ParamSpider

paramspider Minería de URLs desde rincones oscuros de los Archivos Web para caza de bugs/fuzzing/profundización 📖 Acerca de • 🏗️ Instalación • ⛏️ Uso • 🚀 Ejemplos • 🤝 Contribuir • Acerca de paramspider te permite obtener URLs relacionadas con cualquier dominio o una lista de dominios desde los...

evine

Evine Interactive CLI Web Crawler. Evine is a simple, fast, and interactive web crawler and web scraper written in Golang. Evine is useful for a wide range of purposes such as metadata and data extraction, data mining, reconnaissance and testing. If you like the project, give it a star. It forces...

cromos

Cromos Cromos is a tool for downloading legitimate extensions of the Chrome Web Store and inject codes in the background of the application and more cromos create executable files to force installation via PowerShell for example, and also upload files to dropbox to host the malicious files...

KaliIntelligenceSuite

Kali Intelligence Suite Kali Intelligence Suite KIS es una herramienta de recopilación de inteligencia y minería de datos para probadores de penetración. Su objetivo es ayudar en la recopilación de inteligencia de forma rápida, autónoma, centralizada y completa mediante: la ejecución de...

Log4j-Vulnerability

Vulnerabilidad Log4j Tutorial: https://youtu.be/PNDBjoT83zA Tutorial: https://cryptodeeptech.ru/log4j-vulnerability Antecedentes de Log4j El equipo de seguridad de Alibaba Cloud reveló públicamente una vulnerabilidad crítica CVE-2021-44228 que permite la ejecución remota de código sin autenticaci...

RedTeamCoin

RedTeamCoin RedTeamCoin is a blockchain-based cryptocurrency mining pool implementation designed for authorized security testing and red team operations. Built in Go with Java client support, it simulates real-world cryptomining attacks to help organizations assess their detection capabilities an...

Docker-Escape-Miner

Usando un exploit de Docker publicado para obtener acceso root y ejecutar un script de minería de bitcoin Esto usa dos bibliotecas de código abierto: nightminer de @ricmoo para minería de bitcoin en Python RunC-CVE-2019-5736 de @twistlock para el escape de Docker Requisitos del sistema Esto fue...

pockint

POCKINT también conocido como Pocket Intelligence es la navaja suiza OSINT para profesionales de DFIR/OSINT. Un programa GUI ligero y portátil, proporciona a los usuarios capacidades esenciales de OSINT en un factor de forma compacto: la caja de entrada de POCKINT acepta indicadores típicos URL,...

SharpML

SharpML SharpML es una prueba de concepto de herramienta de minería de datos en recursos compartidos de archivos que utiliza Machine Learning en Python y C. La herramienta se discute con más detalle en nuestro blog aquí, pero también se resume a continuación: SharpML es una herramienta basada en ...

Bella

Bella Bella is a pure python post-exploitation data mining tool & remote administration tool for macOS. 🍎 💻 What is it? Bella is a robust, pure python, post-exploitation and remote administration tool for macOS. Bella a.k.a. the server is an SSL/TLS encrypted reverse shell that can be dropped on...

alterx

AlterX 기능 • 설치 • 사용법 • AlterX 실행 • Discord 참여 DSL을 사용하는 빠르고 사용자 정의 가능한 서브도메인 워드리스트 생성기. 기능 빠르고 사용자 정의 가능 자동 단어 강화 사전 정의된 변수 구성 가능한 패턴 패턴 마이닝 - 서브도메인 패턴 자동 발견 Regulator의 Go 포트 STDIN / 목록 입력 여러 작동 모드 기본, 발견, 둘 다 설치 AlterX를 설치하려면 시스템에 Golang 1.19가 설치되어 있어야 합니다. Golang은 여기에서 다운로드할 수 있습니다. Golang 설치 후...

drupal-check

drupal-check Este es un script para realizar análisis de logs en configuraciones de Cpanel Apache y Apache predeterminadas. Buscará signos de un posible compromiso, no evidencia garantizada, solo para facilitar el análisis al investigador...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.2.1

Summary Multiple vulnerabilities were addressed in IBM Process Mining 2.2.1 Vulnerability Details CVEID:CVE-2026-19032 DESCRIPTION: jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting the URI scheme. In...

DriveLife-PsTrojan

DriveLife-PsTrojan TrojanDropper/PS.Maloader.d Introduction to the "DriveLife" Virus Since its emergence in 2018, the "DriveLife" virus has spawned multiple variants and continuously refined its techniques to evade detection and removal by security software. The virus exploits multiple high-risk...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.2.0

Summary Multiple vulnerabilities were addressed in IBM Process Mining 2.2.0 Vulnerability Details CVEID:CVE-2026-41710 DESCRIPTION: An attacker can craft a large number of unique requests that trigger a failure, exhausting the capacity of the application-wide stateful retry cache. Once the cache ...

MAL-2026-15878 Malicious code in cbc97b7a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d772b04ff3be605aae9022f0462b9834f488dbb6c1397b7cc1075bb68db63c0 The tarball ships only package.json with no code, scripts, main, or bin. The description field contains a 41KB base64-encoded POSIX shell script that...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for August 2026

Summary Multiple vulnerabilities were addressed in IBM Process Mining 2.2.0 IF002 Vulnerability Details CVEID:CVE-2026-41608 DESCRIPTION: Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0...

MAL-2026-14288 Malicious code in @wizloft/harness-plugin-repository-files (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8197c156f5877fb7a024a3007bed2da30176f74960e3fa271cac4c4369f2705 dist/index.js of @wizloft/harness-plugin-repository-files ships a small legitimate wizloft-harness repository-files plugin followed at line 209 by a...

Malicious code in @wizloft/harness-plugin-repository-files (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8197c156f5877fb7a024a3007bed2da30176f74960e3fa271cac4c4369f2705 dist/index.js of @wizloft/harness-plugin-repository-files ships a small legitimate wizloft-harness repository-files plugin followed at line 209 by a...

MAL-2026-14287 Malicious code in @wizloft/harness-kernel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6d73d94752604c9b48dd785c20cee875e268bb52c673bf3817f95000830fa85 dist/index.js contains an obfuscated top-level async IIFE that executes on import. It queries Ethereum JSON-RPC endpoints eth.drpc.org,...