IDAssistMCP

IDAssistMCP Standalone MCP Model Context Protocol server plugin for IDA Pro 9.x that exposes IDA's analysis capabilities to LLM clients like Claude Desktop. Features 41 MCP tools covering binary analysis, decompilation, cross-references, symbol management, type system, navigation, patching, expor...

cve-2020-35717

CVE-2020–35717 zonote allows XSS via crafted note, with resultant Remote Code Execution because Node.js integration is enabled. Steps to exploit the vulnerability Download any zonote affected version Open zonote app Import xss-rce.znt in zonote via Menu Open Hover over the different links in...

cloudgpt

CloudGPT AWS vulnerability scanner Scan customer managed AWS policies for vulnerabilities using ChatGPT. This tool automatically redacts the customer account number by replacing them with a randomly generated account number before sending the policies to ChatGPT. Knowledge of a vulnerable policy...

glue

OWASP Glue Glue is a framework for running a series of tools. Generally, it is intended as a backbone for automating a security analysis pipeline of tools. Recommended Usage For those wishing to run Glue, we recommend using the docker image because it should have the other tools it uses available...

Aurea

Aurea Specification Golden Standards for IaC Security HTML Mirror: https://roxanneardary.com/aurea-specification/ Specification Overview Aurea is a fully open-source, AI-powered Infrastructure-as-Code security specification designed to provide continuous security analysis throughout the software...

pocsuite3

pocsuite3 Legal Disclaimer Usage of pocsuite3 for attacking targets without prior mutual consent is illegal. pocsuite3 is for security testing purposes only 法律免责声明 未经事先双方同意，使用 pocsuite3 攻击目标是非法的。 pocsuite3 仅用于安全测试目的 Overview pocsuite3 is an open-sourced remote vulnerability testing and...

aced

Aced Aced is a tool to parse and resolve a single targeted Active Directory principal's DACL. Aced will identify interesting inbound access allowed privileges against the targeted account, resolve the SIDS of the inbound permissions, and present that data to the operator. Additionally, the loggin...

Zeek-CVE-Enrichment

zeek-cve-enrichment This package enriches the suricatacorelight and notice Corelight logs with known CVE information. To collect the CVE information, it first uses a Python script reformat.py to read a CSV file containing IP addresses, hostnames, and CVE Common Vulnerabilities and Exposures...

witcher

witcher Implement and monitor Appsec control at scale. Requirements NodeJS 20.13 Tested on Mac Ubuntu How to install $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ npm i Build a Docker image $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ docker build ...

4062-1

Black Duck CoPilot Gradle/Travis CI Example Shows a working setup for using the Black Duck CoPilot integration to analyze the risk of project dependencies Travis CI Setup The .travis.yml file has been modified to upload generated dependency data to Black Duck CoPilot: aftersuccess: - bash curl -s...

port-scan-automation

LazyMap - Script de scan NMAP automatique Automatisez les scans NMAP et les politiques Nessus personnalisées. Développé par Daniel Compton https://github.com/commonexploits/port-scan-automation.git Publié sous licence AGPL, voir LICENSE pour plus d'informations Installation git clone...

OSINT-Search

OSINT-Search Description Script in Python that applies OSINT techniques by searching public data using email addresses, phone numbers, domains, IP addresses or URLs. Create an account at https://pipl.com/api and get the API key. Create an account at https://www.opencnam.com/ and get the Account S...

yeti

Plateforme Yeti Yeti vise à combler le fossé entre les praticiens de la CTI et de la DFIR en fournissant une plateforme et un pipeline de renseignement forensique pour les équipes DFIR. Il est né de la frustration de devoir répondre à la question « où ai-je déjà vu cet artefact ? » ou « comment...

asnap

Asnap Description Asnap aims to render recon phase easier by providing regularly updated data about which companies owns which ipv4 or ipv6 addresses and allows the user to automate initial port and service scanning. █████╗ ███████╗███╗ ██╗ █████╗ ██████╗ ██╔══██╗██╔════╝████╗ ██║██╔══██╗██╔══██╗...

Exploit-CVE-2014-4210-

START WITH A COOL THING DUDEUSE IT TO F&CK UPGRADES TO CAUSE HUMAN SUFFERING: 1. Self-Replicating Worm : Spreads via SSH brute-force/SMB exploits to all connected networks. 2. MBR Overwrite : Brick physical hardware by destroying partition tables no recovery possible. 3. Zero-Day RCE : Exploits...

cred_scanner

credscanner A simple command line tool for finding AWS credentials in files. Optimized for use with Jenkins and other CI systems. I suspect there are other, better tools out there such as git-secrets, but I couldn't find anything to run a quick and dirty scan that also integrates well with Jenkin...

cred_scanner

credscanner Un outil simple en ligne de commande pour trouver des identifiants AWS dans les fichiers. Optimisé pour une utilisation avec Jenkins et autres systèmes CI. Je soupçonne qu'il existe d'autres outils, meilleurs comme git-secrets, mais je n'ai rien trouvé pour exécuter un scan rapide et...

SecuSphere

SecuSphere Your Comprehensive DevSecOps Solution Welcome to SecuSphere, your one-stop solution for all DevSecOps needs. Our centralized platform is expertly designed to manage and optimize your vulnerability management, CI/CD pipeline integration, security assessments, and DevSecOps practices...

reconmap

Reconmap Plateforme de gestion, d'automatisation et de rapport de tests d'intrusion Reconmap est une plateforme open source d'évaluation des vulnérabilités et de tests d'intrusion conçue pour accompagner les professionnels de la sécurité tout au long du cycle de vie d'un engagement. Elle permet a...

AndroTickler

AndroTickler A java tool that helps to pentest Android apps faster, more easily and more efficiently. AndroTickler offers many features of information gathering, static and dynamic checks that cover most of the aspects of Android apps pentesting. It also offers several features that pentesters ne...