DPAT

Domain Password Audit Tool DPAT DPAT is a Python-based security tool that analyzes password hashes extracted from Active Directory domain controllers. It generates comprehensive HTML reports showing password usage statistics, policy violations, and security insights from both NTDS dumps and...

binary-ninja-headless-mcp

Binary Ninja 헤드리스 MCP 헤드리스 Binary Ninja 서버로, MCPModel Context Protocol를 사용하여 AI 에이전트에 GUI 없이 디스어셈블리, IL, 패치, 타입, 크로스 레퍼런스 등 심층 리버스 엔지니어링 워크플로에 대한 전체 액세스를 제공합니다. 에이전트 런타임과 동일한 Docker 컨테이너에서 실행되도록 설계되었습니다. 사이드카나 추가 서비스가 필요 없습니다. 이 전체 프로젝트코드, 테스트, 문서는 100% 바이브 코딩되었습니다. 왜 필요한가 기존 Binary Ninja MCP 서버는...

pwndoc

PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...

CVE-2021-26084_Confluence

CVE-2021-26084 - Confluence 사전 인증 RCE OGNL 주입 사용법 usage: cve-2021-26084confluencerce.py -h --url URL --cmd CMD --shell CVE-2021-26084 - Confluence Pre-Auth RCE OGNL injection optional arguments: -h, --help show this help message and exit --url URL, -u URL Target Url --cmd CMD, -c CMD Command...

ngrep

ngrep 1.49.0 2.7.2026 ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression to match against data payloads of packets. It understands many kinds of protocols, including IPv4/6, TCP, UDP, ICMPv4/6, IGMP...

DECAF

DECAF DECAF short for Dynamic Executable Code Analysis Framework is a binary analysis platform based on QEMU. DECAF++ DECAF++, the new version of DECAF, taint analysis is around 2X faster making it the fastest, to the best of our knowledge, whole-system dynamic taint analysis framework. This...

nebula

Nebula AI Powered Pentesting The Assistant workbench Acknowledgement First, I would like to thank Almighty God, who is the source of all knowledge. Without Him, this would not be possible. Nebula brings the working parts of a security engagement into one desktop surface: terminal, code, browser,...

BruteShark

About What it can do Download Examples Usage BruteSharkDesktop BruteSharkCli Modules Architecture Contributing About BruteShark is a Network Forensic Analysis Tool NFAT that performs deep processing and inspection of network traffic mainly PCAP files, but it also capable of directly live capturin...

flowsint

Flowsint Flowsint is an open-source OSINT graph exploration tool designed for ethical investigation, transparency, and verification. Ethics: Please read ETHICS.md for responsible use guidelines. https://github.com/user-attachments/assets/eaabfa81-d7b3-414d-8cf7-f69b4e37bab6...

chisel

Chisel Chisel은 HTTP를 통해 전송되고 SSH로 보호되는 빠른 TCP/UDP 터널입니다. 클라이언트와 서버를 모두 포함하는 단일 실행 파일로, Gogolang로 작성되었습니다. Chisel은 주로 방화벽을 우회하는 데 유용하며, 네트워크에 대한 보안 엔드포인트를 제공하는 데에도 사용할 수 있습니다. 목차 기능 설치 데모 사용법 기여 변경 로그 라이선스 기능 사용하기 쉬움 고성능 SSH 프로토콜crypto/ssh 경유을 사용한 암호화된 연결 인증된 연결; 사용자 구성 파일로 인증된 클라이언트 연결, 지문 매칭으로 인...

chisel

Chisel Chisel is a fast TCP/UDP tunnel, transported over HTTP, secured via SSH. Single executable including both client and server. Written in Go golang. Chisel is mainly useful for passing through firewalls, though it can also be used to provide a secure endpoint into your network. Table of...

go-scan-spring

go-scan-spring Spring4ShellCVE-2022-22965 취약점을 찾는 취약점 스캐너 자세한 정보: https://www.fracturelabs.com/posts/effective-spring4shell-scanning-exploitation/ 빌드 /opt $ git clone https://github.com/fracturelabs/go-scan-spring.git /opt $ cd go-scan-spring 사용법 도움말 /opt/go-scan-spring $ go run main.go help scan...

h2csmuggler

h2cSmuggler Description h2cSmuggler smuggles HTTP traffic past insecure edge-server proxypass configurations by establishing HTTP/2 cleartext h2c communications with h2c-compatible back-end servers, allowing a bypass of proxy rules and access controls. See my detailed write-up below for: Technica...

GPOZaurr

GPOZaurr Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them. GPOZaurr provides 360 degrees of information about Group Policies and their settings. Just a single command Invoke-GPOZaurr provides...

velociraptor

Velociraptor - Endpoint visibility and collection tool. Velociraptor is a tool for collecting host based state information using The Velociraptor Query Language VQL queries. To learn more about Velociraptor, read the documentation on: https://docs.velociraptor.app/ Quick start If you want to see...

gha-lab-ed7a1740c4

自動生成された研究アーティファクト — 上流プロジェクトではありません。 このリポジトリは、ラヴァル大学の修士論文のために、公開されたGitHub Actionsワークフローの脆弱性を再現する目的で自動化ハーネスによって構築された使い捨てラボです。これは NationalSecurityAgency/emissary のコミット 898488b489615581ea66d17954742c8e4ffb0323（2026-01-09）の逐語的スナップショットであり、そのプロジェクト自身のライセンスの下で再配布されており、そのライセンスファイルはこのスナップショットに変更なしで含まれています...

wordpot

Wordpot Wordpot은 WordPress 설치의 플러그인, 테마, timthumb 및 기타 일반적인 파일을 탐지하는 WordPress 허니팟입니다. $ python wordpot.py --help Usage: wordpot.py options Options: -h, --help show this help message and exit --host=HOST Host address --port=PORT Port address --title=TITLE Blog Title --theme=THEME Default theme na...

APKHunt

APKHunt | OWASP MASVS Static Analyzer APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential...

al-khaser

Al-Khaser v0.81 Content Introduction Possible uses Features Anti-debugging attacks Anti-Dumping Timing Attacks Human Interaction Anti-VM Anti-Disassembly Requirements License Introduction al-khaser is a PoC "malware" application with good intentions that aims to stress your anti-malware system. I...

crucible

██████╗██████╗ ██╗ ██╗ ██████╗██╗██████╗ ██╗ ███████╗ ██╔════╝██╔══██╗██║ ██║██╔════╝██║██╔══██╗██║ ██╔════╝ ██║ ██████╔╝██║ ██║██║ ██║██████╔╝██║ █████╗ ██║ ██╔══██╗██║ ██║██║ ██║██╔══██╗██║ ██╔══╝ ╚██████╗██║ ██║╚██████╔╝╚██████╗██║██████╔╝███████╗███████╗ ╚═════╝╚═╝ ╚═╝ ╚═════╝ ╚═════╝╚═╝╚════...