threat-modeling-mcp-server

Threat Modeling MCP Server A Model Context Protocol MCP server for comprehensive threat modeling with guided code validation. Table of Contents Overview Quick Start Prompts Key Features Prerequisites Installation Running with Kiro CLI Output File Management Quick Reference Tools Overview Threat...

npq

NPQ Documentation This directory contains comprehensive documentation for the NPQ Node Package Quality security auditing tool. Core Documentation optional-features.md Configuration and usage of optional security features, including recent improvements and bug fixes. age.marshall.md Detailed...

JYso

JYso It can be used as a tool for ysoserial and JNDIExploit at the same time, and has the bypass function of multiple JNDI high versions, WAF, and RASP 🚀 Getting Started Guide 📢 Please take a moment to read this document, it will help you quickly get familiar with JYso! 🧐 Use the Documentation...

shellerator

Shellerator Shellerator is a simple CLI/TUI tool aimed to help pentesters quickly generate reverse, bind and web shells in multiple programming languages like Bash, Powershell, Netcat, PHP, ASPX, etc. Another similar project for the generation of one-line file downloading commands is based on thi...

AFLplusplus

American Fuzzy Lop plus plus AFL++ Release version: 5.03c GitHub version: 5.03c Repository: https://github.com/AFLplusplus/AFLplusplus AFL++ is maintained by: Marc "van Hauser" Heuse [email protected] Dominik Maier [email protected] Andrea Fioraldi [email protected] Heiko "hexcoder...

penta

penta PENTest + semi-Automation tool Penta is is Pentest semi-automation tool using Python3. It provides advanced features to extract vuln info found on specific servers. I'm now developing a scanning system using vuln-db. Installation Install requirements penta requires the following packages...

core

Secluso Private DIY home security for Raspberry Pi, with encrypted remote access and a 5-minute software setup. Download Secluso Deploy • Build Your Own Guide • Security Model • Website Secluso is a private home security camera system for Raspberry Pi. Watch live video, get alerts, and open...

pingtunnel

Pingtunnel Pingtunnel is a tool that sends TCP/UDP traffic over ICMP. Note: This tool is only to be used for study and research, do not use it for illegal purposes Usage & Detailed Documentation 📖 For detailed documentation, seeUSAGE.md: includes complete command-line parameters, configuration fi...

rizin-notebook

Rizin Notebook A notebook for binary analysis with rizin. Keep notes, commands, and scripts organized per binary. Requires rizin 0.7.0 or later. What it does Each notebook page is tied to one binary. It stores the binary itself, its SHA-256 hash, and a list of cells : command cells - a rizin...

kube-score

kube-score kube-score is a tool that performs static code analysis of your Kubernetes object definitions. The output is a list of recommendations of what you can improve to make your application more secure and resilient. You can test kube-score out in the browser with the online demo source...

PiDense

▄▄▄▄▄▄▄▄▄▄▄ ▄▄▄▄▄▄▄▄▄▄▄ ▄▄▄▄▄▄▄▄▄▄ ▄▄▄▄▄▄▄▄▄▄▄ ▄▄ ▄ ▄▄▄▄▄▄▄▄▄▄▄ ▄▄▄▄▄▄▄▄▄▄▄ ▐░░░░░░░░░░░▌▐░░░░░░░░░░░▌▐░░░░░░░░░░▌ ▐░░░░░░░░░░░▌▐░░▌ ▐░▌▐░░░░░░░░░░░▌▐░░░░░░░░░░░▌ ▐░█▀▀▀▀▀▀▀█░▌ ▀▀▀▀█░█▀▀▀▀ ▐░█▀▀▀▀▀▀▀█░▌▐░█▀▀▀▀▀▀▀▀▀ ▐░▌░▌ ▐░▌▐░█▀▀▀▀▀▀▀▀▀ ▐░█▀▀▀▀▀▀▀▀▀ ▐░▌ ▐░▌ ▐░▌ ▐░▌ ▐░▌▐░▌ ▐░▌▐░▌ ▐░▌▐░▌ ▐░▌...

purrcrypt

🐱 PurrCrypt 🐶 Fur-ociously Secure, Paw-sitively Adorable! The purr -fect way to keep your secrets fur -ever safe, straight from the meow -th of your computer to your fur -ends' paws! !IMPORTANT PurrCrypt is real cryptography in a fuzzy disguise! Your messages are protected by the same elliptic...

Smap

nmap alternative powered by shodan.io Smap is a passive port scanner built with shodan.io's free API. It takes the same command line arguments as Nmap and produces the same output, which makes it a drop-in replacement for Nmap. Features Scans 200 hosts per second Doesn't require any account/api k...

RepoReaper

RepoReaper Overview RepoReaper is a precision tool designed to automate the identification of exposed .git repositories across a list of domains and subdomains. By processing a user-provided text file with domain names, RepoReaper systematically checks each for publicly accessible .git files. Thi...

SnitchDNS

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/SnitchDNS for the latest version. SnitchDNS SnitchDNS is a database driven DNS Server with a Web UI, written in Python and Twisted, that makes DNS administration easier with all configuration changed applied instantly without...

RedRabbit

RedRabbit About RedRabbit is a PowerShell script aimed at helping pentesters conduct ethical hacking RedTeam. The aim is to highlight just how Powerful PowerShell is and how it can be used against you Ethically. To Run You can either run locally by downloading the script or run remotely using:...

CheatSheetHost

CheatSheetHost A lightweight, content-driven web server for hosting interactive cheatsheets and reference materials. Perfect for CTF Capture The Flag challenges, reverse engineering, and technical documentation. This is best used in labs where you want to limit or forgo external traffic while sti...

dumpzilla

dumpzilla Forensic Tool - ⚠️ Discontinued! The project has long been discontinued due to a lack of time and volunteers. Dumpzilla official site : www.dumpzilla.org http://www.dumpzilla.org "Mozilla browser forensic tool" Manual : Español http://dumpzilla.org/Manualdumpzillaes.txt "Manual en españo...

PowerShdll

PowerShdll Run PowerShell with dlls only. Does not require access to powershell.exe as it uses powershell automation dlls. PowerShdll can be run with: rundll32.exe, installutil.exe, regsvcs.exe, regasm.exe, regsvr32.exe or as a standalone executable. dll mode: Rundll32: Usage: rundll32...

Loki

I wrote a new Open Source YARA scanner called LOKI RS Rust. LOKI Python is now officially deprecated. Important Note This project is now in inactive maintenance mode. This means that while I merge pull requests for bug fixes and straightforward issues, I currently lack the time to add new feature...