9598 matches found
HackingAllTheThings
HackingAllTheThings Summary This repository is to keep a structure on my tools an notes that I use when working on archive some IT-Security certifications. Some tools will be written by me and others will be resources found from different locations...
Bramble
๐ฑ Bramble a new hacking Open source suite. ๐ Summary Bramble software has been designed for the bramble project. It incorporates many features of pentesting and IT Security. It's easy to use and completely editable. It allows beginners to learn hacking and gives more experienced users a...
git-dumper
git-dumper A tool to dump a git repository from a website. Install This can be installed easily with pip: pip install git-dumper Usage usage: git-dumper options URL DIR Dump a git repository from a website. positional arguments: URL url DIR output directory optional arguments: -h, --help show thi...
CVE-2025-47226
CVE-2025-47226 - IDOR Vulnerability in Snipe-IT = v8.0.4 ๐จ Insecure Direct Object Reference IDOR vulnerability in Snipe-IT allows authenticated users to view asset information from other departments by tampering with locationid. โ๏ธ Discovered By Siripong Jintung GitHub: Sn1p3r-H4ck3r Linkedin:...
WMD
WMD Weapon of Mass Destruction This is a python tool with a collection of IT security software. The software is incapsulated in "modules". The modules does consist of pure python code and/or external third programs. Main functions 1. To use a module, run the command "use modulecall", e.g. "use...
cisco-ios-xe-implant-detection
Cisco IOS XE implant scanning & network detection Network detection of CVE-2023-20198 exploitation and fingerprinting of post-exploitation of Cisco IOS XE devices. CVE-2023-20198 Suricata network detection The suricata/ folder contains Suricata detection rules for exploitation of CVE-2023-20198...
SimpleRemoter
SimpleRemoter ็ฎไฝไธญๆ | ็น้ซไธญๆ | English !WARNING Important Legal Notice This software is intended solely for educational purposes and authorized use cases such as: Remote IT administration within your own organization Authorized penetration testing and security research Personal device management and...
Test IT testing management system Default Login Credentials Compromise
The vulnerability of the Test IT testing management system is related to the use of default login credentials. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
Test IT SSRF
The vulnerability of the Test IT testing management system is related to insufficient testing of server-side requests. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...
Test IT testing system Command Execution
The vulnerability of the Test IT testing system relates to the use of externally controlled input data for class selection. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
die-python
DetectItEasy-Python Native Python 3.11+ bindings for @horsicq's Detect-It-Easy Install From PIP The easiest and recommended installation is through pip. pip install die-python Using Git git clone https://github.com/elastic/die-python cd die-python Install Qt into the build. It can be easily...
dradis-ce
Welcome to the Dradis Framework An Automated Pentest Reporting Tool Dradis is an open-source collaboration framework and penetration testing report generator that helps InfoSec teams streamline reporting workflows. With support for importing data from tools like Burp Suite, Nessus, and Nmap, Drad...
NetAlertX
NetAlertX - Network Visibility & Asset Intelligence Framework !mainmain ๐ท Click for more screenshots !Main screenmain| !devicedetails 1devicedetails| !Screen networknetwork ---|---|--- !presencepresence| !maintenancemaintenance| !settingssettings !synchubsynchub| !report1report1|...
qub-network-security-cve-2023-20198
๐ก๏ธ qub-network-security-cve-2023-20198 Analysis, detection, and mitigation of CVE-2023-20198 exploitation in Cisco IOS XE ๐ Queenโs University Belfast โ CSC3064 Network Security Assessment ๐ Assessment Overview This project involves analyzing PCAP files provided by Fox-IT to: Identify Indicators o...
WSO2 - Server Side Request Forgery
WSO2 products contain SSRF and reflected XSS vulnerabilities in the deprecated Try-It feature accessible only to administrative users, caused by improper URL validation and direct content reflection, letting attackers trick admins into executing arbitrary JavaScript and querying internal services...
BIQS IT Biqs-drive v1.83 Local File Inclusion
A local file inclusion vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user. id: CVE-2021-394...
on-the-fly
on-the-fly โโโโโโ โโโโ โ โโโโโโโโโ โโโ โโ โโโโโโ โโโโโ โโโ โโโ โโโ โโโโ โโโ โโ โโ โ โ โโโ โโโโโโโ โโ โโ โ โโโ โโโโ โโโ โโโ โโโโ โโโโโโ โโ โโโ โ โโโโ โโโโโโโโโโ โโโโ โโโโโ โโโโ โโโ โโโ โโโ โโโโโโโ โโโโโ โ โโโโ โ โโโ โโโ โโโ โ โโโโ โโโโ โ โโโโโ โ โโโโโโโโโโโ โโโโ โโโโ โ โโโโโโโโโโโโโโโ โโโโโ โโโโโโ...
ThreatHunting
The ThreatHunting Project An informational repo about hunting for adversaries in your IT environment. Be sure to visit ThreatHunting.net for more info about this repo. License Here's the deal, in plain English: This repo is here for the community. You are free to use it for personal or commercial...
CVE-2025-64027
Product Info Snipe-IT is a free and open-source IT asset management system FOSS built on Laravel. It provides hardware asset tracking, software license management, accessories, and consumables inventory features for IT operations teams. It is actively maintained and updated frequently. Summary A...