petereport

PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...

AD_Miner

AD Miner is an Active Directory on-premise and Entra ID auditing tool that: Leverages Cypher queries to analyze data from the BloodHound graph database Neo4j. Provides a comprehensive overview of existing weaknesses through a static, web-based report. Web-based reports features: Detailed listings...

tsusen

Tsusen 津波センサー is a standalone network sensor made for gathering information from the regular traffic coming from the outside i.e. Internet on a daily basis e.g. mass-scans, service-scanners, etc.. Any disturbances should be closely watched for as those can become a good prediction base of...

DPAT

Domain Password Audit Tool DPAT DPAT is a Python-based security tool that analyzes password hashes extracted from Active Directory domain controllers. It generates comprehensive HTML reports showing password usage statistics, policy violations, and security insights from both NTDS dumps and...

IoCs

IoCs Sophos-originated indicators-of-compromise from published reports /@&&@ . @ @ %@%, ./&@@&@@@@ @@ @%&@@& .@, @. @ @% @ && %@ .@@@@. &@&@//@& @/ @ @@ @ %@. ,%@@@@@@@@@&/ ., @% @@ @@,&@@ ,@ .@. @ , @& ,@@@@& .@ @ .@. @ .@ @& @@. %@@% ./. @,...

open-sesame

open-sesame Contains hackerone disclosed reports and other bug bounty writeups. A python tool which runs to display random publicly disclosed Hackerone reports when bored. Automatically opens the report in browser. Contains Over 8k Publicly disclosed Hackerone reports and addtl. wordlist of 700 b...

pwnacle-fusion

pwnacle-fusion Automated exploit for Oracle Reports, CVE-2012-3153 / CVE-2012-3152 Credits to @misssudo for the disclosure Usage: ./pwnacle.rb targeturl payloadurl This exploit uses both CVEs to upload a .jsp shell from your payloadurl which is then reachable from /reports/images/shell.jsp...

lazyrecon

/ \ / / \ /// / // Y / \ /| | | | / | / / \ / | /|| \ | / | / || |\ || | |/| |-||/ / / / | /| / | | /|| | || // |/// /\\|// | Usage ./lazyrecon.sh -d domain.com To exclude particular subdomains: ./lazyrecon.sh -d domain.com -e excluded.domain.com,other.domain.com About...

flan

Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network. Flan Scan is a wrapper over Nmap and the vulners script which turns Nmap into a...

custom-bytecode-analyzer

custom-bytecode-analyzer Java bytecode analyzer customizable via JSON rules. It is a command-line tool that receives a path containing one or more Jar or War files, analyzes them using the provided rules and generates HTML reports with the results. Usage usage: java -jar cba-cli.jar OPTIONS -a...

CVE-2022-23940

CVE-2022-23940 PoC for CVE-2022-23940 aka SCRMBT-187 - Authenticated Remote Code Execution through Scheduled Reports in SuiteCRM = 8.0.0. Defaults to False --help Show this message and exit. https://github.com/manuelz120/CVE-2022-23940 Example usage: Spawning a PHP Rev...

outpost

Outpost AWS Testing and Reporting Management Outpost is a simple tool to generate AWS configuration files for AssumeRole, a testing capability for verifying accounts work, and a report generator for ScoutSuite scan results. Run ScoutSuite Parse the results ✨Generate Report Findings✨ Installation...

FileWatchTower

FileWatchTower - FWT NOTE: This project is no longer maintained and has been published from archived projects for reference. It is available for anyone interested in developing file analysis software. FWT is a security analysis and file monitoring tool that utilizes Sysmon events. It tracks files...

crawpy

Crawpy Yet another content discovery tool written in python. What makes this tool different than others: Sends asynchronous HTTP requests, fast Calibration mode, applies filters on its own Recursive scan mode with additional flags Report generation, you can later go and check your results Multipl...

Metaforge

Metaforge "An OSINT tool that analyzes metadata and creates dynamic reports" https://chriswmorris.github.io/Metaforge/ Senior Design Project 2019 - By Chris Morris and Collin Mockbee A Python3 Application for Unix-based Operating Systems Note: Metaforge requires at least python version 3.5 to wor...

security-advisories

security-advisories Public security advisories published by Me Chidubem ChukwuTerminal Venom, including CVE disclosures and vulnerability reports for open-source and third-party softwares...

pymultitor

PyMultiTor Python Multi Threaded Tor Proxy, Did you ever want to be at two different places at the same time? When I asked myself this question, I actually started developing this solution in my mind. While performing penetration tests there are often problems caused by security devices that bloc...

rwsploit

Oracle Reports rwservlet Scanner ⚠️ For authorized use only. Only run this tool against systems you own or have explicit written permission to test. Unauthorized use is illegal. A focused exploitation scanner for Oracle Reports Server rwservlet targeting CVE-2012-3152 and CVE-2012-3153 — affecting...

envizon

envizon - by evait security EOL https://github.com/evait-security/envizon/issues/130 We evait security moved to https://gitlab.com/invuls/pentest-projects/pcf for internal project documentation. network visualization & pentest reporting Version 5.0 This tool is designed, developed and supported b...

Ukraine-Cyber-Operations

Ukraine Cyber Operations Curated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional free threat intelligence. Slava Ukraini. Glory to Ukraine. Blog | Twitter | LinkedIn Resources Timeline of 2022 Threat...