Por favor, reporta cualquier error o solicitud de funcionalidad como issues de...
forensic-timeliner
A high-speed forensic processing engine built for DFIR investigators. Quickly consolidate CSV output from top-tier triage tools into a unified mini timeline with built-in filtering, artifact detection, date filtering, keyword tagging, and deduplication. Release Forensic Timeliner v2.3 β Release...
Ponce
Ponce Ponce pronounced 'poN ΞΈe pon-they is an IDA Pro plugin that provides users the ability to perform taint analysis and symbolic execution over binaries in an easy and intuitive fashion. With Ponce you are one click away from getting all the power from cutting edge symbolic execution. Entirely...
SHGenOb
SHGenOB: Shellcode Generator from PIC C Code Introduction SHGenOB is a Python-based tool designed to generate shellcode from Position Independent Code PIC written in C. It automates the process of compiling C code, extracting the .text section, and optionally encrypting the resulting shellcode...
BigBountyRecon
BigBountyRecon BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation. Reconnaissance is the most important step in any penetration testing or a bug hunting process. It...
discover
root@kitploit: Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux or Ubuntu. Lee Baird @discoverscripts Jay "L1ghtn1ng" Townsend @jaytownsend1 Jason Ashton @ninewir...
frida-ui
Frida UI A modern, lightweight, web-based user interface for Frida, designed for Android application penetration testing. It allows you to interact with devices, processes, and scripts directly from your browser. Quick Start root@kitploit: Install using uv recommended or pipx/pip uv tool install...
nomore403
NoMore403 nomore403 is a command-line tool for testing HTTP access-control bypasses and parser inconsistencies around 401, 403, and related responses. The tool is designed for practical web security work: bug bounty, penetration testing, security reviews, and regression testing of access-control...
WSC2
WSC2 LAST/CURRENT VERSION: 0.1 Author: Arno0x0x - @Arno0x0x WSC2 is a PoC of using the WebSockets and a browser process to serve as a C2 communication channel between an agent, running on the target system, and a controller acting as the actuel C2 server. The tool is distributed under the terms o...
CVE-2025-54322
CVE-2025-54322 - XSpeeder SXZOS Pre-Auth RCE Scanner A multi-threaded vulnerability scanner for CVE-2025-54322, an unauthenticated remote code execution vulnerability in XSpeeder SXZOS firmware affecting 70,000+ hosts globally. π Table of Contents About the Vulnerability Features Installation Usa...
IoT-Pentest-devices-and-purpose
IoT Pentest Devices and Their Purpose - 2025 Edition This document outlines the latest tools and hardware for IoT security testing in 2025, covering different protocols and technologies. It includes cutting-edge attacks, newly discovered vulnerabilities, and updated hardware and software tools wi...
clawk
Give a coding agent its own disposable Linux machine, not yours. -lightgrey Install Β· Quickstart Β· Why a VM? Β· How it works Β· Compared to Β· FAQ Β· Docs A coding agent is only useful when you let it actually do things: install packages, run the code it writes, start servers, use the network. On you...
safe-npm
safe-npm A security-focused npm installer that protects your projects from newly compromised packages. Why does this exist? Supply chain attacks on npm packages are a growing threat. Attackers sometimes compromise legitimate packages by: Stealing maintainer credentials Publishing malicious update...
TinyInst
TinyInst root@kitploit: Copyright 2020 Google LLC Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License at https://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or...