sunsetscan

SunsetScan Network security auditing for humans — powered by nmap, built for everyone. Website: sunsetscan.com SunsetScan is a local-network security auditing tool for home network owners and IT staff who want the depth of nmap without learning nmap syntax. Point it at your network and it finds...

gosec

gosec - Go Security Checker Inspects source code for security problems by scanning the Go AST and SSA code representation. Quick links GitHub Action Local installation Quick start Common usage patterns Selecting rules Output formats Features Pattern-based rules for detecting common security issue...

decider

Decider This work is licensed under a Creative Commons Attribution 4.0 International License. This project makes use of MITRE ATT&CK® - ATT&CK Terms of Use. 📰 3.0.0 - Kiosk is Here Decider is now login-less and responsive. Content updates have been simplified to copying files and restarting Docke...

pwnedOrNot

用于查找已泄露邮箱账户密码的OSINT工具 由 Lohitya Pushkar thewhiteh4t 创建。 Twitter - Blog Available| in| ---|---|--- BlackArch Linux| SecBSD| Tsurugi Linux | | pwnedOrNot 分两个阶段工作。在第一 阶段，它使用 HaveIBeenPwned v3 API 测试给定的邮箱地址，以确定该账户是否曾经泄露；在第二 阶段，它在可用的公共转储 中搜索密码 。 !IMPORTANT 使用该工具需要 API 密钥。您可以从下面的 HIBP 网站购买密钥...

ATutor-Instructor-Backup-Arbitrary-File

ATutor - Exploit de copia de seguridad del instructor Título del exploit: ATutor 2.2.4 'Backup' - Ejecución remota de comandos CVE-2019-12170 Google Dork: inurl:/ATutor/login.php Fecha: 5/13/2019 Autor del exploit: liquidsky Joseph McPeters Página oficial del proveedor: https://atutor.github.io/...

shootback

shootback shootback is a reverse TCP tunnel let you access target behind NAT or firewall 反向TCP隧道, 使得NAT或防火墙后的内网机器可以被外网访问. Consumes less than 1% CPU and 8MB memory under 800 concurrency. slaver is single file and only depends on python2.7/3.4+ standard library. How it works Typical Scene 1. Access...

shootback

shootback shootback 是一个反向 TCP 隧道，让你可以访问 NAT 或防火墙后面的目标 反向TCP隧道, 使得NAT或防火墙后的内网机器可以被外网访问. 在 800 并发下消耗不到 1% 的 CPU 和 8MB 内存. slaver 是 单文件 ，且仅依赖 python2.7/3.4+ 标准库. 工作原理 典型场景 1. 从家里访问公司/学校的电脑（没有外网IP） 从家里连接公司或学校里没有独立外网IP的电脑 2. 使私有网络/站点公开。 使内网或内网站点能从公网访问 3. 辅助内网渗透。 辅助内网渗透 4. 辅助CTF线下赛。 辅助CTF线下赛,...

CVE-2022-1388

CVE-2022-1388 BIG IP REST RCE En las versiones de F5 BIG-IP 16.1.x anteriores a 16.1.2.2, las versiones 15.1.x anteriores a 15.1.5.1, las versiones 14.1.x anteriores a 14.1.4.6, las versiones 13.1.x anteriores a 13.1.5, y todas las versiones 12.1.x y 11.6.x, las solicitudes no divulgadas pueden...

wireguard-tools

wireguard-tools — tools for configuring WireGuard This supplies the main userspace tooling for using and configuring WireGuard tunnels, including the wg8 and wg-quick8 utilities. This project supports Linux, OpenBSD, FreeBSD, macOS, Windows, and Android. More information may be found...

aircrack-ng

Aircrack-ng Badges GitHub CI Others !Codespellhttps://github.com/a...

