deadair

Open-source SIEM detection health. Find enabled detections that are blind because their telemetry is missing, stale, late, or schema-incompatible. Runs locally · Read-only · No agent · No telemetry upload Read the technical write-up · Featured in Detection Engineering Weekly · Featured in tl;dr s...

JAW

J A W Website | Docs | Setup | Crawler | Quick Start Docker Example JAW An open-source, prototype implementation of property graphs for JavaScript based on the esprima parser, and the . JAW can be used for analyzing the client-side of web applications and JavaScript-based programs...

factual-rules-generator

factual-rules-generator Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a running operating system. The goal of the software is to be able to use a set of rules against collected or acquired digital forensic evidences and find...

CookieCatcher

CookieCatcher CookieCatcher is an open source application which was created to assist in the exploitation of XSS Cross Site Scripting vulnerabilities within web applications to steal user session IDs aka Session Hijacking. The use of this application is purely educational and should not be used...

BWASP

BWASP The BoB Web Application Security Project BWASP is an open-source, analysis tool to support for Web Vulnerability Manual Analysis hackers. The BWASP tool basically provides predicted information through vulnerability analysis without proceeding with an attack. BWASP supports performing...

CloudGrappler

CloudGrappler Permiso: https://permiso.io Read our release blog: https://permiso.io/blog/cloudgrappler-a-powerful-open-source-threat-detection-tool-for-cloud-environments CloudGrappler is a purpose-built tool designed for effortless querying of high-fidelity and single-event detections related to...

onionscan

什么是 OnionScan？ OnionScan 是一个用于调查暗网的免费开源工具。尽管在匿名和隐私领域有着令人惊叹的技术创新，但始终存在一个无法通过有效技术补丁解决的持续威胁——人为错误。 无论是操作安全泄露还是软件配置错误——大多数时候，对匿名的攻击并非来自破坏底层系统，而是来自我们自身。 OnionScan 有两个主要目标： 我们希望帮助隐藏服务的运营者发现并修复其服务中的操作安全问题 。我们帮助他们检测配置错误，并希望激励新一代匿名工程项目，帮助世界变得更加私密。 其次，我们希望帮助研究人员 和调查人员监控和追踪暗网站点...

metasploit-framework

Metasploit Framework Metasploit Framework 是一款基于 BSD 风格许可证发布的开源工具。有关详细的许可信息，请参阅 COPYING 文件。 最新版本 从 Nightly Installers 页面获取 Metasploit 的最新版本。 文档 包括使用指南在内的全面文档，可在 Metasploit Docs 找到。 开发环境 要搭建开发环境，请访问 Development Setup Guide。 错误与功能请求 通过 GitHub Issues 跟踪器提交错误和功能请求。新提交可通过 MSF-BUGv1 表单 进行。 API 文档...

Supernova

Supernova Shellcode encryptor & obfuscator. Description Supernova is an open-source tool that empowers users to securely encrypt and/or obfuscate their raw shellcode. -red?link=https%3A%2F%2Fgithub.com%2Fnickvourd%2FSupernova%2Freleases Supernova supports various features beyond those typically...

horusec

...

jsql-injection

描述 jSQL Injection 是一款轻量级应用，用于从服务器获取数据库信息。 它免费 、开源 ，且跨平台 （支持 Windows、Linux 和 Mac），适用于 Java 21 至 25 版本。 jSQL Injection 也是官方渗透测试发行版 Kali Linux 的一部分，并被收录于多个其他发行版，如 Pentest Box、Parrot Security OS、ArchStrike 和 BlackArch Linux。...

mkchain

mkchain Open source tool to help you build a valid SSL certificate chain. Description • How To Use • Parameters • How it works • Requirements • Other • License Description Is an open source tool to help you build a valid SSL certificate chain. Also can help you fix the incomplete chain and downlo...

PacketSender

Introduction https://packetsender.com Read this in other languages:English, Español, Deutsch, Français, italiano 简体中文. Packet Sender is an open source utility to allow sending and receiving TCP, UDP, and SSL encrypted TCP packets as well as HTTP/HTTPS requests and panel generation. The mainline...

commix

Commix （command injection exploiter 的缩写）是一款开源渗透测试工具，由 Anastasios Stasinopoulos （@ancst ）编写，用于自动化检测和利用 命令注入 漏洞。 您可以访问，其中展示了wiki上的一些功能。...

docker-bench-security

Docker Bench for Security Docker Bench for Security es un script que verifica docenas de buenas prácticas comunes en torno al despliegue de contenedores Docker en producción. Todas las pruebas están automatizadas y se basan en el CIS Docker Benchmark v1.6.0. Lo ponemos a disposición como una...

Recaf

Recaf An easy to use modern Java bytecode editor that abstracts away the complexities of Java programs. Download Launcher Usage & instructions found on the launcher repo Snapshot releases See CI actions for release artifacts Independent releases None for 4X currently Features Edit Java bytecode...

NETworkManager

NETworkManager A powerful open-source tool for managing networks and troubleshooting network problems! Streamline and simplify your network administration and troubleshooting with NETworkManager. Connect, monitor, and troubleshoot your network and server infrastructure using built-in tools like...

wanderer

Wanderer Wanderer es un programa de código abierto que recopila información sobre los procesos en ejecución. Esta información incluye el nivel de integridad, la presencia de AMSI como módulo cargado, si se ejecuta en 64 o 32 bits, así como el nivel de privilegios del proceso actual. Esta...

LAMMA-beta

LAMMA BETA Vulnerability Assessment Framework for all the Crypto Implimentations. An Open Source Initiative by - SECURITY MONX Lamma Framework Documentation beta root@kitploit: File Name : README Author : @ajithatti Org : Security Monx Version : 0.0.1 Purpose : Gives introduction of Lamma Framewo...

credmap

credmap: 凭证映射器 Credmap 是一款开源工具，旨在唤起人们对凭证重用危险的意识。它能够将提供的用户凭证在多个已知网站上测试，以检查密码是否在这些网站中被重用。官方介绍文章可点击此处查看。 帮助菜单 root@kitploit: Usage: credmap.py --email EMAIL | --user USER | --load LIST options Options: -h/--help show this help message and exit -v/--verbose display extra output information...