88 matches found
john
John the Ripper This is the community-enhanced, "jumbo" version of John the Ripper. It has a lot of code, documentation, and data contributed by jumbo developers and the user community. It is easy for new code to be added to jumbo, and the quality requirements are low, although lately we've start...
ShonyDanza
ShonyDanza Настраиваемый, простой в навигации инструмент для исследований, пентеста и защиты с использованием возможностей Shodan. С помощью ShonyDanza вы можете: Получать IP-адреса на основе критериев поиска Автоматически исключать ханипоты из результатов на основе заданных пороговых значений...
uberscan
uberscan Программа безопасности для пен-тестирования серверов, маршрутизаторов и IoT-устройств кстати, мой биткоин-адрес: 3A7yuqBcPAcVEM59bNAVQdTCmkxRb5JRgE Вот альтернатива, тоже для BTC, так как я получал сообщения, что некоторые биткоин-кошельки не поддерживают определённые адреса:...
getaltname
GSAN - Get Subject Alternative Names GSAN is a tool that can extract Subject Alternative Names SAN found in SSL Certificates directly from https servers which can provide you with DNS names subdomains or virtual servers. It doesn't rely on Certificate Transparency logs, it connects directly to th...
github-dorks
Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...
OSCP-Exam-Report-Template-Markdown
Template per il Report d'Esame di Offensive Security in Markdown Ho creato un Template per il Report d'Esame di Offensive Security in Markdown in modo che LaTeX, Microsoft Office Word, LibreOffice Writer non siano più necessari durante l'esame Offensive Security OSCP, OSWE, OSEE, OSWP, OSEP, OSED...
metasploitable3
Metasploitable3 Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities. It is intended to be used as a target for testing exploits with metasploit. Metasploitable3 is released under a BSD-style license. See COPYING for more details. Quick-start To...
Binary Exploits
Exploit binari dell'Exploit Database Gli exploit binari si trovano nella directory /bin-sploits/. Questo è un repository ufficiale di The Exploit Database, un progetto sponsorizzato da Offensive Security. I nostri repository sono: Exploits & Shellcodes: https://gitlab.com/exploit-database/exploit...
faction
OWASP - FACTION Framework di generazione report e collaborazione per PenTesting Faction è ora un progetto OWASP! Puoi trovare maggiori informazioniqui Sponsor Sponsor Premium...
weevely3
Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...
redsnarf
root@kitploit: . \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf is a pen-testing / red-teaming tool by Ed Williams for retrieving hashes and credentials from Windows workstations, servers and...
celerystalk
celerystalk celerystalk ti aiuta ad automatizzare il processo di scansione/enumerazione della rete con job asincroni detti task mantenendo il pieno controllo su quali strumenti vuoi eseguire. Demo interattiva: Modalità Bug Bounty HackerOne Demo interattiva: Modalità Vulnerability Assessment /...
Dark-Moon
The Open-Source AI-...
Autonomous-AI-PenTest-Agent
Auto...
CVE-2026-40606
mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmproxy 12.2.1 and below, the builtin LDAP proxy authentication does not correctly sanitize the username when querying the LDAP...
CVE-2026-40606
mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmproxy 12.2.1 and below, the builtin LDAP proxy authentication does not correctly sanitize the username when querying the LDAP...
CVE-2026-6179
CVE-2026-6179 concerns a stored cross-site scripting (XSS) vulnerability in NightWolf Penetration Testing Platform. The affected entry states that an attacker can trigger and run malicious script in a user’s browser due to a stored XSS flaw, enabling impact on user-side confidentiality and integr...
Comparing AI Agents to Cybersecurity Professionals in Real-World Penetration Testing
We present the first comprehensive evaluation of AI agents against human cybersecurity professionals in a live enterprise environment. We evaluate ten cybersecurity professionals alongside six existing AI agents and ARTEMIS, our new agent scaffold, on a large university network consisting of 8,00...