spring-cloud-gateway-rce

Spring Cloud Gateway Actuator API SpEL表达式注入命令执行（CVE-2022-22947） 1.installation pip3 install -r requirements.txt 2.Usage $ python3 spring-cloud-gateway-rce.py -h / \ /\ /\ /\ | \ / \ | \ | \ | \ | \ / \ | || | | | / / \ \ / / /\ || | | | | | | || || || | / / / / \ V / // || / / | || | / / / / || /...

iPwn

iPwn 一个用于iOS设备漏洞利用的框架。 注意：使用此工具尝试进入的iPhone必须已越狱 状态 - ❌ 本项目仍在开发中。我正在添加更多用于后渗透利用的扩展和选项，以收集设备信息等。同时我也在研究如何将有效载荷放入正常的iOS插件中，从而使获取反向shell更加容易。 更新日志 6/2/21 - 为那些已将设备连接到电脑并希望进行调试的用户添加了一个额外菜单。将很快添加更多功能。 6/2/21 - 为'iSteal'后渗透工具添加了4个额外模块。还添加了安装checkra1n越狱的选项。 5/25/21 - 为'iSteal'后渗透工具添加了8个额外模块。 5/25/21 -...

TokenTacticsV2

/ / / / / / / / | \ / / / / /// / \ / / / / / / / / | | / / / / / / / // / , / / / / / / // // / // // / / | |/ / / / // //||// // /,////// |/ TokenTactics v2 Esta es una versión actualizada de TokenTactics escrita originalmente por Stephan Borosh @rvrsh3ll y Bobby Cooke @0xBoku...

getaltname

GSAN - Get Subject Alternative Names GSAN is a tool that can extract Subject Alternative Names SAN found in SSL Certificates directly from https servers which can provide you with DNS names subdomains or virtual servers. It doesn't rely on Certificate Transparency logs, it connects directly to th...

CVE-2025-20029-simulation

🔐 Simulación de ataque reproducible – CVE-2025-20029 ⚠️ Este repositorio simula CVE-2025-20029 en un entorno seguro y controlado. No interactúa con sistemas F5 BIG-IP reales ni explota ningún servicio de producción. El objetivo es educativo: estudiar el patrón de la vulnerabilidad y probar payload...

exrex

EXREX Irregular methods for regular expressions. Exrex is a command line tool and python module that generates all - or random - matching strings to a given regular expression and more. It's pure python, without external dependencies. There are regular expressions with infinite matching strings...

exrex

EXREX 正则表达式的非正则方法。 Exrex 是一个命令行工具和 Python 模块，能够生成给定正则表达式的所有或随机匹配字符串，以及更多功能。 它纯 Python 实现，无外部依赖。 有些正则表达式具有无限匹配字符串（例如：a-z+），在这种情况下，exrex 会限制无限部分的最大长度。 Exrex 使用生成器，因此内存使用量不依赖于匹配字符串的数量。 功能 生成所有匹配字符串 生成随机匹配字符串 计算匹配字符串的数量 简化正则表达式 安装 要安装 exrex，只需： $ pip install exrex 或 $ easyinstall exrex 用法 作为 Python 模...

pyrasite

.. image:: docs/logo.png pyrasite .. image:: https://api.travis-ci.org/lmacken/pyrasite.png?branch=develop :target: http://travis-ci.org/lmacken/pyrasite .. image:: https://coveralls.io/repos/lmacken/pyrasite/badge.png?branch=develop :target: https://coveralls.io/r/lmacken/pyrasite?branch=develop...

dradis-ce

Welcome to the Dradis Framework An Automated Pentest Reporting Tool Dradis is an open-source collaboration framework and penetration testing report generator that helps InfoSec teams streamline reporting workflows. With support for importing data from tools like Burp Suite, Nessus, and Nmap, Drad...

CVE-2019-0232

CVE-2019-0232 Análisis de vulnerabilidad y PoC para Apache Tomcat - CGIServlet enableCmdLineArguments Ejecución Remota de Código RCE Vídeo PoC disponible en https://www.youtube.com/watch?v=RA7kzuHOWqA Detalles Apache Tomcat tiene una vulnerabilidad en el Servlet CGI que puede ser explotada para...