opencve

什么是 OpenCVE？ OpenCVE 是一个漏洞情报平台，帮助您高效监控和管理 CVE。 它从多个来源（MITRE、NVD、RedHat、Vulnrichment 等）聚合漏洞，并允许您按供应商、产品、严重性等进行筛选、跟踪和组织。 您可以订阅产品、接收警报、分析变更，并与团队协作——全部通过一个简单而强大的界面完成。将成员分配到 CVE 以跟踪进度（例如，分析中、风险已接受），并保持团队一致。 主要功能 📚 探索、筛选和整理 按供应商、产品、CVSS、KEV、EPSS、CWE、发布日期等筛选 CVE。 订阅供应商和产品，并通过项目和组织来组织您的监控。...

socid-extractor

socidextractor Turn any public profile page into a structured account record — usernames, display names, bios, avatars, locations, joined-at dates, follower counts, external links, and the stable internal identifiers that uniquely pin an account across renames, redesigns, and deletions...

socid-extractor

socidextractor 将任意公开个人资料页面转换为结构化的账户记录——用户名、显示名称、个人简介、头像、位置、注册日期、粉丝数、外部链接，以及稳定内部标识符 ，这些标识符能在账户改名、改版和删除后依然唯一锁定该账户。 socidextractor 解析来自 130+ 平台的 HTML 页面和 API 响应，返回一个扁平且机器可读的账户字段字典。无需 API 密钥，无需无头浏览器——只需对响应文本进行一次函数调用。 为什么它有用 稳定的跨服务 ID。 获取 GAIA ID Google、Facebook UID、Yandex Public ID、Instagram pk...

CVE-2019-0708-poc

CVE-2019-0708-poc CVE-2019-0708 Remote Code Execution Vulnerability Batch Detection 3389hosts is a list of IP addresses to be detected, one per line pool = ThreadPool10 is a custom scanning thread count Note Windows python3 environment Usage 1. Edit 3389hosts, write the IP addresses to be detecte...

ZEROScan

ZEROScan Introduction ZEROScan is a multi-threaded vulnerability detection framework. Through it, you can easily obtain or develop vulnerability detection plugins to perform penetration testing on targets. The interface and usage are inspired by the metasploit-framework, making it easy to get...

RedRoot

🔴 RedRoot Lite – Mark X Offensive Security Framework Lite Edition | CLI-Based “Less power. Same discipline.” RedRoot Lite is the restricted edition of RedRoot , designed to provide core red teaming functionality while keeping advanced modules locked. It uses the same architecture, same CLI style,...

Weblogic

weblogic CVE-2019-2725 CVE-2019-2729 POC Execute command and get output usage: Single target python3 weblogicgetwebshell.py http://url Batch targets, put batch URLs into urllist.txt python3 weblogicgetwebshell.py all...

exrex

EXREX 正则表达式的非正则方法。 Exrex 是一个命令行工具和 Python 模块，能够生成给定正则表达式的所有或随机匹配字符串，以及更多功能。 它纯 Python 实现，无外部依赖。 有些正则表达式具有无限匹配字符串（例如：a-z+），在这种情况下，exrex 会限制无限部分的最大长度。 Exrex 使用生成器，因此内存使用量不依赖于匹配字符串的数量。 功能 生成所有匹配字符串 生成随机匹配字符串 计算匹配字符串的数量 简化正则表达式 安装 要安装 exrex，只需： $ pip install exrex 或 $ easyinstall exrex 用法 作为 Python 模...

exrex

EXREX Irregular methods for regular expressions. Exrex is a command line tool and python module that generates all - or random - matching strings to a given regular expression and more. It's pure python, without external dependencies. There are regular expressions with infinite matching strings...

CVE-2020-0796

CVE-2020-0796 Remote overflow POC POC to check for CVE-2020-0796 / "SMBGhost" Usage Make sure Python is installed, then run cve-2020-0796.py...

Pinkerton

🕵️ Pinkerton Investigating JavaScript files since 1850 Python project to crawl for JavaScript files and search for secrets like API keys, authorization tokens, hardcoded passwords, or related data. ⚡ Getting started A quick guide on how to install and use Pinkerton. 1. Clone the repository with:...

CORStest

CORStest A simple CORS misconfiguration scanner Based on the research ofJames Kettle CORStest is a quick & dirty Python 3 tool to find Cross-Origin Resource Sharing CORS misconfigurations. It takes a text file as input which may contain a list of domain names or URLs. Currently, the following...

BeeLogger

BeeLogger Copyright 2017 BeeLogger Written by: Alisson Moretto - 4w4k3 Twitter: @4w4k3Official TOOL DESIGNED TO GOOD PURPOSES, PENTESTS, DON'T BE A CRIMINAL ! Only download it here, do not trust in other places. NOTE: BeeLogger just have official support for latin languages in this moment. HOW TO...

instaloader

.. image:: https://raw.githubusercontent.com/instaloader/instaloader/master/docs/logoheading.png .. badges-start |pypi| |pyversion| |license| |aur| |contributors| |downloads| .. |pypi| image:: https://img.shields.io/pypi/v/instaloader.svg :alt: Instaloader PyPI Project Page :target:...

python-decompile3

|buildstatus| |Pypi Installs| |Latest Version| |Supported Python Versions| |packagestatus| .. contents:: decompyle3 一个原生的 Python 跨版本反编译器和片段反编译器。 对 uncompyle6 的重构。 我在 BlackHat Asia 2024 上就此发表了演讲。 简介 decompyle3 将 Python 字节码翻译回等效的 Python 源代码。它接受自 Python 3.7 以来的字节码。 如需反编译更老版本的 Python 字节码，请参阅...

python-decompile3

|buildstatus| |Pypi Installs| |Latest Version| |Supported Python Versions| |packagestatus| .. contents:: decompyle3 A native Python cross-version decompiler and fragment decompiler. A reworking of uncompyle6. I gave a talk on this at BlackHat Asia 2024 . Introduction decompyle3 translates Python...

LangAlpha

The harness for agentic trading. Open-source AI agents that research the market, build the thesis, and trade your own brokerage account within the permissions you set. Try LangAlpha ↗ · Get started · Agentic trading · Harness design · Full-stack architecture · Security English · 简体中文 · 日本語 Why...

cai

Cybersecurity AI CAI Professional Edition with unlimited alias1 tokens | 📊 View Benchmarks | 🚀 Learn More 🔓 Community Edition Research & Learning · Perfect for Researchers & Students pip install cai-framework ✅ Free for research 🤖 300+ AI models 🌍 Community driven 📚 Open source 🔧 Extensible...

protobuf-inspector

protobuf-inspector Simple program that can parse Google Protobuf encoded blobs version 2 or 3 without knowing their accompanying definition. It will print a nice, colored representation of their contents. Example: As you can see, the field names are obviously lost, together with some high-level...

DVFaaS-Damn-Vulnerable-Functions-as-a-Service

DVFaaS - Funciones Damn Vulnerables como Servicio Un proyecto DHIY Despliega y Hackéalo Tú Mismo en el que puedes desplegar y ejecutar un montón de funciones terriblemente inseguras en AWS Lambda Objetivo y audiencias En we45 hacemos mucha formación sobre seguridad en Serverless, Cloud y la...