hblock

広告、トラッキング、マルウェアのドメインをブロックして、セキュリティとプライバシーを向上させましょう。 これは何のためのものですか？ hBlock は POSIX 準拠のシェルスクリプトで、複数のソース から広告、トラッキングスクリプト、マルウェアを配信するドメインのリストを取得し、hosts ファイル（その他の形式 も含む）を生成して、システムがそれらに接続するのを防ぎます。 ⚠️ hBlock はデフォルトで システムの hosts ファイルを置き換えます 。保持したいエントリがある場合は、事前にバックアップを取ることを検討してください。 インストール hBlock...

Cloudcheck

Cloudcheck Cloudcheck 设计为与 CloudFail 放在同一文件夹中使用。使用前请确保本仓库中所有文件都在同一文件夹下。 同时，在 data 文件夹中创建一个名为 none.txt 的空文本文件，这样在测试时就不会进行子域名暴力破解。 Cloudcheck 会自动修改你的 hosts 文件，使用 CloudFail 的条目，并测试指定的字符串，以检测该条目是否可用于绕过 Cloudflare。 如果输出结果为 "True"，则可以在 hosts 文件中使用该 IP 地址来绕过 Cloudflare。（后续将自动化此过程） 示例：...

uncover

複数の検索エンジンを使用して、インターネット上の露出したホストを素早く発見します。 機能 • インストール • 使い方 • 設定 • Uncoverの実行 • Discordに参加 uncover は、よく知られた検索エンジンのAPIを使用して、インターネット上の露出したホストを素早く発見するGoラッパーです。自動化を念頭に置いて構築されているため、クエリを実行し、その結果を現在のパイプラインツールで利用できます。 機能 複数の検索エンジンを同時にクエリ 利用可能な検索エンジンサポート Shodan Censys FOFA Hunter Quake ZoomEye Netlas...

uncover

Quickly discover exposed hosts on the internet using multiple search engines. Features • Installation • Usage • Configuration • Running Uncover • Join Discord uncover is a go wrapper using APIs of well known search engines to quickly discover exposed hosts on the internet. It is built with...

meg

meg meg is a tool for fetching lots of URLs but still being 'nice' to servers. It can be used to fetch many paths for many hosts; fetching one path for all hosts before moving on to the next path and repeating. You get lots of results quickly, but non of the individual hosts get flooded with...

mass-bruter

Mass Bruter Mass bruteforce network protocols Info Simple POC to quickly mass bruteforce common services in a large scale of network. It will check for default credentials on ftp, ssh, mysql, mssql...etc. This was made for authorized penetration testing purpose only. How it works 1. Use...

hosts

!IMPORTANT Cloning this repository can take a long time! You probably just want to start with the latest version, not its whole history since 2018. Therefore you probably want to use git clone --depth 1 ... to save significant time. !NOTE With the exception of issues and PRs regarding changes to...

ssh-audit

ssh-audit ssh-audit is a tool for ssh server & client configuration auditing. jtesta/ssh-audit v2.0+ is the updated and maintained version of ssh-audit forked from arthepsy/ssh-audit v1.x due to inactivity. Features Usage Screenshots Server Standard Audit Example Server Policy Audit Example Clien...

nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

arp-validator

arp-validator Security Tool to detect arp poisoning attacks Features Uses a faster approach in detection of arp poisoning attacks compared to passive approaches Detects not only presence of ARP Poisoning but also valid IP-MAC mapping when LAN hosts are using non-customized network stack Stores...

snmpwn

SNMPwn is an SNMPv3 user enumerator and attack tool. It is a legitimate security tool designed to be used by security professionals and penetration testers against hosts you have permission to test. It takes advantage of the fact that SNMPv3 systems will respond with "Unknown user name" when an...

Keycloak-12.0.1-CVE-2020-10770

Keycloak-12.0.1-CVE-2020-10770 Keycloak 12.0.1 - 'requesturi' Server-Side Request Forgery SSRF ciego Sin autenticación Exploit-DB-50405 Resultado esperado: Escaneo de puertos de localhost o hosts accesibles internamente. Destinado únicamente para fines educativos y pruebas en entornos corporativo...

ike-scan

ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...

nuubi

Nuubi Tools Scanner, Recon. Details Options: -h/--help | Show help message and exit Arguments: -b/--banner | Banner grabing of target ip address -s/--subnet | Subnetlookup of target -c/--cms | Cms detect with headers -d/--dns | Dnslookup of target domain -e/--extract | Extract links from target...

log4j-scan

log4j-scan A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers not only 3-4 headers as previously seen tools. Fuzzing for HTTP POST Data parameters. Fuzzing for JSON data parameters...

hostintel

hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...

DFIR4vSphere

目录： 1. 模块描述 2. 安装和前置要求 3. Start-VCInvestigation 数据收集 4. Start-ESXiInvestigation 数据收集 5. 生成的文件 6. 使用 Splunk 进行日志分析 7. 当威胁行为者加密 vCenter 时 模块描述： DFIR4vSphere PowerShell 模块用于在 ESXi 主机和 vCenter 控制台上收集日志与取证工件。 该模块主要有两个功能： Start-VCInvestigation：此功能将收集 vCenter 上注册的所有 vSphere API 调用日志，这些日志称为 VI...

idb

Idb idb is a tool to simplify some common tasks for iOS pentesting and research. Originally there was a command line version of the tool, but it is no longer under development so you should get the GUI version. idb has a new homepage athttp://www.idbtool.com All documentation and news are posted...

vhosts-sieve

VHosts Sieve Searching for virtual hosts among non-resolvable domains. Installation git clone https://github.com/dariusztytko/vhosts-sieve.git pip3 install -r vhosts-sieve/requirements.txt Usage Get a list of subdomains e.g. using Amass $ amass enum -v -passive -o domains.txt -d example.com -d...

Honeyd

Honeyd 1.6d Copyright c 2002 - 2007 Niels Provos [email protected] 关于 Honeyd： Honeyd 是一个小型守护进程，能够在网络上创建虚拟主机。这些主机可配置为运行任意服务，其 TCP 特征可被调整，使其看起来像是运行特定版本的操作系统。Honeyd 允许单台主机占用多个地址——我已测试过最多 65536 个——在局域网内用于网络仿真。 可以对虚拟机器执行 ping 或 traceroute 操作。根据简单的配置文件，可以模拟虚拟机上的任何类型的服务。除了模拟服务外，还可以将其代理到另一台机器。 安装：...