CVE-2026-21016-Malicious-PyPI-Package-Install-Hook-setup.py-Execution-

CVE-2026-21016 – 악성 PyPI 패키지 설치 후크 setup.py 실행 프로그램 코드 Python setup.py - Malicious package that executes during install from setuptools import setup import os This runs on pip install os.system'id /tmp/pwnedbypackage' setup name='harmless-pkg', version='1.0', packages=, CVE-2026-21016 – 악성 PyPI 패...

hostintel

hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...

Pip-Intel

🌐PIP-INTEL - OSINT 및 사이버 인텔리전스 도구🌐 테스트됨: Kali-Linux Pip-Intel은 OSINT오픈 소스 인텔리전스 및 사이버 인텔리전스 수집 활동을 위해 설계된 강력한 도구입니다. 다양한 오픈 소스 도구를 하나의 사용자 친화적인 인터페이스로 통합하여 연구자와 사이버 보안 전문가를 위한 데이터 수집 및 분석 프로세스를 간소화합니다. Pip-Intel은 Python으로 작성된 pip 패키지를 활용하여 다양한 데이터 포인트에서 정보를 수집합니다. 이 도구는 이메일 주소, 전화번호, IP 주소 및 소셜 미...

EUVD-2026-89459

JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs...

pymultitor

PyMultiTor Python Multi Threaded Tor Proxy, Did you ever want to be at two different places at the same time? When I asked myself this question, I actually started developing this solution in my mind. While performing penetration tests there are often problems caused by security devices that bloc...

fibratus

Fibratus Security sensor for realtime threat detection and protection Get Started » Docs • Rules • Filaments • Download • Discussions Fibratus detects and eradicates advanced attacker tradecraft, malware, and emerging threats by scrutinizing and asserting a wide spectrum of system events against ...

SuricataLog

SuricataLog Suricata 사용법을 배우기 시작했을 때, eve.json 파일을 검사할 도구가 필요하다는 것을 금방 깨달았습니다. 대부분의 튜토리얼과 문서에서는 다음과 같은 작업을 수행하기 위해 스택을 설치할 것을 권장했습니다: 1. 로그를 중앙 위치에 저장 2. 이벤트, 특히 알림을 정규화하고 보강 3. 프런트엔드를 사용하여 데이터 탐색 매우 유용하지만, 이벤트를 빠르게 확인만 하면 되는 경우는 어떨까요? 조만간 여러분은 다음과 같은 작업에 지겨워 죽을 것입니다: cat eve.json | jq -r -c...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...

lk_scraper

LinkedIn Scraper Scrapes Any LinkedIn Data Installation $ pip install git+git://github.com/jqueguiner/lkscraper Setup Using Docker compose $ docker-compose up -d $ docker-compose run lkscraper python3 Using Docker only for Selenium server First, you need to run a Selenium server $ docker run -d -...

instarecon

InstaRecon Automated basic digital reconnaissance. Great for getting an initial footprint of your targets and discovering additional subdomains. InstaRecon will do: DNS lookups A, PTR, MX, NS DNS lookups recursively on all hosts discovered Whois on domain and IP lookups Google dorks looking for...

autovpn

!CAUTION This repository is no longer being maintained. No further updates, bug fixes, or support will be provided. Please use the new version https://github.com/ttlequals0/autowire Overview Script that allows the easy creation of OpenVPN endpoints in any AWS region. To create a VPN endpoint is...

pip-audit

pip-audit pip-audit는 알려진 취약점이 있는 패키지를 검색하기 위해 Python 환경을 스캔하는 도구입니다. 이 도구는 취약점 보고서 소스로 PyPI JSON API를 통해 Python Packaging Advisory Databasehttps://github.com/pypa/advisory-database를 사용합니다. 이 프로젝트는 Google의 지원을 받아 Trail of Bits가 부분적으로 유지 관리합니다. 이는 공식 Google 또는 Trail of Bits 제품이 아닙니다. 목차 기능 설치 서드파티...

changeme

changeme A default credential scanner. About changeme picks up where commercial scanners leave off. It focuses on detecting default and backdoor credentials and not necessarily common credentials. It's default mode is to scan HTTP default credentials, but has support for other credentials. change...

GiveMeSecrets

GiveMeSecrets 정규 표현식을 사용하여 지정된 리포지토리GitHub, pip 또는 npm에서 민감한 정보를 추출합니다. 종속성 이 스크립트를 실행하려면 Python 3.6 이상이 설치되어 있어야 합니다. 또한 시스템에 git, pip 및 npm이 설치되어 있어야 합니다. 사용 방법 사용법은 매우 간단합니다. 스크립트를 실행하고 옵션1 - GitHub; 2 - pip; 3 - npm과 리포지토리를 인자로 전달하면 됩니다. 예: python3 givemesecrets.py --option 1 --repo...

bbot

BEE·bot is a multipurpose scanner inspired by Spiderfoot, built to automate your Recon , Bug Bounties , and ASM! https://github.com/blacklanternsecurity/bbot/assets/20261699/e539e89b-92ea-46fa-b893-9cde94eebf81 A BBOT scan in real-time - visualization withVivaGraphJS Installation stable version...

winevt_logs_analysis

Winevt logs analysis Remote connections Simple script for the purpose of finding remote connections to Windows machine and ideally some public IPs. It checks for some EventIDs regarding remote logins and sessions. You should pip install -r requirements.txt so the script can work and parse some of...

aiodnsbrute

Async DNS Brute A Python 3.5+ tool that uses asyncio to brute force domain names asynchronously. Speed It's fast. Benchmarks on small VPS hosts put around 100k DNS resoultions at 1.5-2mins. An amazon M3 box was used to make 1 mil requests in just over 3 minutes. Your mileage may vary. It's probab...

trufflehog

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

btlejack

BtleJack: a new Bluetooth Low Energy swiss-army knife Btlejack provides everything you need to sniff, jam and hijack Bluetooth Low Energy devices. It relies on one or more BBC Micro:Bit . devices running a dedicated firmware. You may also want to use anAdafruit's Bluefruit LE sniffer or a nRF5182...

roca

ROCA detection tool This tool is related to ACM CCS 2017 conference paper 124 Return of the Coppersmith’s Attack: Practical Factorization of Widely Used RSA Moduli. It enables you to test public RSA keys for a presence of the described vulnerability. Update 4.11.2017 : Python 2.7, 3.4+ supported...