17713 matches found
metta
Metta Metta is an information security preparedness tool. This project uses Redis/Celery, python, and vagrant with virtualbox to do adversarial simulation. This allows you to test mostly your host based instrumentation but may also allow you to test any network based detection and controls...
kali-linux-tools-interface
Kali Linux Tools Interface 브라우저를 통해 정보 보안 도구를 사용할 수 있는 그래픽 인터페이스입니다. 기사 살펴보기 » 브라질 포르투갈어로만 제공 버그 신고 · 기능 요청 ⚠️ 알림 🚧 다른 프로젝트에 참여하고 있어 이 프로젝트에 대한 지원을 중단했습니다. 하지만 코드는 여전히 오픈되어 있어 누구든지 다운로드, 테스트 및 수정할 수 있습니다. 여러분의 지원에 감사드립니다! 즐기세요 😉 🧩 인용 이 저장소를 연구에 사용하는 경우 다음과 같이 인용해 주세요: BibTeX:...
burpcommander
burpcommander Ruby command-line interface to Burp Suite's REST API Usage burpcommander VERSION: 1.0.1 - UPDATED: 08/29/2018 -t, --target IP Address Defaults to 127.0.0.1 -p, --port Port Number Defaults to 1337 -k, --key API Key If you require an API key specify it here -i, --issue-type-id String...
feroxbuster
!WARNING Security Notice – Domain Impersonation The domain feroxbuster.com is NOT affiliated with this project, its maintainers, or any official feroxbuster releases. Official feroxbuster downloads are distributed ONLY through: https://github.com/epi052/feroxbuster open source...
whatfiles
whatfiles Whatfiles is a Linux utility that logs what files another program reads/writes/creates/deletes on your system. It traces any new processes and threads that are created by the targeted process as well, and records whether each operation succeeded. Rationale: I've long been frustrated at...
FinalRecon
Twitter - Telegram - thewhiteh4t's Blog FinalRecon is an all in one automatic web reconnaissance tool written in python. Goal of FinalRecon is to provide an overview of the target in a short amount of time while maintaining the accuracy of results. Instead of executing several tools one after...
spiderfoot
SpiderFoot is an open source intelligence OSINT automation tool. It integrates with just about every data source available and utilises a range of methods for data analysis, making that data easy to navigate. SpiderFoot has an embedded web-server for providing a clean and intuitive web-based...
pypykatz
🚩 Sponsors If you like this project, consider purchasing licenses of OctoPwn, our full pentesting suite that runs in your browser! For notifications on new builds/releases and other info, hop on to our Discord pypykatz Mimikatz implementation in pure Python. At least a part of it : Runs on all OS...
exrex
EXREX Irregular methods for regular expressions. Exrex is a command line tool and python module that generates all - or random - matching strings to a given regular expression and more. It's pure python, without external dependencies. There are regular expressions with infinite matching strings...
PSBits
PSBits 通常よりも少し深く掘り下げることを可能にする、（比較的）シンプルなソリューション群。 各フォルダには詳細を説明する独自の readme.md を置くべきです。ない場合は、コードの冒頭とインラインに詳細なコメントがあります。 ニュースレター：https://gtworek.ck.page/ 自分でコンパイルしたい場合は、無料版 Visual Studio のダウンロード、インストール、設定に関する詳細な手順をこちらで確認できます：...
ldapdomaindump
LDAPDomainDump Active Directory information dumper via LDAP Introduction In an Active Directory domain, a lot of interesting information can be retrieved via LDAP by any authenticated user or machine. This makes LDAP an interesting protocol for gathering information in the recon phase of a pentes...
meg
meg meg is a tool for fetching lots of URLs but still being 'nice' to servers. It can be used to fetch many paths for many hosts; fetching one path for all hosts before moving on to the next path and repeating. You get lots of results quickly, but non of the individual hosts get flooded with...
OSINT-Framework
OSINT Framework http://osintframework.com Notes OSINT framework focused on gathering information from free tools or resources. The intention is to help people find free OSINT resources. Some of the sites included might require registration or offer more data for $$$, but you should be able to get...
OSINT-Framework
OSINT Framework http://osintframework.com 注意事項 OSINTフレームワークは、無料のツールやリソースから情報を収集することに焦点を当てています。目的は、無料のOSINTリソースを見つける手助けをすることです。掲載されているサイトの中には、登録が必要なものや、追加データを有料で提供するものもありますが、少なくとも情報の一部は無料で入手できるはずです。...
public-pentesting-reports
공개 침투 테스트 보고서 컨설팅 회사와 학계 보안 그룹에서 발행한 공개 침투 테스트 보고서를 모은 저장소입니다. Julio @ Blaze Information Security https://www.blazeinfosec.com가 관리합니다. Arne Padmos가 2015년에 시작한 목록을 기반으로 합니다. 위협 모델링 분야의 유사한 노력은 이 저장소를 참조하세요...
sniffles
Sniffles--Packet Capture Generator for IDS and Regular Expression Evaluation Sniffles is a tool for creating packet captures that will test IDS that use fixed patterns or regular expressions for detecting suspicious behavior. Sniffles works very simply. It takes a set of regular expressions or...
routopsy
routopsy Routopsy is a toolkit built to attack often overlooked networking protocols. Routopsy currently supports attacks against Dynamic Routing Protocols DRP and First-Hop Redundancy Protocols FHRP. Most of the attacks currently implemented make use of a weaponised 'virtual router' as opposed t...
Lightdash version <= 0.510.3 Arbitrary File Read
packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they allow .. directory traversal and do not ensure that an intended file extension .csv or .png is used. id: CVE-2023-35844 info: name: Lightdash version = 0.510.3 Arbitrary File Read author: dwisiswant0...
Microweber < 1.2.17 - Cross-Site Scripting
Cross-site Scripting XSS vulnerability in the /demo/editortools/module endpoint via the 'type' parameter. id: CVE-2022-2130 info: name: Microweber 1.2.17 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Cross-site Scripting XSS vulnerability in the...