owtf

Offensive Web Testing Framework OWTF OWASP OWTF helps penetration testers stay efficient and aligned with security standards such as the OWASP Web Security Testing Guide, the OWASP Top 10, PTES, and NIST so that they have more time to: See the big picture and think outside the box. Efficiently...

gef

GEF pronounced ʤɛf - "Jeff" is a set of commands for x86/64, ARM, MIPS, PowerPC and SPARC to assist exploit developers and reverse-engineers when using old school GDB. It provides additional features to GDB using the Python API to assist during the process of dynamic analysis and exploit...

linkedin2username

linkedin2username OSINT Tool: Generate username lists from companies on LinkedIn. This is a pure web-scraper, no API key required. You use your valid LinkedIn username and password to login, it will create several lists of possible username formats for all employees of a company you point it at...

seeker

Available in Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Read more on thewhiteh4t's Blog .Seeker Hosts a fake website which asks for Location Permission and if...

CVE-2019-7609

CVE-2019-7609 CVE-2019-7609kibana RCE를 올바른 방식으로 익스플로잇하는 python2 스크립트 스냅샷 사용법 python2 CVE-2019-7609-kibana-rce.py -h usage: CVE-2019-7609-kibana-rce.py -h -u URL -host REMOTEHOST -port REMOTEPORT --shell optional arguments: -h, --help show this help message and exit -u URL such as:...

uptux

uptux Specialized privilege escalation checks for Linux systems. Implemented so far: Writable systemd paths, services, timers, and socket units Disassembles systemd unit files looking for: References to executables that are writable References to broken symlinks pointing to writeable directories...

Firebase-Extractor

Firebase-Extractor //모바일 OSINT// 이 도구는 python2로 작성되었으며, Bing 검색 결과를 모두 파싱하는 것이 목적입니다. 기본적으로 앱에서 firebaseio URL이 발견되면 사용자는 검색 결과를 수동으로 하나씩 확인하지 않고 이 도구를 사용하여 민감한 데이터를 검색할 수 있습니다. 이 도구는 주어진 Firebase URL을 Bing 검색 엔진의 검색어로 사용하여 검색 결과의 첫 4페이지를 스크래핑한 후, 최종적으로 모든 URL에서 민감한 키워드를 파싱합니다. 스크린샷 아래 모듈이 사용되었습니...

apkleaks

APKLeaks Scanning APK file for URIs, endpoints & secrets. Installation from Pypi from Source from Docker Usage Options Output Pattern Arguments for disassembler License Acknowledments Installation It's fairly simple to install APKLeaks : from PyPi $ pip3 install apkleaks from Source Clone...

A2SV--SSL-VUL-Scan

A2SV--SSL-VUL-Scan A2SV = SSL 취약점 자동 스캔, HeartBleed, CCS Injection, SSLv3 POODLE, FREAK... 등 지원 취약점 CVE-2007-1858 Anonymous Cipher CVE-2012-4929 CRIMESPDY CVE-2014-0160 CCS Injection CVE-2014-0224 HeartBleed CVE-2014-3566 SSLv3 POODLE CVE-2015-0204 FREAK Attack CVE-2015-4000 LOGJAM Attack...

kwetza

Introduction By Chris Le Roy @brompwnie [email protected] Kwetza is a tool that allows you to infect an existing Android application with a Meterpreter payload. What does it do? Kwetza infects an existing Android application with either custom or default payload templates to avoid detection ...

PortWitness

PortWitness v1.1 Python2로 작성됨 이 PortWitness 버전은 python2로 개발되었으며, os, subprocess, sys 등의 모듈이 사용되었습니다. 전체 코드는 소켓 프로그래밍 개념을 기반으로 합니다. 소켓을 사용하여 웹 애플리케이션과 연결을 설정하고 해당 애플리케이션이 살아 있는지 확인합니다. 이 새로운 버전의 PortWitness는 더 빠르고 정확합니다. 스크린샷 사용법 python2 이름.py url PortWitness v1.0 Bash로 작성됨 PortWitness는 포트 스캐닝을 사용...

fake-mailer

가짜 메일러 + 면책 조항 : Fake Mailer는 다른 이메일에서 익명으로 메일을 보내는 도구입니다. 이 과정은 최대 5분이 소요될 수 있습니다. 이 도구는 교육 목적으로만 제작되었습니다!! 저는 이 도구의 오용에 대해 책임을 지지 않습니다!! 설치 : apt update apt install git python2 -y git clone https://github.com/htr-tech/fake-mailer cd fake-mailer 실행 : python2 mailer.py 또는 ; 단일 명령어 사용 apt update &...

CentOS Linux 8.4 [TuxCare] Security Update: python2 / python2-debug / python2-devel / python2-libs / etc (CENTOS8.4:CLSA-2026:1787667020)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1787667020 advisory. - When using the configparser module to write configuration files containing multi-line text values with carriage return characters \r the...

CentOS Linux 8.4 [TuxCare] Security Update: python2 / python2-debug / python2-devel / python2-libs / etc (CENTOS8.4:CLSA-2026:1784798087)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1784798087 advisory. - The incremental HTML parser html.parser.HTMLParser allows for CPU denial-of-service through repeated unterminated markup declarations when...

CentOS Linux 8 [TuxCare] Security Update: python2 / python2-debug / python2-devel / python2-libs / etc (CENTOS-STREAM8:CLSA-2026:1788356018)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1788356018 advisory. - When using the configparser module to write configuration files containing multi-line text values with carriage return characters \r th...

Rocky Linux 8.6 [CIQ] Security Update: python2-wheel / python2-wheel-wheel Multiple Vulnerabilities (ciqsa-2026_0196)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260196 advisory. This advisory aggregates security fixes for the python-wheel SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2023-32681, CVE-2022-45061,...

CentOS Linux 8.4 [TuxCare] Security Update: python2 / python2-debug / python2-devel / python2-libs / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1778145319)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1778145319 advisory. - The webbrowser.open API would accept leading dashes in the URL which could be handled as command line options for certain web...

Rocky Linux 8.6 [CIQ] Security Update: python2-Cython / python2-Cython-debuginfo Multiple Vulnerabilities (ciqsa-2026_0163)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260163 advisory. This advisory aggregates security fixes for the Cython SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2023-32681, CVE-2022-45061,...

CentOS Linux 8 [TuxCare] Security Update: python2 / python2-debug / python2-devel / python2-libs / etc (CENTOS-STREAM8:CLSA-2026:1784798441)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1784798441 advisory. - The incremental HTML parser html.parser.HTMLParser allows for CPU denial-of-service through repeated unterminated markup declarations...

CentOS Linux 8 [TuxCare] Security Update: python2 / python2-debug / python2-devel / python2-libs / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1781179629)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1781179629 advisory. - The tarfile module would still apply normalization of AREGTYPE \x00 blocks to DIRTYPE, even while processing a multi-block memb...