OSTE-Meta-Scan

OSTE-Meta-Scanner This project is now maintained and supported by OSTE and is no longer available as an open-source project. For inquiries, commercial use, or support, please contact OSTE via LinkedIn, or official website, or sales team at +213.7.98.38.94.54 via whatsup. This project aims to...

security-advisories

التنبيهات الأمنية هذا المستودع هو المصدر الموثوق للتنبيهات الأمنية من مشروع Nextcloud: تُنشر التنبيهات الصادرة بعد مايو 2021 عبر قسم التنبيه الأمني على GitHub يمكن العثور على التنبيهات الصادرة قبل مايو 2021 في المجلد المؤرشف old/ كملفات JSON...

steamer

Steamer Import, manage, search public dumps. Do you have massive amounts of CSV, .sql, .txt, that have credentials, passwords, and hashes inside? Use Steamer to manage them! Load them into a MongoDB database, and either use the console directly, or just use the handy web interface complete with...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

attack-stix-data

Données STIX ATT&CK® MITRE ATT&CK est une base de connaissances accessible mondialement sur les tactiques et techniques des adversaires, fondée sur des observations du monde réel. La base de connaissances ATT&CK est utilisée comme fondement pour le développement de modèles de menaces et de...

cloudmapper

CloudMapper Note the Network Visualization functionality command prepare is no longer maintained. CloudMapper helps you analyze your Amazon Web Services AWS environments. The original purpose was to generate network diagrams and display them in your browser functionality no longer maintained. It...

usbrip

usbrip inherited from "USB Ripper", not "USB R.I.P." is a simple forensics tool with command line interface that lets you keep track of USB device artifacts i.e., USB event history on Linux machines. Table of Contents: Description Quick Start Showcase System Log Structure Dependencies deb pip...

phpsploit

Full-featured C2 framework which silently persists on webserver via polymorphic PHP oneliner codeclimate maintainability Created by nil0x42 and contributors !https://assets.kitploit.com/production/public/readmes/320/aca304368ddb35833ee8b1f57c068ae36288119...

jwt-hack

JSON Web Token Hack Toolkit JSON Web Tokens के परीक्षण, विश्लेषण और हमले के लिए एक उच्च-प्रदर्शन टूलकिट। इंस्टॉलेशन Cargo cargo install jwt-hack Homebrew brew install jwt-hack Snapcraft Ubuntu sudo snap install jwt-hack Chocolatey Windows choco install jwt-hack स्रोत से git clone...

passfault

Welcome to OWASP Passfault Objective: Do Passwords Better! NOTE: This project has been discontinued, but the zxcvbn project has a very similar approach and has been quite successful. We recommend using that library. Running the Command-line Interface: 1. install java 8 jdk 2. cd commandLine 3...

Exihibitor-RCE

Exhibitor-RCE Exhibitor Web Ui 1.7.1 RCE, CVE-2019-5029 Step 1: $ git clone https://github.com/thehunt1s0n/Exihibitor-RCE/ Step 2: $ cd Exihibitor-RCE/ Step 3 optional: You might need to edit json data payload in the script. To do that simply capture the request using burpsuite when comiting the...

batchql

BatchQL BatchQL एक GraphQL सुरक्षा ऑडिटिंग स्क्रिप्ट है जिसका ध्यान बैच GraphQL क्वेरी और म्यूटेशन करने पर है। यह स्क्रिप्ट जटिल नहीं है, और हम सुधारों का स्वागत करते हैं। जब हम GraphQL बैचिंग हमलों की समस्या के क्षेत्र का पता लगा रहे थे, तो हमने पाया कि इंटरनेट पर कुछ ब्लॉग पोस्ट थे, हालांकि...

duf

duf Disk Usage/Free Utility Linux, BSD, macOS & Windows Features User-friendly, colorful output Adjusts to your terminal's theme & width Sort the results according to your needs Groups & filters devices Can conveniently output JSON Installation Packages Linux Arch Linux: pacman -S duf Ubuntu 22.0...

novahot

novahot novahot is a webshell framework for penetration testers. It implements a JSON-based API that can communicate with trojans written in any language. By default, it ships with trojans written in PHP, ruby, and python. Beyond executing system commands, novahot is able to emulate interactive...

novahot

novahot novahot هو إطار عمل لـ webshell موجه لمختبر الاختراق. يقوم بتطبيق واجهة برمجة تطبيقات API قائمة على JSON يمكنها التواصل مع أحصنة طروادة المكتوبة بأي لغة. بشكل افتراضي، يأتي مزودًا بأحصنة طروادة مكتوبة بلغات PHP و Ruby و Python. بالإضافة إلى تنفيذ أوامر النظام، يمكن لـ novahot محاكاة المحط...

CVE-2022-21306

CVE-2022-21306 POC, EXP, chatGPT for me, only some ideas provided, all unusable. code import json import requests targeturl = "http://127.0.0.1:7001" headers = 'User-Agent': 'Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/58.0.3029.110 Safari/537.3',...

melting-cobalt

melting-cobalt 👀 A tool to hunt/mine for Cobalt Strike beacons and "reduce" their beacon configuration for later indexing. Hunts can either be expansive and internet wide using services like SecurityTrails, Shodan, or ZoomEye or a list of IP's. Getting started 1. Install melting-cobalt 2. Configu...

instaloctrack

instaloctrack TL;DR : ascineema, video of the project A tool to scrape geotagged locations on Instagram profiles. Output in JSON & interactive map. requirements sudo apt install chromium-chromedriver && chmod a+x /usr/bin/chromedriver 🛠️ installation git clone...

purify

Purify All-in-one tool for managing vulnerability reports 🎮 Demo 📃 Docs 📹 Quick Vimeo Description The goal of Purify to be an easy-in-use and efficient tool to simplify a workflow of managing vulnerabilities delivered from various even custom tools. Purify is aims to be a tool-agnostic applicatio...

adexplorersnapshot-rs

ADExplorerSnapshot-rs إعادة كتابة لـ ADExplorerSnapshot.py. ينتج ملف .tar.gz يحتوي على ملفات JSON الخاصة بـ BloodHound CE لاستيرادها. يُرجى الاطلاع على المشكلات الخاصة بهذا المشروع قبل استخدامه. إنه ليس بديلاً جاهزًا بعد. التثبيت يتم نشر النسخ التنفيذية المجمعة مسبقًا لنظامي Linux وWindows في...