airgeddon

airgeddon This is a multi-use bash script for Linux systems to audit wireless networks. All the needed info about how to "install | use | enjoy" airgeddon is present at GitHub's Wiki. I. Content & Features Home Features Screenshots Wallpapers II. Requirements Requirements Compatibility Cards and...

CVE-2026-94581

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 are vulnerable to an OS command injection vulnerability in the REST API management interface. An authenticated, high-privileged remote attacker who possesses administrative privileges to configure SSH known host settings can sup...

retire.js

Retire.js What you require you must also retire There is a vast ecosystem of JavaScript libraries available for both web and Node.js applications. While these libraries significantly accelerate development, they also require ongoing maintenance to ensure security vulnerabilities are addressed...

confused

Confused A tool for checking for lingering free namespaces for private package names referenced in dependency configuration for Python pypi requirements.txt, JavaScript npm package.json, PHP composer composer.json or MVN maven pom.xml. What is this all about? On 9th of February 2021, a security...

bluemonday

bluemonday bluemonday is a HTML sanitizer implemented in Go. It is fast and highly configurable. bluemonday takes untrusted user generated content as an input, and will return HTML that has been sanitised against an allowlist of approved HTML elements and attributes so that you can safely include...

Awesome-WAF

Awesome WAF Everything about web application firewalls WAFs from a security perspective. 🔥 Foreword: This was originally my own collection on WAFs. I am open-sourcing it in the hope that it will be useful for pentesters and researchers out there.As the saying goes, "the community just learns from...

grype

Grype A vulnerability scanner for container images and filesystems. Features Scan container images , filesystems , and SBOMs for known vulnerabilities see the docs for a full list of supported scan targets Supports major OS package ecosystems Alpine, Debian, Ubuntu, RHEL, Oracle Linux, Amazon...

nfcgate

NFCGate ⚠️NFCGate is currently being falsely detected as "NGate" malware. Please seethis issue for up-to-date information.⚠️ NFCGate is an Android application meant to capture, analyze, or modify NFC traffic. It can be used as a researching tool to reverse engineer protocols or assess the security...

ppmap

ppmap A simple scanner/exploitation tool written in GO which automatically exploits known and existing gadgets checks for specific variables in the global context to perform XSS via Prototype Pollution. NOTE: The program only exploits known gadgets, but does not cover code analysis or any advance...

bkcrack

bkcrack Cassez le chiffrement zip hérité avec l'attaque à texte clair connu de Biham et Kocher. Aperçu Une archive ZIP peut contenir de nombreuses entrées dont le contenu peut être compressé et/ou chiffré. En particulier, les entrées peuvent être chiffrées avec un algorithme de chiffrement...

bkcrack

bkcrack Crack legacy zip encryption with Biham and Kocher's known plaintext attack. Overview A ZIP archive may contain many entries whose content can be compressed and/or encrypted. In particular, entries can be encrypted with a password-based symmetric encryption algorithm referred to as...

malcom

Malcom - Malware Communication Analyzer Malcom is a tool designed to analyze a system's network communication using graphical representations of network traffic, and cross-reference them with known malware sources. This comes handy when analyzing how certain malware species try to communicate wit...

JSONPath

см. также лицензии для dev-зависимостей. JSONPath Plus Анализ, преобразование и выборочное извлечение данных из JSON-документов и объектов JavaScript. jsonpath-plus расширяет исходную спецификацию, добавляя некоторые дополнительные операторы и делая явными некоторые поведения, которые оригинал не...

punk.py

punk.py unix SSH post-exploitation 1337 tool how it works punk.py is a post-exploitation tool meant to help network pivoting from a compromised unix box. It collect usernames, ssh keys and known hosts from a unix system, then it tries to connect via ssh to all the combinations found. punk.py is...

wcw-cyberring-pav-decryptor

WCW CyberRing PAV Decryptor Cryptanalyse d'un système propriétaire de DRM vidéo de 1999, récupérant 51 minutes de médias perdus grâce à une analyse binaire statique et une attaque à texte clair connu. Image extraite d'un match « CyberRing » récupéré. Les catcheurs de la WCW ont été filmés sur fon...

CVE-2025-8875-CVE-2025-8876

CVE-2025-8875 & CVE-2025-8876 이 탐지 방법은 어떻게 작동하나요? 버전 탐지 템플릿 - 2025.3.1.9 또는 이전 버전을 실행 중인 모든 시스템은 CVE-2025-8875 및 CVE-2025-8876에 취약한 것으로 간주됩니다. 이 스크립트를 어떻게 실행하나요? 1. 여기에서 Nuclei를 다운로드합니다. 2. 템플릿을 로컬 시스템에 복사합니다. 3. 다음 명령을 실행합니다: nuclei -u https://yourHost.com -t template.yaml 참고 자료...

wifiphisher

À propos Wifiphisher est un framework de point d'accès malveillant rogue AP destiné aux engagements d'équipe rouge ou aux tests de sécurité Wi-Fi. Grâce à Wifiphisher, les testeurs d'intrusion peuvent facilement obtenir une position d'homme du milieu MITM contre des clients sans fil en effectuant...

frida

Frida Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers. Learn more at frida.re. Two ways to install 1. Install from prebuilt binaries This is the recommended way to get started. All you need to do is: pip install frida-tools CLI tools pip install frida...

katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

chalumeau

Chalumeau Chalumeau is automated,extendable and customizable credential dumping tool based on powershell and python. Main Features Write your own Payloads In-Memory execution Extract Password List Dashboard reporting / Web Interface Parsing Mimikatz Dumping Tickets Screenshots Known Issues Parsin...