CryptoLyzer

CryptoLyzer is a fast, flexible, and comprehensive server cryptographic protocol TLS, SSL, SSH, IKE, DNSSEC and related setting HTTP headers, DNS records analyzer and fingerprint JA3, HASSH generator with API and CLI interfaces. Use CryptoLyzer when you need to audit TLS/SSL cipher suites — unlik...

fortress

One browser engine to rule them all Stealth Chromium engine · v3 Chromium 153 Fortress is a Chromium fork that stops scrapers and browser agents from getting blocked. Bot detectors flag automation by reading the browser fingerprint. Fortress corrects that fingerprint inside Chromium's C++, so the...

ssh-mitm

SSH-MITM - ssh audits made simple An interactive SSH interception tool for authorized security audits. Intercept sessions, monitor live traffic, inject commands, and manipulate file transfers — all in real time. !Follow me on...

RSC_Detector

RSC Fingerprint Detector A Chrome extension for detecting React Server Components RSC and Next.js App Router fingerprints on web pages. ⚠️ Important Notice This extension is designed for educational and security research purposes only. It includes functionality that could be used to test for...

CVE-2024-37770

CVE-2024-37770 description 14Finger v1.1 was discovered to contain a remote command execution RCE vulnerability in the fingerprint function. This vulnerability allows attackers to execute arbitrary commands via a crafted payload. Attack Vector Unauthenticated attackers can execute command injecti...

invisible_playwright

Playwright gets caught by anti-bots and captchas. This one runs on an anti-detect Firefox with an undetected fingerprint, compatible with your existing Playwright code. How it works Anti-bots ask two questions, and reCAPTCHA, hCaptcha and Cloudflare Turnstile score the answers. invisibleplaywrigh...

sonar.js

sonar.js A framework for identifying and launching exploits against internal network hosts. Works via WebRTC IP enumeration, WebSocket host scanning, and external resource fingerprinting. How does it work? Upon loading the sonar.js payload in a modern web browser the following will happen: sonar....

hate_crack

/ | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that fails on purpose...

pig_CS4.4

Note: For security research and learning purposes only. If the tool is used for any other purpose, the user shall bear all legal and joint liabilities. The author and publisher assume no legal or joint liability. Cobalt Strike 4.4 Zhuzhu Edition This version is a pre-release beta version; the...

ft9201-libfprint

ft9201-libfprint Linux fingerprint support for the Focal-systems FT9201 USB reader 2808:93a9, sold as a standalone Windows Hello dongle, as a libfprint driver. The sensor is a tiny 96×96 optical reader. libfprint's built-in matcher does a poor job on an image that small, so this driver instead...

tarnish

tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...

evilwaf

EvilWAF is an advanced transparent MITM Firewall bypass proxy and deep WAF vulnerability scanner designed for authorized security testing. It operates at the transport layer — it does not touch payloads, cookies, or headers from your tools. Works with any tool likeffuz, sqlmap, nuclei and etc tha...

network-fingerprint

network-fingerprint Capture packet request/response pairs for a port and/or IP to aid in Network protocol based Nuclei Templates creation. Resources Installation Instructions Usage Running network-fingerprint Output Format Usage ▶ network-fingerprint -h This will display help for the tool. You ca...

zscan

zscan A fast, customizable service detection tool powered by a flexible fingerprint system. It helps you identify services, APIs, and network configurations across your infrastructure. Documentation | Features | Installation | Usage ✨Features Active Scanning Engine : High-performance concurrent...

recog

Recog: A Recognition Framework Recog is a framework for identifying products, services, operating systems, and hardware by matching fingerprints against data returned from various network probes. Recog makes it simple to extract useful information from web server banners, snmp system description...

operative-framework

operative framework is a digital investigation framework, you can interact with multiple targets, execute multiple modules, create links with target, export rapport to PDF file, add note to target or results, interact with RESTFul API, write your own modules. important The project has undergone a...

rocacheck

rocacheck Package rocacheck is a Go implementation of the key fingerprint algorithm that checks if an RSA key was generated by broken Infineon code and is vulnerable to factorization via the Return of Coppersmith's Attack ROCA / CVE-2017-15361...

Vxscan

Vxscan 2.0 English | 简体中文 Python3 comprehensive scanning tool, mainly used for sensitive file detection directory scanning and js leak interface, WAF/CDN identification, port scanning, fingerprint/service identification, operating system identification, weak password detection, POC scanning, SQL...

haiti

HAITI HA sh I denT ifI er What is it? A CLI tool and library to identify hash types hash type identifier. CLI library Features 675+ hash types detected Modern algorithms supported SHA3, Keccak, Blake2, etc. Hashcat and John the Ripper references CLI tool & library Hackable Installation $ gem...

recon-skills

🛡️ Recon & Pentest Skill Pack 169 offensive security skills for recon and pentest. Field-validated techniques from 600+ company targets across 45+ sectors. Updated with browser fingerprint evasion, anti-bot bypass, hardcoded credential hunting, SCADA/ICS enumeration. 📖 Blog & research: hiago.sh —...