arkime

Arkime Arkime es un sistema de análisis de red y captura de paquetes de código abierto a gran escala. Arkime aumenta tu infraestructura de seguridad actual para almacenar e indexar el tráfico de red en formato PCAP estándar, proporcionando acceso indexado rápido. Se proporciona una interfaz web...

bitcrook

Bitcrook Centralize and expedite OSINT investigations View the roadmap Table of Contents Information About Disclaimer Changelog Preview Attributions Usage Installation CLI GUI Docker Authentication Information About Bitcrook is an open-source intelligence apparatus that aims to centralize all of...

recon-ng

El Framework Recon-ng Recon-ng es un framework de reconocimiento completo diseñado con el objetivo de proporcionar un entorno potente para llevar a cabo reconocimiento de código abierto basado en web de forma rápida y exhaustiva. Recon-ng tiene una apariencia y una sensación similares al Metasplo...

recon-ng

The Recon-ng Framework Recon-ng is a full-featured reconnaissance framework designed with the goal of providing a powerful environment to conduct open source web-based reconnaissance quickly and thoroughly. Recon-ng has a look and feel similar to the Metasploit Framework, reducing the learning...

Website

The New Oil Mission Statement To educate readers on why privacy and security matter, and the various tools and techniques available to help them reclaim and protect their own privacy & security To empower readers to believe that privacy and security are attainable for everyone and to do their bes...

rita

RITA Inteligencia de Amenazas en Tiempo Real Si RITA te resulta útil y deseas ir un paso más allá con automatización de caza, visualizaciones futuristas y enriquecimiento de datos, echa un vistazo a AC-Hunter. Presentado por Active Countermeasures. Patrocinado por BHIS. RITA es un marco de trabaj...

commix

English • Ελληνικά • Español • Français • فارسی • Bahasa Indonesia • Türkçe Commix short for command injection exploiter is an open source penetration testing tool, written by Anastasios Stasinopoulos @ancst, that automates the detection and exploitation of command and code injection...

ator

Extensor de Obtención y Reemplazo de Tokens de Autenticación Introducción En el mundo de las pruebas de seguridad web, la automatización es clave y Burp Suite es la opción preferida. Sin embargo, para aprovechar realmente el poder de Burp para el escaneo automatizado, necesitas los complementos...

cervantes

Cervantes is an open-source, collaborative platform designed specifically for pentesters and red teams. It serves as a comprehensive management tool, streamlining the organization of projects, clients, vulnerabilities, and reports in a single, centralized location. By facilitating efficient data...

netbox

The cornerstone of every automated network NetBox Community | NetBox Cloud | NetBox Enterprise NetBox exists to empower network engineers. Since its release in 2016, it has become the go-to solution for modeling and documenting network infrastructure for thousands of organizations worldwide. As a...

CVE-2023-22515

CVE-2023-22515 CVE-2023-22515, a critical vulnerability affecting on-premises instances of Confluence Server and Confluence Data Center, a Broken Access Control vulnerability. Attlassian has provided a CVSS base score of 10.0 One line poc cat file.txt| while read host do;do curl -skL...

FISSURE

FISSURE - The RF Framework Frequency Independent SDR-based Signal Understanding and Reverse Engineering Overview GRCon26 Conference Talk | Tactical Workflow Demo | GRCon26 Presentation Slides ---|---|--- Introduction FISSURE is an open-source framework for RF analysis, automation, and distributed...

cutter

Cutter Cutter is a free and open-source reverse engineering platform powered by rizin. It aims at being an advanced and customizable reverse engineering platform while keeping the user experience in mind. Cutter is created by reverse engineers for reverse engineers. Learn more at cutter.re. Getti...

skydive

Skydive Skydive is an open source real-time network topology and protocols analyzer. It aims to provide a comprehensive way of understanding what is happening in the network infrastructure. Skydive agents collect topology information and flows and forward them to a central agent for further...

nishang

Nishang Nishang is a framework and collection of scripts and payloads which enables usage of PowerShell for offensive security, penetration testing and red teaming. Nishang is useful during all phases of penetration testing. By Nikhil Mittal Founder of Altered Security - Hands-on red team and...

CVE-2018-8639-EXP

CVE-2018-8639-EXP CVE-2018-8639 EXP Usage: CVE-2018-8639-EXP.exe command etc 1. Most open-source samples may no longer be capable of bypassing antivirus; modifications are required. 2. I believe that open-sourcing the core code can help those who want to learn. 3. I have learned a lot from the...

dradis-ce

Bienvenido al Framework Dradis: Una Herramienta Automatizada de Generación de Informes de Pentest Dradis es un framework de colaboración de código abierto y un generador de informes de pruebas de penetración que ayuda a los equipos de InfoSec a optimizar los flujos de trabajo de generación de...

dradis-ce

Welcome to the Dradis Framework An Automated Pentest Reporting Tool Dradis is an open-source collaboration framework and penetration testing report generator that helps InfoSec teams streamline reporting workflows. With support for importing data from tools like Burp Suite, Nessus, and Nmap, Drad...

docker-bench-security

Docker Bench for Security Docker Bench for Security es un script que verifica docenas de buenas prácticas comunes en torno al despliegue de contenedores Docker en producción. Todas las pruebas están automatizadas y se basan en el CIS Docker Benchmark v1.6.0. Lo ponemos a disposición como una...

docker-bench-security

Docker Bench for Security The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production. The tests are all automated, and are based on the CIS Docker Benchmark v1.6.0. We are making this available as an open-source utili...