Halcyon-IDE

Halcyon IDE Description Halcyon IDE is the first IDE exclusively developed for Nmap Script developers. This project initially started as a free time coffee shop project. The original idea was to provide an easier development interface to information security community working on Nmap script...

webvulscan

WebVulScan Synopsis WebVulScan is a web application vulnerability scanner. It is a web application itself written in PHP and can be used to test remote, or local, web applications for security vulnerabilities. As a scan is running, details of the scan are dynamically updated to the user. These...

flashlight

Automated Information Gathering Tool for Penetration Testers Videos : https://www.youtube.com/watch?v=EUMKffaAxzs&list=PL1BVM6VWlmWZOv9Hv8TV2v-kAlUmvA5g7&index=4 https://www.youtube.com/watch?v=qCgW-SfYl1c&list=PL1BVM6VWlmWZOv9Hv8TV2v-kAlUmvA5g7&index=5...

demiguise

Demiguise - HTA encryption tool Released as open source by NCC Group Plc - http://www.nccgroup.trust/ Developed by Richard Warren, richard dot warren at nccgroup dot trust http://www.github.com/nccgroup/demiguise Released under AGPL, see LICENSE for more information What does it do? The aim of th...

airgeddon

airgeddon This is a multi-use bash script for Linux systems to audit wireless networks. All the needed info about how to "install | use | enjoy" airgeddon is present at GitHub's Wiki. I. Content & Features Home Features Screenshots Wallpapers II. Requirements Requirements Compatibility Cards and...

slowloris

slowloris.py - Simple slowloris in Python What is Slowloris? Slowloris is basically an HTTP Denial of Service attack that affects threaded servers. It works like this: 1. We start making lots of HTTP requests. 2. We send headers periodically every 15 seconds to keep the connections open. 3. We...

sobelow

Sobelow Sobelow is a security-focused static analysis tool for Elixir & the Phoenix framework. For security researchers, it is a useful tool for getting a quick view of points-of-interest. For project maintainers, it can be used to prevent the introduction of a number of common vulnerabilities...

reaver-wps-fork-t6x

Overview Reaver implements a brute force attack against Wifi Protected Setup WPS registrar PINs in order to recover WPA/WPA2 passphrases , as described in Brute forcing Wi-Fi Protected Setup When poor design meets poor implementation. by Stefan Viehböck. Reaver has been designed to be a robust an...

peda

peda PEDA - Python Exploit Development Assistance for GDB Key Features: Enhance the display of gdb: colorize and display disassembly codes, registers, memory information during debugging. Add commands to support debugging and exploit development for a full list of commands use peda help: aslr --...

tcpcopy

TCPCopy - A TCP Stream Replay Tool TCPCopy is a TCP stream replay tool for realistic testing of Internet server applications. Getting to Know TCPCopy An Overview of TCPCopy for Beginners A General Overview of TCPCopy Architecture TCPCopy Testing Use Cases TCPCopy Pre-Warming Examples Description...

nuclei-wordfence-cve

Nuclei + Wordfence = ♥ 77,636 Nuclei Templates for WordPress Security Scanning 🥳 Level up your WordPress security game! This project's got a treasure trove of fresh Nuclei templates for WordPress. Scan for weaknesses in Core, plugins, and themes – all based on the latest intel from Wordfence.com...

httpstat

httpstat httpstat visualizes curl1 statistics in a way of beauty and clarity. It is a single file🌟 Python script that has no dependency👏 and is compatible with Python 3🍻. Features Beautiful terminal output — timing breakdown of DNS, TCP, TLS, server processing, and content transfer Structured JSO...

artifacts-kit

. . / || |/ / | | | ||/ | \ \ \ \ \ / \ | |/ / \ / | | /| | | || | / \ | | | | | | ||| / / / / 恶意内存痕迹生成工具包 v1.0 | Forrest Orr | 2020 必需 --alloc-type dll-map-hollow|dll-load-hollow|txf-dll-map-hollow|private|mapped 可选 --payload-file --payload-type PE|shellcode --exec-method...

androguard

Androguard Do you think your phone has been pwned ? please check IsMyPhonePwned New tool: Goauld Dynamic injection tool for Linux/Android See the new version of Androguard: https://github.com/androguard/androguard/tree/ng Installation Quick installation: root@kitploit: pip install androguard...

-CVE-2023-43340-Evolution-Reflected-XSS---Installation-Admin-Options

Evolution CMS 反射型 XSS v3.2.3 作者: Sergio 説明: evolution v.3.2.3 のインストールプロセス Admin options における複数の反射型クロスサイトスクリプティング XSS 脆弱性により、ローカル攻撃者が cmsadmin、cmsadminemail、cmspassword、cmspasswordconfim パラメータに注入された細工されたペイロードを介して任意の Web スクリプトを実行できるようになります。 攻撃ベクトル: データベースインストールの Admin options プロセスにおける...

CVE-2026-3854-lab

Flagship 实验室 001：从 Git 推送选项到 RCE 一个本地学习实验室和研究实验室，灵感来自 CVE-2026-3854 背后公开记录的漏洞概念。这两种体验都会对 ForgeDock（一个虚构的 Git 服务器）执行真实的经过身份验证的 Git 推送；即研究实验室。 !CAUTION 本项目故意包含漏洞。仅限本地运行。请勿将其端口暴露到公共或共享网络。切勿在生产环境中使用。 !NOTE 本仓库以只读教育参考资料的形式发布。不接受公开的 issue、拉取请求、功能请求或支持请求。请按照SECURITY.md 中的说明私下报告意外的安全边界缺陷。 选择体验 学习实验室...

Urgent11-Suricata-LUA-scripts

Urgent11-Suricata-LUA-scripts CVE-2019-12255、CVE-2019-12256、CVE-2019-12258、およびCVE-2019-12260を検出するためのSuricata LUAスクリプト CVE-2019-12255 このスクリプトはCVE-2019-12255をチェックします。チェックされるパケットにはPSH、ACK、URGフラグが設定され、ペイロードサイズが1500バイトを超えている必要があります。次に、緊急ポインタの値が0に設定されているかどうかを確認します。これにより、影響を受けるデバイスで整数アンダーフローが発生します。...

http-request-smuggling

HTTP Request Smuggling Detection Tool HTTP request smuggling is a high severity vulnerability which is a technique where an attacker smuggles an ambiguous HTTP request to bypass security controls and gain unauthorized access to performs malicious activities, the vulnerability was discovered back ...

bettercap

Join the project community on our server!...

CVE-2024-22145

CVE-2024-22145 InstaWP Connect = 0.1.0.8 - Autorización faltante para la actualización arbitraria de opciones Suscriptor+ Descripción: El complemento InstaWP Connect – 1-click WP Staging & Migration para WordPress es vulnerable a la modificación no autorizada de datos debido a una falta de...