vajra

An automated web hacking framework for web applications Table of Content About Vajra What is Vajra Key Feaures What Vajra does Installation Running with docker-compose Tools Used by Vajra...

salt-scanner

salt-scanner A linux vulnerability scanner based on Vulners Audit API and Salt Open, with Slack notifications and JIRA integration. Features Slack notification and report upload JIRA integration OpsGenie integration Requirements Salt Open 2016.11.x salt-master, salt-minion¹ Python 2.7 salt you ma...

Oblivion

Oblivion is a tool focused in real time monitoring of new data leaks, notifying if the credentials of the user has been leak out. It's possible too verify if any credential of user has been leak out before. The Oblivion have two modes: Oblivion Client: graphical mode. Oblivion Server: mode with A...

ransomwatch

RansomWatch RansomWatch is a ransomware leak site monitoring tool. It will scrape all of the entries on various ransomware leak sites, store the data in a SQLite database, and send notifications via Slack or Discord when a new victim shows up, or when a victim is removed. Note: RansomWatch isn't...

SubMon

SubMon Some say bug bounty isn't just about finding bugs, but being the "first" to find them. I'm building this tool to notify hunters when new subdomains appear. Features You can add your favorite target: name + domain. Then you can either click scan or schedule a scan. When the scan finishes, y...

toastfix-demo

ToastFix Demo This project demonstrates how convincing Windows toast notifications can be abused in social engineering attacks, specifically using ClickFix-style lures. A live demo is available here more realistic attack: 👉 https://h4lpy.github.io/ A detailed breakdown of the technique can be fou...

cve-search

cve-search cve-search is a tool to import CVE Common Vulnerabilities and Exposures and CPE Common Platform Enumeration into a MongoDB to facilitate search and processing of CVEs. The main objective of the software is to avoid doing direct and public lookups into the public CVE databases. Local...

CVE-2020-13457

CVE-2020-13457 CVE-2020-13457 Timeline ================ 2020-05-04: Discovered 2020-05-11: Retest issues on researcher's ecosystem 2020-05-20: PoC exploit on windows 2012 x64 tested 2020-05-25: Vendor notification 2020-05-27: PoC exploit on windows 10 x64 tested 2020-06-01: Awaiting vendor...

openredirect

Badges License MIT Installation...

DllNotificationInjection

DllNotificationInjection Main Contributors Description DllNotificationInection is a POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and remote processes. An accompanying blog post with more details is available here:...

CVE-2023-34840

CVE-2023-34840 Vulnerability Explanation All versions in angular-ui-notification are vulnerable to XSS due to the library not sanitizing the input provided by the user. In order to safely use this library, sanitizing / encoding the parameters passed to this library is highly recommended, such as...

ServiceCheater

ServiceCheater Poc of CVE-2020-0113 & CVE-2020-0108 Analysis of Android Foreground Service Privilege Escalation Vulnerability Vulnerability Background In the AOSP August 2020 patch, a vulnerability in the framework layer AMS was disclosed, numbered CVE-2020-0108, rated high, and another numbered...

cloud-audit

Project Introduction cloud-audit Cloud Security Audit Assistant is a tool for detecting the exploitation of leaked AK/SK from public cloud vendors. It periodically calls cloud platform APIs to audit logs and identifies suspected intrusions based on abnormal behavior, black features, and baselines...

miteru

This repository does not have a README...

ARP-Spoof-Detector

root@kitploit: /\ | | \ / | / | | \ | | | | / \ | | | | | | | | | | | | | | | | / /\ \ | /| / \ | ' \ / \ / | | | | | |/ \ / / | / | '| / | | \ | | | | | | | | | || | / || / | || | | // \| \| |/| ./ / /|| |/ |\||\/|| | | || Description ARP Spoof Detector Script that detects ARP...

Wallet-Transaction-Monitor

Wallet Transaction Monitor This script monitors a Bitcoin wallet address and notifies the user when there are changes in the balance or new transactions. It provides real-time updates on incoming and outgoing transactions, along with the corresponding amounts and timestamps. Additionally, it can...

SecureTea-Project

OWASP SECURETEA TOOL PROJECT Codacy Badge The OWASP SecureTea Project is an application designed to help Secure a person's laptop or computer / server with IoT Internet Of Things for notify users via various communication mechanisms, whenever someone accesses their computer / server. This...

scripthunter

scripthunter Scripthunter is a tool that finds javascript files for a given website. To scan Google, simply run ./scripthunter.sh https://google.com. Note that it may take a while, which is why scripthunter also implements a notification mechanism to inform you when a scan is finished via Telegra...

CVE-2021-30146

CVE-2021-30146 Seafile 7.0.5 Persistent XSS Suggested description: Application Server Version: 7.0.5 Seafile is vulnerable to Persistent XSS via share library functionality. Additional Information: Seafile is an open source, self-hosted file sync and share solution with high performance and...

CVE-2019-12562

CVE-2019-12562 CVE-2019-12562 Stored Cross-Site Scripting in DotNetNuke DNN Version before 9.4.0 allows remote attackers to store and embed the malicious script into the admin notification page. The exploit could be used to perfom any action with admin privileges such as managing content, adding...