git-vuln-finder

git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE ID...

exrex

EXREX Irregular methods for regular expressions. Exrex is a command line tool and python module that generates all - or random - matching strings to a given regular expression and more. It's pure python, without external dependencies. There are regular expressions with infinite matching strings...

sniffles

Sniffles--Packet Capture Generator for IDS and Regular Expression Evaluation Sniffles is a tool for creating packet captures that will test IDS that use fixed patterns or regular expressions for detecting suspicious behavior. Sniffles works very simply. It takes a set of regular expressions or...

gdb-dashboard

GDB dashboard GDB dashboard is a standalone .gdbinit file written using the Python API that enables a modular interface showing relevant information about the program being debugged. Its main goal is to reduce the number of GDB commands needed to inspect the status of current program thus allowin...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

Dagon

Dagon - Advanced Hash Manipulation Named after the prince of Hell, Dagon day-gone is an advanced hash cracking and manipulation system, capable of bruteforcing multiple hash types, creating bruteforce dictionaries, automatic hashing algorithm verification, random salt generation from Unicode to...

clawpatrol

clawpatrol Брандмауэр безопасности для агентов. Claw Patrol находится между вашими агентами и продакшеном, анализирует их трафик на уровне провода и проверяет каждое действие на соответствие правилам, которые вы пишете на HCL. Например, вы можете заблокировать деструктивные SQL-запросы или...

apkvuln

ApkVuln root@kitploit: \ / \ / \ / \ / \ /\ \ \ \ /|\ \ \ | | | \ | |/ /\ \ / / | | | | | | | / \ | / ' \ V /| || | || . | // \|| |\ / /|||| With ApkVuln you will obtain the .java files of an APK and they will be analyzed in search of possible vulnerabilities in the code, for it will make...

CVE-2024-9264-RCE-Exploit

CVE-2024-9264 RCE-Эксплойт в Grafana через SQL-выражения Описание Доказательство концепции удаленного выполнения кода в Grafana CVE-2024-9264 Этот репозиторий содержит Python-скрипт, который эксплуатирует уязвимость удаленного выполнения кода RCE в функции SQL-выражений Grafana. Используя...

golddigger

Gold Digger Search files for gold Gold Digger is a simple tool used to help quickly discover sensitive information in files recursively. Originally written to assist in rapidly searching files obtained during a penetration test. Installation Gold Digger requires Python3. root@kitploit: virtualenv...

GiveMeSecrets

GiveMeSecrets Use regular expressions to get sensitive information from a given repository GitHub, pip or npm. Dependencies You only need to have python 3.6 or higher installed to launch this script. In addition you must have installed in the system git, pip and npm. How to use It's very easy to...

mapchar

패턴 로직과 표현식을 사용하여 워드리스트 생성 설치 • 문서 • 사용법 • 기여하기 !NOTE 이 프로젝트는 버전 7.0.2부터fuse/fuse-generator에서 mapchar로 이름이 변경되었습니다. PyPI 패키지, CLI 명령어, Python 패키지 이름 모두 그에 맞게 변경되었습니다. 이전 이름을 사용 중이셨다면 설치와 임포트를 업데이트해 주세요. 설치 !NOTE PyPI 버전의 경우 pipx 또는 pip를 사용하여 설치하는 것을 권장 합니다. 방법| 참고 ---|--- pipx install mapchar| pip...

cyberchef-recipes

CyberChef는 GCHQ가 만든, 스스로 '사이버 스위스 아미 나이프Cyber Swiss-Army Knife'라고 칭하는 도구입니다. 웹 브라우저에서 데이터 변환, 추출 및 조작을 위한 환상적인 도구입니다. 이 도구를 만든 @GCHQ에게 모든 공을 돌립니다. 참조: https://gchq.github.io/CyberChef/ 일반 팁 CyberChef를 다운로드하여 완전히 클라이언트 측에서 실행하세요. 특정 작업을 제외하고는 인터넷 연결이 필요하지 않습니다. 그러면 모든 데이터가 안전하게 보호됩니다. CyberChef가 할...

hashID

hashID | hash-identifier Определяет различные типы хешей, используемых для шифрования данных и особенно паролей. Эта утилита заменяет hash-identifier , который устарел! hashID — это инструмент, написанный на Python 3, который поддерживает идентификацию более 220 уникальных типов хешей с помощью...

CVE-2024-9264

CVE-2024-9264 - Эксплойт Grafana SQL Expressions DuckDB LFI/RCE PoC Эксплойт на Python для CVE-2024-9264, уязвимости Grafana SQL Expressions, которая позволяет аутентифицированному пользователю выполнять включение локальных файлов и команд, когда duckdb доступен в PATH процесса Grafana. Только дл...

Spring Cloud Netflix Hystrix Dashboard <2.2.10 - Remote Code Execution

Spring Cloud Netflix Hystrix Dashboard prior to version 2.2.10 is susceptible to remote code execution. Applications using both spring-cloud-netflix-hystrix-dashboard and spring-boot-starter-thymeleaf expose a way to execute code submitted within the request URI path during the resolution of view...

SCIMono <0.0.19 - Remote Code Execution

SCIMono before 0.0.19 is vulnerable to remote code execution because it is possible for an attacker to inject and execute java expressions and compromise the availability and integrity of the system. id: CVE-2021-21479 info: name: SCIMono 0.0.19 - Remote Code Execution author: dwisiswant0 severit...

WifiPass

WifiPass Windows에 저장된 Wi-Fi 비밀번호를 정규 표현식과 Python 3를 사용하여 덤프합니다...

CVE-2022-41852

Удаленное выполнение кода в библиотеке JXPath CVE-2022-41852 Proof of Concept CVE-2022-41852 позволяет злоумышленникам выполнять код на сервере приложений. Подробнее об этой уязвимости можно прочитать здесь: https://hackinglab.cz/en/blog/remote-code-execution-in-jxpath-library-cve-2022-41852/...

GAMBA

GAMBA GAMBA는 혼합 부울-산술 표현식MBA을 단순화하기 위한 도구입니다. GAMBA는 General Advanced Mixed Boolean Arithmetic simplifier의 약자입니다. 선형 대수 단순화 도구 SiMBA를 반복적으로 사용하여 잠재적으로 비선형 입력 MBA의 선형 하위 표현식을 단순화합니다. 전반적으로 핵심 구성 요소는 다음과 같습니다: 추상 구문 트리AST 사용 간단하고 정교한 변환을 적용하여 선형 하위 표현식 분리 단순화할 수 있는 선형 하위 표현식을 구성할 가능성을 높이기 위한 리팩토링...