crawpy

Crawpy Yet another content discovery tool written in python. What makes this tool different than others: Sends asynchronous HTTP requests, fast Calibration mode, applies filters on its own Recursive scan mode with additional flags Report generation, you can later go and check your results Multipl...

lazyrecon

/ \ / / \ /// ///Y / \ /| | | | / | / / \ / | /|| \ | / | / || |\ || | | /| |-||/ / / / | /| / | | /|| | || // |/// /\ | // | Uso ./lazyrecon.sh target.com Acerca de Este script está diseñado para automatizar tu proceso de reconocimiento de forma organizada, realizando lo siguiente: Crear una...

reverie

reverie Automated Pentest Tools Designed For Parrot Linux this tool will make your basic pentesting task like Information Gathering, Security Auditing, And Reporting so this tool will do every task fully automatic. Usage Guide Download / Clone git clone https://github.com/baguswiratmaadi/reverie ...

mesh-kridik

mesh-kridik 增强您的 Kubernetes 服务网格安全性！！ mesh-kridik 是一个开源安全检查器，对运行 Istio 服务网格的 Kubernetes 集群执行各种安全检查，并输出安全报告。 安全检查测试完整实现了 istio 安全最佳实践。 在运行 Istio 服务网格的 Kubernetes 集群上执行安全检查，并利用 OPA（Open Policy Agent）强制执行安全规则，输出审计报告包括： 安全问题根因以及建议的修复措施。 要求 安装 快速开始 Istio 安全检查 用户插件使用 支持的规范 贡献 要求 Go 1.16+ jq istio 安装...

mesh-kridik

mesh-kridik Enhance your Kubernetes service mesh security !! mesh-kridik is an open-source security checker that performs various security checks on a Kubernetes cluster with istio service mesh and outputs a security report The security checks tests are the full implementation of istio security...

CVE-2023-33410

CVE-2023-33410 Minical 1.0.0 es vulnerable a la inyección CSV. Proveedor: https://github.com/minical/minical Aplicación de demostración: https://demo.minical.io/ PoC Paso 1: Navegue al módulo de Contabilidad y haga clic en Crear nuevo cliente. Paso 2: Introduzca el payload en el campo Nombre y ha...

engine

Droidefense Engine Advance Android Malware Analysis Framework Latest release Download What Droidefense is Droidefense originally named atom: a nalysis t hrough o bservation m achine is the codename for android apps/malware analysis/reversing tool. It was built focused on security issues and trick...

threat-research-and-intelligence

Blogs completos de inteligencia | Resultados de blogs | Resultados de informes | Charlas públicas ℹ️ :: Descripción general Este repositorio tiene como objetivo la difusión de IOCs, reglas YARA y código fuente de los informes de inteligencia sobre amenazas publicados por el equipo de BlackBerry...

autoresponder

AutoResponder Carbon Black Response IR tool for hunting threats in an environment What is it? AutoResponder is a tool aimed to help people to carry out their Incident Response tasks WITH the help of Carbon Black Response's awesome capabilities and WITHOUT much bothering IT/System/Network Teams Wh...

AJ-Report < 1.4.1 - Remote Code Execution

AJ-Report before version 1.4.1 is affected by an authentication bypass vulnerability. A remote and unauthenticated attacker can append ";swagger-ui" to HTTP requests to bypass authentication and execute arbitrary Java code on the victim server through script engine injection in the validation rul...

StickyExim

StickyExim Un HoneyPot de Correo Electrónico Características Fácil de implementar. Los scripts de instalación hacen todo el trabajo. Los informes de abuso se crean automáticamente y se envían al propietario de la IP atacante. Los informes de abuso se almacenan con un hash en el momento de la...

cve-2015-2315-report

cve-2015-2315-report Este proyecto contiene un informe y códigos para simular la situación de CVE-2015-2315...

ADRecon

ADRecon: Active Directory Recon This repo contains updates to the original concept and code by Prashant Mahajan @prashant3535 while working at Sense of Security. ADRecon is a tool which extracts and combines various artefacts as highlighted below out of an AD environment. The information can be...

bedaisy-bypass

bedaisy-bypass Descripción bedaisy-bypass es un controlador de kernel diseñado para evadir los informes enviados desde BEDaisy.sys a BEService.exe. Para los usuarios que no utilizan UEFI, el proyecto emplea Infinity Hook. El controlador intercepta los datos comunicados a través de la tubería con...

-cve-2010-3904-report

Este repositorio no tiene un README...

sunsetscan

SunsetScan Network security auditing for humans — powered by nmap, built for everyone. Website: sunsetscan.com SunsetScan is a local-network security auditing tool for home network owners and IT staff who want the depth of nmap without learning nmap syntax. Point it at your network and it finds...

loot-me

linux-loot Generación de informes post-explotación. Recopila archivos / comandos y los coloca en formato markdown listo para informes y ayuda a encontrar información sensible...

csp-log4j

csp-log4j Encuentra URLs de informes CSP y comprueba si son vulnerables a log4j Instalación root@kitploit: go install github.com/randomrobbiebf/csp-log4j/ Ejecución root@kitploit: csp-log4j -input file.txt -collab something.oastify.com...

VulnWhisperer

从您的漏洞扫描中创建可操作的数据 VulnWhisperer 是一个漏洞管理工具和报告聚合器。VulnWhisperer 将从不同的漏洞扫描器中拉取所有报告，并为每个报告创建一个具有唯一文件名的文件，随后将这些数据用于同步到 Jira 并馈送到 Logstash。Jira 会利用扫描器提供的数据执行完整的闭环同步，而 Logstash 则对报告内的所有信息进行索引和标记（请参见 /resources/elk6/pipeline/ 下的 logstash 文件）。数据随后被传输到 ElasticSearch 进行索引，最终在 Kibana 中以可视化且可搜索的格式呈现，并带有预定义的仪表板...

aquatone

AQUATONE Aquatone is a tool for visual inspection of websites across a large amount of hosts and is convenient for quickly gaining an overview of HTTP-based attack surface. Installation 1. Install Google Chrome or Chromium browser -- Note: Google Chrome is currently giving unreliable results when...