mud-visualizer

Manufacturer Usage Description MUD Visualizer Warning: mud-visualizer is currently beta. Use at your own risk. This tool can be used to visualize the MUD files in JSON format. Table of Contents Motivation Installation Supported MUD Abstractions Contribution Support Citation License Motivation MUD...

Package-Inferno

PackageInferno Scanner della supply chain npm incredibilmente semplice, Docker‑first. Un solo file compose esegue: Enumerator → crea la coda dei pacchetti Fetcher → scarica i tarball e li carica opzionalmente su S3 Analyzer → analisi statica + YARA opzionale Postgres → DB locale per i risultati...

np-audit

np-audit — analizzatore di pacchetti npm Analisi di sicurezza statica per pacchetti npm — rileva script di lifecycle offuscati, vulnerabilità note e pattern dannosi prima che vengano eseguiti. Sostituto diretto di npm install e...

twifo-cli

T W I F O - C L I Ottieni le informazioni di un utente Twitter! Installazione root@kitploit: $ npm install --global twifo-cli OPPURE root@kitploit: $ sudo npm install --global twifo-cli Utilizzo root@kitploit: $ Usage: twifo Example: $ twifo 9gag Correlati twifo : API per questo strumento. quoraf...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

salus

Salus: Guardian of Code Safety and Security 🔍 Overview Salus Security Automation as a Lightweight Universal Scanner, named after the Roman goddess of protection, is a tool for coordinating the execution of security scanners. You can run Salus on a repository via the Docker daemon and it will...

pkgxray

pkgxray — sicurezza pre-installazione per pacchetti npm, server MCP e agenti AI Ispeziona un pacchetto npm o un server MCP prima di installarlo o di connetterti ad esso, e ottieni un verdetto deterministico e basato su prove: SAFE, REVIEW, o BLOCK. Analisi statica locale, a zero dipendenze — le...

cumulus

Application Weakness Monitoring Software What's Cumulus Cumulus is a service that helps you monitor and fix security weakness in realtime. The issues will be reported on web dashboard. It's very simple and powerful...

Malicious code in bnotify-web-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f94e04da2ba873e2dbc02daf8ccdf71ac80710b143908d5ed08797b88c48c37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

safe-npm

safe-npm Un installateur npm axé sur la sécurité qui protège vos projets contre les paquets récemment compromis. Pourquoi cela existe-t-il ? Les attaques sur la chaîne d'approvisionnement des paquets npm constituent une menace croissante. Les attaquants compromettent parfois des paquets légitimes...

tiktok-scraper

TikTok Scraper & Downloader Raccogli e scarica informazioni utili da TikTok. Nessun login o password richiesti Questo non è un supporto API ufficiale ecc. È solo uno scraper che utilizza l'API Web di TikTok per raccogliere media e relative meta-informazioni. Contenuto Caratteristiche Da fare...

cve-lite-cli

ほとんどのツールは何が問題かを教えてくれます。CVE Lite CLI は何を実行すべきかを教えてくれます。...

GiveMeSecrets

GiveMeSecrets Verwende reguläre Ausdrücke, um sensible Informationen aus einem angegebenen Repository GitHub, pip oder npm zu extrahieren. Abhängigkeiten Zum Ausführen dieses Skripts ist lediglich Python 3.6 oder höher erforderlich. Außerdem müssen git, pip und npm im System installiert sein...

React2Shell-CVE-2025-55182

React2Shell CVE-2025-55182 PoC e configuração do laboratório Criar o servidor do zero root@kitploit: npm create [email protected] react2shell-lab Aceitar os padrões é suficiente, nomeie como quiser OU Clonar o repositório root@kitploit: git clone...

next-picomatch-cve-repro

Riproduzione CVE-2026-33671 di picomatch incluso in Next.js Riproduzione minima per: Next.js 16.2.4 include picomatch 4.0.3 venduto in nodemodules/next/dist/compiled/picomatch/, che è affetto da CVE-2026-33671 ALTA. Gli overrides di npm non possono raggiungere la copia inclusa. Passaggi...

stegcloak

StegCloak The Cloak of Invisibility for your texts StegCloak is a pure JavaScript steganography module designed in functional programming style, to hide secrets inside text by compressing and encrypting the secret before cloaking it with special unicode invisible characters. It can be used to...

netmap.js

netmap.js Fast browser-based network discovery module This project is no longer maintained. Description netmap.js provides browser-based host discovery and port scanning capabilities to allow you to map website visitors' networks. It's quite fast, making use of es6-promise-pool to efficiently run...

heappy

🙂 Heappy: a happy heap editor Heappy is an editor based on gdb/gef that helps you to handle the heap during your exploitation development. The project should be considered a didactic tool useful to understand the evolution of the heap during the process life cycle. It has been created to simplify...

analyzer

This project automates the daily tasks of Threat Intelligence Analyzer role internally without external resources' interaction. It analyzes, visualizes and structures sensitive files Malware or data by extracting features, artifacts and IoC using different modules. The output of those modules can...

NPMAnalysis

Introduzione Recentemente, gli incidenti di sicurezza legati agli attacchi di poisoning NPM sono emersi uno dopo l'altro. Quando si verificano tali incidenti, i pacchetti NPM interessati vengono spesso rimossi o non pubblicati dal registro NPM, rendendo difficile l'analisi di sicurezza successiva...