json-sanitizer

json-sanitizer Dato un contenuto simile a JSON, il JSON Sanitizer lo converte in JSON valido. Primi passi - Contatti Può essere collegato a entrambe le estremità di una pipeline di dati per aiutare a soddisfare il principio di Postel: sii conservatore in ciò che fai, sii liberale in ciò che...

Apache-couchdb-CVE-2017-12635

Couchdb vertikaler Privilegienumgehungs-Bug CVE-2017-12635 Apache CouchDB ist eine Open-Source-Datenbank, die sich auf Benutzerfreundlichkeit und darauf konzentriert, eine „vollständig das Web umarmende Datenbank“ zu sein. Es ist eine NoSQL-Datenbank, die JSON als Speicherformat, JavaScript als...

bomber

bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...

CVE-2025-52688

CVE-2025-52688 Produtos Afetados Alcatel AP13161 - ponto de acesso WIFI empresarial Resumo Há 2 vulnerabilidades principais sendo abordadas aqui: Falta de sanitização de entrada em vários parâmetros web JSON que permite que caracteres maliciosos como ; sejam injetados para causar um ataque de...

raven

Raven - Erweiterte Cyber-Bedrohungskarte vereinfacht, anpassbar und reaktionsschnell. Sie verwendet D3.js mit TOPO JSON, umfasst 247 Länder, 100.000 Städte und kann in einer isolierten Umgebung ohne externe Lookups verwendet werden!. Struktur Offline - Demo Firefox, Chrome oder Safari Live -...

CVE-2023-45966

CVE-2023-45966 Blind SSRF in umputun/remark42 porta a un Blind SSRF a causa della mancanza del campo title e di un filtraggio insufficiente del campo url nella richiesta di creazione del commento. Informazioni aggiuntive Corretto nel commit: efceed6 Tipo di vulnerabilità Altro CWE-918: Server Sid...

steamer

Steamer Import, manage, search public dumps. Do you have massive amounts of CSV, .sql, .txt, that have credentials, passwords, and hashes inside? Use Steamer to manage them! Load them into a MongoDB database, and either use the console directly, or just use the handy web interface complete with...

React-site-CVE-2025-55182

React-Website – CVE-2025-55182 README: Angreifbares Next.js-Projekt React RSC Landingpage Dieses Repository enthält ein Beispiel einer mehrseitigen Corporate-Landingpage mit Next.js 15.0.0 + React 19.0.0. Die Seite simuliert eine Struktur ähnlich wie t1.ru: Startseite, Produkte, Fallstudien,...

decker

Decker - Penetration Testing Orchestration Framework Purpose Decker is a penetration testing orchestration framework. It leverages HashiCorp Configuration Language 2 the same config language as Terraform to allow declarative penetration testing as code, so your tests can be versioned, shared,...

peframe

======= peframe peframe is a open source tool to perform static analysis on Portable Executable malware and generic suspicious file. It can help malware researchers to detect packer, xor, digital signature, mutex, anti debug, anti virtual machine, suspicious sections and functions, macro and much...

shed

Shed - .NET runtime inspector Shed is an application that allow to inspect the .NET runtime of a program in order to extract useful information. It can be used to inspect malicious applications in order to have a first general overview of which information are stored once that the malware is...

dorkbot

dorkbot Scansiona i risultati di ricerca di Google o altri per vulnerabilità. dorkbot è uno strumento modulare da riga di comando per eseguire scansioni di vulnerabilità su gruppi di pagine web restituiti da query di ricerca di Google o altre fonti supportate. È suddiviso in due gruppi di moduli:...

Name-That-Hash

➡️ Discord | Site ⬅️ O Sistema Moderno de Identificação de Hashes pip3 install name-that-hash && nth Aplicação Web sem necessidade de instalação 🤔 O que é isto? Alguma vez encontraste um hash como 5f4dcc3b5aa765d61d8327deb882cf99 e te perguntaste que tipo de hash é? 🤔 Name-that-hash vai nomear esse...

evtx

EVTX Um analisador multiplataforma para o formato Windows XML EventLog Funcionalidades 🔒 Implementado usando 100% Rust seguro - e funciona em todas as plataformas suportadas pelo Rust que possuem stdlib. ⚡ Rápido - veja benchmarks abaixo. É mais rápido que qualquer outra implementação por ordens ...

laurel

Linux Audit – Logging utilizzabile, robusto e semplice LAUREL è un plugin di post-elaborazione degli eventi per auditd8 che genera log di audit basati su JSON utili e arricchiti, adatti per configurazioni moderne di monitoraggio della sicurezza. La documentazione corrispondente all'ultima release...

28458

CVE-2020-28458 Le versioni interessate di questo pacchetto sono vulnerabili a Prototype Pollution. datatables v1.10.16-1.10.16 Utilizzo Esegui lo script Python e inserisci gli input richiesti: URL di destinazione URL del proxy opzionale, lascia vuoto se nessuno Timeout in secondi predefinito 10...

intelmq

docs/index.md...

waf-bypass

WAF Bypass Tool WAF Bypass Tool is an open source tool to analyze the security of any WAF for False Positives and False Negatives using predefined and customizable payloads. Check your WAF before an attacker does. WAF Bypass Tool is developed by Nemesida WAF team with the participation of...

second-order

Second Order Scans web applications for second-order subdomain takeover by crawling the app, and collecting URLs and other data that match certain rules, or respond in a certain way. Installation From binary Download a prebuilt binary from the releases page and unzip it. From source Go version 1....

git-vuln-finder

git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE ID...