faraday_bugbounty

faradaybugbounty Espaces de travail Faraday pour les Bug Bounties Notes de version Documentation...

ravage

Ravage Ravage는 귀하가 소유하거나 명시적으로 테스트 권한을 부여받은 실행 중인 웹 애플리케이션을 평가하기 위한 증거 우선evidence-first CLI입니다. 결정론적 정찰 및 검증과 선택적 모델 기반 공격 루프를 결합하면서, 범위, 인증, 트래픽 회계, 증거를 코드 소유 경계 내에 유지합니다. Ravage는 1.0 이전의 연구용 알파 버전입니다. 일회용 환경과 서면 규칙rule of engagement을 사용하세요. 보안 테스트는 애플리케이션 상태를 변경할 수 있습니다. Ravage는 발견 사항을 수정하거나 패치...

falco

Falco Falco — это cloud native инструмент безопасности для среды выполнения на операционных системах Linux. Он предназначен для обнаружения аномального поведения и потенциальных угроз безопасности в реальном времени и оповещения о них. По своей сути Falco — это агент мониторинга и обнаружения на...

sigma-cli

Интерфейс командной строки Sigma Это интерфейс командной строки Sigma, использующий библиотеку pySigma для управления, перечисления и конвертации правил Sigma в языки запросов. Начало работы Установка Самый простой способ установить Sigma CLI — через pipx или pip. Для этого выполните одну из...

tsunami-security-scanner

Tsunami Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence. To learn more about Tsunami, visit our documentation. Tsunami relies heavily on its plugin system to provide basic scanning capabilities...

opensoho

Предупреждение: это ранний релиз, пожалуйста, прочитайте заметки к релизу ВСЕХ выпусков до настоящего момента OpenSOHO Документация OpenSOHO создан для управления небольшим количеством сетевых устройств на базе OpenWRT. Отсюда название SOHO от Small Office Home Office SOHO Networks. От 2 до 20...

wifite2

Wifite This repo is a complete re-write of wifite, a Python script for auditing wireless networks. Wifite runs existing wireless-auditing tools for you. Stop memorizing command arguments & switches! Wifite is designed to use all known methods for retrieving the password of a wireless access point...

sh4d0wup

sh4d0wup % docker run -it --rm ghcr.io/kpcyrd/sh4d0wup:edge -h Usage: sh4d0wup OPTIONS Commands: bait Start a malicious update server front Bind a http/https server but forward everything unmodified infect High level tampering, inject additional commands into a package tamper Low level tampering,...

bbrecon

This project is no longer maintained and I took the crawling infrastructure offline. The audience was not big enough to justify maintaining it. Bug Bounty Recon bbrecon is a free Recon-as-a-Service for bug bounty hunters and security researchers. The API aims to provide a continuously up-to-date...

OpenSSL_1_1_1_g

OpenSSL 1.1.1g 21 Apr 2020 Авторские права c 1998-2020 The OpenSSL Project Авторские права c 1995-1998 Eric A. Young, Tim J. Hudson Все права защищены. ОПИСАНИЕ Проект OpenSSL — это совместная работа по созданию надёжного, готового к коммерческому использованию, полнофункционального инструментари...

drozer

drozer drozer est un framework de test de sécurité pour Android. drozer vous permet de rechercher des vulnérabilités de sécurité dans les applications et les appareils en jouant le rôle d'une application et en interagissant avec l'environnement d'exécution Android, les points de terminaison IPC...

dalfox

Dalfox is a powerful open-source tool that focuses on automation, making it ideal for quickly scanning for XSS flaws and analyzing parameters. Its advanced testing engine and niche features are designed to streamline the process of detecting and verifying vulnerabilities. Key features Subcommands...

faraday-client

Ceci est déprécié, veuillez utiliser Faraday-Cli à la place !!! v1.1.0 était une version de transition, ne mettant à jour que l'accès à Faraday via l'API v3 v2 sera également dépréciée. ================== Client GTK Faraday .. image:: https://img.shields.io/pypi/v/faradayclient.svg :target:...

nzyme

Nzyme En savoir plus sur https://www.nzyme.org/. La version 2.0.0 de Nzyme est actuellement en développement et des versions alpha sont disponibles. Contribuer Il existe de nombreuses façons de contribuer et toute interaction avec la communauté est absolument la bienvenue : Ouvrez un ticket pour...

kuri

Kuri 🌰 Installationsh curl -fsSL https://kuri.trilok.ai/download | sh macOS arm64/x8664 et Linux x8664/arm64. Binaire unique, aucune dépendance d'exécution. Téléchargements directs : macOS arm64 · macOS x8664 · Linux x8664 · Linux arm64 --- Automatisation de navigateur et exploration web pour...

botb

Break out the Box BOtB BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies. What does it do? BOtB is a CLI tool which allows you to: Exploit common container vulnerabilities Perform commo...

zap-hud

ZAP Heads Up Display The HUD is no longer under active development Unfortunately the HUD is no longer under active development due to the fact no one is focusing on it. The HUD is a unique and innovative interface that we know some people love. But it also needs a non trivial amount of maintenanc...

zap-hud

ZAP Affichage Tête Haute Le HUD n'est plus en développement actif Malheureusement, le HUD n'est plus en développement actif car personne ne s'y consacre. Le HUD est une interface unique et innovante que certaines personnes adorent, nous le savons. Mais il nécessite également une maintenance non...

CVE-2019-10685

CVE-2019-10685 L'entrée fournie par l'utilisateur contenant du JavaScript est renvoyée dans du code JavaScript dans une réponse HTML via le paramètre "TextField". Publication Exploit-DB sur https://www.exploit-db.com/exploits/46804 Publication PacketStorm sur...

cve-2022-42889

cve-2022-42889 cve-2022-42889 Text4Shell affecte Apache Commons Text versions 1.5 à 1.9. Il a été corrigé à partir de la version Commons Text 1.10. références : https://securitylab.github.com/advisories/GHSL-2022-018ApacheCommonsText/ https://github.com/karthikuj/cve-2022-42889-text4shell-docker...