CVE-2025-24799

Escáner SQLi CVE-2025-24799 Un escáner rápido de vulnerabilidades de inyección SQL creado con Python. Utiliza detección de SQLi basada en tiempo con multihilo y salida colorida, diseñado para probar vulnerabilidades CVE-2025-24799. Características Escanea URL individuales o listas desde archivos...

call_map

Call Map .. default-role:: code Acerca de Call Map es una herramienta para navegar por grafos de llamadas en Python, con planes de soportar otros lenguajes. A continuación se muestra una captura de pantalla después de ejecutar callmap -m toolz, y luego hacer clic en algunas funciones. .. figure::...

httpstat

httpstat httpstat visualizes curl1 statistics in a way of beauty and clarity. It is a single file🌟 Python script that has no dependency👏 and is compatible with Python 3🍻. Features Beautiful terminal output — timing breakdown of DNS, TCP, TLS, server processing, and content transfer Structured JSO...

httpstat

httpstat httpstat 以优雅清晰的方式可视化 curl1 的统计信息。 它是一个单文件🌟 Python 脚本，零依赖👏 ，兼容 Python 3🍻 。 特性 漂亮的终端输出 — 展示 DNS、TCP、TLS、服务器处理及内容传输的时间分解 结构化 JSON 输出 — 通过 --format json / jsonl 提供机器可读的输出，采用稳定的 v1 架构 SLO 阈值检查 — 使用 --slo total=500,connect=100，违反时退出码为 4 保存结果到文件 — --save path.json 用于多步骤工作流 NOCOLOR 支持 — 遵从 NOCOL...

ci-supplychain-guard

CI Supply Chain Guard A static analysis tool for detecting malicious dependencies in CI/CD pipelines before they're merged into your codebase. Author: Otsmane Ahmed Status: Research Prototype v1.0 Quick Start 1. Clone and install git clone https://github.com/Otsmane-Ahmed/ci-supplychain-guard.git...

proxychains-ng

ProxyChains-NG ver 4.17 README ProxyChains is a UNIX program, that hooks network-related libc functions in DYNAMICALLY LINKED programs via a preloaded DLL dlsym, LDPRELOAD and redirects the connections through SOCKS4a/5 or HTTP proxies. It supports TCP only no UDP/ICMP etc. The way it works is...

crypto-attacks

Introducción Implementaciones en Python de ataques y utilidades criptográficas. Requisitos SageMath con Python 3.9 PyCryptodome Puedes comprobar la versión de Python de SageMath con el siguiente comando: $ sage -python --version Python 3.9.0 Si la versión de Python de SageMath es anterior a la...

manul

Manul Manul 是一个覆盖率引导的并行模糊测试器，适用于 Windows、Linux 和 macOS（测试版）上的开源及黑盒二进制文件，完全用纯 Python 编写。 快速开始 pip3 install psutil git clone https://github.com/mxmssh/manul cd manul mkdir in mkdir out echo "AAAAAA" in/test python3 manul.py -i in -o out -n 4 "linux/test/testafl @@" 安装 Radamsa sudo apt-get install g...

manul

Manul Manul is a coverage-guided parallel fuzzer for open-source and black-box binaries on Windows, Linux and macOS beta written in pure Python. Quick Start pip3 install psutil git clone https://github.com/mxmssh/manul cd manul mkdir in mkdir out echo "AAAAAA" in/test python3 manul.py -i in -o ou...

MOSAIC

🎯 MOSAIC — v1.0.0-alpha Behavioral Intelligence Across Platforms A privacy-first, multi-platform framework for behavioral and sociodynamic analysis 📺 Demo 🧭 What is MOSAIC? MOSAIC is not a simple OSINT aggregator. It is a behavioral analysis framework designed to help researchers, analysts, and...

tartufo

!WARNING This project is not actively maintained anymore. tartufo searches through git repositories for secrets, digging deep into commit history and branches. This is effective at finding secrets accidentally committed. tartufo also can be used by git pre-commit scripts to screen changes for...

cve-2023-38831

CVE-2023-38831 WinRAR Exploit PoC This repository contains a Python proof-of-concept PoC script for exploiting CVE-2023-38831, a vulnerability in WinRAR versions Arguments: : Path to the decoy file e.g., document.pdf, image.jpg. : Path to the payload file to execute e.g., script.bat, malware.exe....

inteno-exploits

Pruebas de concepto y exploits para dispositivos IOPSYS Esta es una colección de scripts que abusan de diversas vulnerabilidades en dispositivos que ejecutan IOPSYS de Inteno. Más detalles sobre cada vulnerabilidad se pueden encontrar en mi blog. Estos scripts solo se han probado en Linux, pero...

vimana-framework

Overview Vimana is a modular security framework for auditing Python APIs and Web applications. The plugin-based architecture enables security professionals to assess, fuzz, and analyze Python projects through automated and manual techniques. Core Capabilities: Vulnerability detection and...

vimana-framework

概述 Vimana 是一个模块化安全框架，用于审计 Python API 和 Web 应用程序。其基于插件的架构使安全专业人员能够通过自动和手动技术评估、模糊测试和分析 Python 项目。 核心功能： 漏洞检测与利用 静态与动态分析 应用程序爬取与发现 持久化与后渗透分析 CI/CD 安全集成 研究与开发（R&D） 📋 文档 安装指南 - 设置说明和部署选项 用户指南 - 完整使用指南和命令参考 CI/CD 集成 - GitHub Actions、GitLab CI/CD、CircleCI、Jenkins 的流水线模板...

hal

欢迎使用 HAL！ HAL /hel/ 是一个全面的网表逆向工程与操作框架。 导航 1. 简介 2. 构建说明 3. 快速入门指南 4. 学术背景 简介 HAL 到底是什么？ 几乎所有现有的网表分析研究都基于所检查网表的图形化表示。 其核心在于，HAL 正好提供了这一点：一个将任意来源（例如 FPGA 或 ASIC）的网表解析为基于图形的网表表示，并提供必要的内置工具用于遍历和分析所包含的门和连线的框架。 我们的愿景是让 HAL 成为硬件逆向工程领域与 IDA 或 Ghidra 等工具地位相当的工具。 我们希望 HAL...

hal

Welcome to HAL! HAL /hel/ is a comprehensive netlist reverse engineering and manipulation framework. Navigation 1. Introduction 2. Build Instructions 3. Quickstart Guide 4. Academic Context Introduction What the hell is HAL? Virtually all available research on netlist analysis operates on a...

CVE-2020-28458

CVE-2020-28458 Affected versions of this package are vulnerable to Prototype Pollution. datatables v1.10.16-1.10.16 run python file and it will ask for url, enter url...

PythonAESObfuscate

PythonAESObfuscate Pythonic way to load shellcode. Builds an EXE for you too! Usage Place a payload.bin raw shellcode file in the same directory. Default Architecture is x86 run python obfuscate.py Default output is out.py Requirements Windows Python 2.7 Pyinstaller PyCrypto PyCryptodome didn't...

CVE-2023-22518

CVE-2023-22518 An Exploitation tool to exploit the confluence server that are vulnerable to CVE-2023-22518 Improper Authorization Vulnerability Installation: git clone https://github.com/sanjai-AK47/CVE-2023-22518 cd CVE-2023-22518 python3 exploit.py Usage: python3 exploit.py -h usage: exploit.py...