certificate-ripper

Certificate Ripper 🔐 A CLI tool to extract server certificates Demo Advantages It is fast Easy to use No openssl required Runs on any Operating System Can be used with or without Java, native executables are present in the releases Extracts all the sub-fields of the certificate Certificates can b...

google-dorks

google-dorks Actualización: enero 2026 Lee esto, mi espacio de blog en Medium:👩‍💻Artículos de Medium de Proviesec Security - léelos Tabla de contenidos Introducción Mi amor por google dork Filtros de búsqueda Operadores Término de búsqueda OR Ideas Enlaces Ejemplo Previniendo GOOGLE DORKS...

linux-malware-detect

Linux Malware Detect LMD Malware scanner for Linux — multi-stage threat detection MD5, SHA-256, HEX, YARA, statistical analysis, ClamAV integration, real-time inotify monitoring, quarantine/clean/restore operations, and multi-channel alerting email, Slack, Telegram, Discord. C 2002-2026, R-fx...

session_reaper_lab

CVE-2025-54236 - SessionReaper Lab Docker environment for practical demonstration of CVE-2025-54236 SessionReaper: PHP Object Deserialization leading to RCE in Magento Open Source 2.4.7. Exclusive use in controlled environment. Do not run against systems without explicit authorization. About the...

yararules

yararules Yara rulez; reglas también. Este es un repositorio de mis propias reglas YARA agrupadas junto con reglas YARA disponibles públicamente, recopiladas de fuentes abiertas, pulidas y probadas por mí. Contacto: craiu at protonmail.ch...

lightwave

Qué es Lightwave Project Lightwave es un proyecto de código abierto que comprende servicios de gestión de identidad y acceso de nivel empresarial, dirigidos a los desafíos críticos de seguridad, gobierno y cumplimiento para aplicaciones nativas de la nube dentro de la empresa. Mediante la...

security-bulletins

Boletines de seguridad A continuación se muestran las notificaciones de eventos de seguridad y privacidad en las aplicaciones de código abierto de Netflix. Fecha| Tipo| Tema ---|---|--- Septeember 27, 2024| Alta| Path Traversal en E2Nest August 1, 2024| Crítica| Server-Side Template Injection en...

SOARCA

Automate threat and incident response workflows with CACAO security playbooks Context and backgound Organisations are increasingly automating threat and incident response through playbook driven security workflow orchestration. The essence of this concept is that specific security events trigger ...

Sourcetrail

Sourcetrail Important Note: This project was archived by the original autors and maintainers of Sourcetrail by the end of 2021. If you want to know more about this decision, read more on our blog. Sourcetrail is a free and open-source cross-platform source explorer that helps you get productive o...

VulnWhisperer

从您的漏洞扫描中创建可操作的数据 VulnWhisperer 是一个漏洞管理工具和报告聚合器。VulnWhisperer 将从不同的漏洞扫描器中拉取所有报告，并为每个报告创建一个具有唯一文件名的文件，随后将这些数据用于同步到 Jira 并馈送到 Logstash。Jira 会利用扫描器提供的数据执行完整的闭环同步，而 Logstash 则对报告内的所有信息进行索引和标记（请参见 /resources/elk6/pipeline/ 下的 logstash 文件）。数据随后被传输到 ElasticSearch 进行索引，最终在 Kibana 中以可视化且可搜索的格式呈现，并带有预定义的仪表板...

securitybot

Securitybot Distributed alerting for the masses! Securitybot is an open-source implementation of a distributed alerting chat bot, as described in Ryan Huber's blog post. Distributed alerting improves the monitoring efficiency of your security team and can help you catch security incidents faster...

rekall

Rekall discontinuation This project is no longer maintained. In December 2011, a new branch within the Volatility project was created to explore how to make the code base more modular, improve performance, and increase usability. This branch was later forked to become Rekall. The modularity allow...

doork

doork description doork is a open-source passive vulnerability auditor tool that automates the process of searching on Google information about specific website based on dorks. doork can update his own database from ghdb and use it for find flaws without even contact the target endpoint. You can...

StalkPhish

StalkPhish project has been renamed StalkPhish-OSS You can find the new project page here: https://github.com/t4d/StalkPhish-OSS Online StalkPhish SaaS You can found our online StalkPhish SaaS application on https://www.Stalkphish.io and use the REST API available for free. Join us You can join u...

SocialFishMobile

SocialFish Mobile This app is an open-source project to remote control SocialFish, it does not work independently. How to build Prepare your Flutter environment Go to https://flutter.dev/docs/get-started/install After configured go ahead Clone this repository $ git clone...

vbscan

OWASP VBScan OWASP VBScan short for VBulletin Vulnerability Scanner is an opensource project in perl programming language to detect VBulletin CMS vulnerabilities and analysis them . Why OWASP VBScan ? If you want to do a penetration test on a vBulletin Forum, OWASP VBScan is Your best shot ever!...

pafish

Pafish Pafish 是一款测试工具，使用与恶意软件家族相同的手法检测虚拟机和恶意软件分析环境。 该项目免费且开源；所有反分析技术的代码均已公开。适用于 Windows（x86 32 位和 64 位）的 Pafish 可执行文件可从发布页面下载。 目标 本项目的目标是收集恶意软件样本中常见的用于逃避分析系统的技术。这样分析师可以研究这些技术，并测试分析环境是否正确实现。 构建 Pafish Pafish 使用 C 语言编写，可通过 Mingw-w64 和 make 构建。 wiki 页面“构建方法”包含详细说明。 作者 Alberto Ortega 以及众多出色的贡献者。 许可证...

pafish

Pafish Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do. The project is free and open source; the code of all the anti-analysis techniques is publicly available. Pafish executables for...

whitewidow

Preamble Firstly readthis if you want Whitewidow development to continue. Hello all you whitewidow fans out there I say that with good intentions I promise!. It's me Ekultek, I'm just here to give you a little inside on what's going on with the whitewidow development team and what's happening wit...

GOSINT

GOSINT - Open Source Threat Intelligence Gathering and Processing Framework The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise IOCs. GOSINT allows a security analyst to collect and standardize structured and unstructured threat...