yeti

Yeti Platform Yeti aims to bridge the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline for DFIR teams. It was born out of frustration of having to answer the question "where have I seen this artifact before?" or "how do I search for IOCs related t...

r2ai

R2AI - Augmented reversing with LLM for radare2 ╭─────────────────────────────────╮ │ , . . , │ ╭──╮ │ : \ \ |: \ : | │ │ │ │ | |/ || , || : | │ │ O O | : \ \ . || : || | │ │ │╷ │ | |\ :||| || | │ │ ││ │ || : |||| │ │ ─╯│ ╰─────────────────────────────────╯ ╰───╯ Components This repository...

sh4d0wup

sh4d0wup % docker run -it --rm ghcr.io/kpcyrd/sh4d0wup:edge -h Usage: sh4d0wup OPTIONS Commands: bait Start a malicious update server front Bind a http/https server but forward everything unmodified infect High level tampering, inject additional commands into a package tamper Low level tampering,...

CVE-2023-30145

Description : Il a été découvert que Camaleon CMS v2.7.0 contient une vulnérabilité d'injection de modèles côté serveur SSTI via le paramètre formats. Composant affecté : Toutes les versions antérieures à 2.7.0 Version corrigée : Versions corrigées : 2.7.4 Étapes pour reproduire : Détection : 1...

nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

grype

Grype A vulnerability scanner for container images and filesystems. Features Scan container images , filesystems , and SBOMs for known vulnerabilities see the docs for a full list of supported scan targets Supports major OS package ecosystems Alpine, Debian, Ubuntu, RHEL, Oracle Linux, Amazon...

metasm

Metasm, набор средств для работы с ассемблером на Ruby примеры скриптов в samples/ -- читайте комментарии в начале файлов все файлы распространяются на условиях LGPL Автор: Yoann Guillot Базовый обзор: Metasm позволяет вам взаимодействовать с форматами исполняемых файлов ExeFormat: PE, ELF, Mach-...

FinalRecon

Twitter - Telegram - thewhiteh4t's Blog FinalRecon is an all in one automatic web reconnaissance tool written in python. Goal of FinalRecon is to provide an overview of the target in a short amount of time while maintaining the accuracy of results. Instead of executing several tools one after...

telegram-history-dump

telegram-history-dump Cet utilitaire est le successeur de telegram-json-backup, écrit entièrement en Ruby. Il peut créer des sauvegardes de vos discussions utilisateur et de supergroupes Telegram en utilisant la fonction de contrôle à distance de telegram-cli. Comparé à l'ancien projet,...

cloudsploit

CloudSploit by Aqua - Cloud Security Scans Quick Start Generic $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker build . -t cloudsploit:0.0.1 $...

nikto

nikto Nikto web server scanner - https://cirt.net/Nikto2 Full documentation - https://github.com/sullo/nikto/wiki Run normally: git clone https://github.com/sullo/nikto Main script is in program/ cd nikto/program Run using the shebang interpreter ./nikto.pl -h http://www.example.com Run using per...

dissect

dissect Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT part of NCC Group. This project is a meta package, it will install all other Dissect modules wi...

subfinder

Fast passive subdomain enumeration tool. Features • Install • Usage • API Setup • Library • Join Discord subfinder is a subdomain discovery tool that returns valid subdomains for websites, using passive online sources. It has a simple, modular architecture and is optimized for speed. subfinder is...

androguard

Androguard Androguard: Reverse engineering and pentesting for Android applications Androguard 5 is a Python toolkit for Android reverse engineering: open an APK, inspect the manifest and DEX, disassemble or decompile code, hunt references and vulnerabilities, and optionally patch or analyze nativ...

Obfuscator

Obfuscator Le programme est conçu pour obfusquer le shellcode. Actuellement, l'outil prend en charge 2 méthodes de chiffrement. 1 XOR 2 AES L'outil accepte le shellcode dans 4 formats. 1 base64 2 hex 3 c 4 raw Utilisation en ligne de commande Usage Description ----- ----------- /f Specify the...

Ropper

Ropper You can use ropper to display information about binary files in different file formats and you can search for gadgets to build rop chains for different architectures x86/X8664, ARM/ARM64, MIPS/MIPS64, PowerPC/PowerPC64, SPARC64. For disassembly ropper uses the awesome Capstone Framework...

unblob

unblob Accurate, fast, and easy-to-use extraction suite for binary blobs. unblob parses unknown binary blobs for 78+ archive, compression, and file-system formats , extracts their content recursively, and carves out unknown chunks. It is the perfect companion for extracting, analyzing, and revers...

hash-identifier

hash-identifier Logiciel permettant d'identifier les différents types de hachages utilisés pour chiffrer des données et notamment les mots de passe. Formats de chiffrement pris en charge : ADLER-32 CRC-32 CRC-32B CRC-16 CRC-16-CCITT DESUnix FCS-16 GHash-32-3 GHash-32-5 GOST R 34.11-94 Haval-160...

rikune

Rikune Rikune est un serveur MCP pour le rétro-ingénierie d'exécutables Windows et de formats binaires connexes. Il combine la réception d'échantillons, le tri statique, la récupération de fonctions assistée par Ghidra, des outils spécialisés basés sur des plugins, la gestion des artefacts, et...

drinkme

drinkme drinkme is a shellcode test harness. It reads shellcode from stdin and executes it. This allows pentesters to quickly test their payloads before deployment. Formats drinkme can handle shellcode in the following formats: "0x" "\x" "x" "" For example, NOP could be represented as any of...