bluepot

bluepot Bluepot is a Bluetooth Honeypot written in Java, it runs on Linux. Bluepot was a third year university project attempting to implement a fully functional Bluetooth Honeypot. A piece of software designed to accept and store any malware sent to it and interact with common Bluetooth attacks...

sonar.js

sonar.js A framework for identifying and launching exploits against internal network hosts. Works via WebRTC IP enumeration, WebSocket host scanning, and external resource fingerprinting. How does it work? Upon loading the sonar.js payload in a modern web browser the following will happen: sonar....

malware_training_vol1

malwaretrainingvol1 Materials for Windows Malware Analysis training volume 1 🚧 WARNING: work in progress! More material will be added gradually. Content The goal of this training it to build understanding of various common techniques used by malware. It contains elements of programming as well as...

Get-RBCD-Threaded

Get-RBCD-Threaded Herramienta para descubrir rutas de ataque de delegación restringida basada en recursos en entornos de Active Directory Basada casi por completo en las maravillosas publicaciones de blog "Wagging the Dog: Abusing Resource-Based Constrained Delegation to Attack Active Directory" ...

gcp_scanner

Descargo de responsabilidad Este proyecto no es un proyecto oficial de Google. No cuenta con el respaldo de Google y Google específicamente renuncia a todas las garantías sobre su calidad, comerciabilidad o idoneidad para un propósito particular. GCP Scanner Este es un escáner de recursos de GCP...

mad-metasploit

Módulos personalizados de Metasploit, plugins, scripts de recursos y.. colección impresionante de metasploit https://www.hahwul.com/p/mad-metasploit.html Awesome abre awesome.md Añadir mad-metasploit al framework de metasploit...

mad-metasploit

Metasploit custom modules, plugins, resource script and.. awesome metasploit collection https://www.hahwul.com/p/mad-metasploit.html Awesome open awesome.md Add mad-metasploit to metasploit framework...

Malware-Bible

The Indoctrination Welcome to the Malware Bible. Brought to you by The Perkins Cybersecurity Educational Fund. This sacred text was created specifically to guide you on your journey into the realm of cybersecurity. Whether you are seeking to understand, master, or dominate this craft, these sacre...

Awesome-FOFA

Awesome-FOFA Library 📒 中文 README Comienza con FOFA Guía para principiantes ¿Cómo obtener F-point gratis de FOFA? FOFA e IA Inventario de superficie de ataque de próxima generación: ¡Prueba gratuita disponible! Escenario básico ¿Cómo usar FOFA para descubrir recursos LLM gratuitos? Elevando la...

NodeSecurityShield

Node Security Shield Node Security Shield NSS es una herramienta de protección de aplicaciones en tiempo de ejecución RASP de código abierto que busca cerrar la brecha en la seguridad integral de NodeJS, permitiendo que los desarrolladores e ingenieros de seguridad declaren qué recursos puede...

CVE-2022-22963-Exploit

CVE-2022-22963 Exploit This repository contains a Rust-based exploit for the CVE-2022-22963 vulnerability found in Spring Cloud Function versions 3.1.6, 3.2.2, and older unsupported versions. The vulnerability allows remote code execution and access to local resources through a specially crafted...

pagesource

pagesource A Python CLI tool that captures all resources loaded by a webpage like browser DevTools Sources tab and saves them with the original directory structure. Installation root@kitploit: pip install pagesource IMPORTANT: Install Playwright browser after package installation playwright insta...

shootback

shootback shootback is a reverse TCP tunnel let you access target behind NAT or firewall 反向TCP隧道, 使得NAT或防火墙后的内网机器可以被外网访问. Consumes less than 1% CPU and 8MB memory under 800 concurrency. slaver is single file and only depends on python2.7/3.4+ standard library. How it works Typical Scene 1. Access...

awesome-appsec-interview

Awesome Entrevista AppSec Una lista curada de recursos, preguntas de práctica y materiales de estudio para ayudarte a prepararte para entrevistas de Ingeniero de Seguridad de Aplicaciones , organizadas por tipo de entrevista. Contenido Resumen de la Entrevista Revisión de Código Seguro Modelado d...

file-unpumper

file-unpumper file-unpumper es una potente utilidad de línea de comandos diseñada para limpiar y analizar archivos ejecutables portátiles PE. Proporciona una variedad de funciones para ayudar a desarrolladores y profesionales de seguridad a trabajar con archivos PE de manera más efectiva...

CVE-2025-1974

CVE-2025-1974 WhiteHat School 3.ª promoción - 김소은 @salt318 https://github.com/salt318/vulhub Resumen Se produce debido a una falla en el Ingress-NGINX Admission Controller, un mecanismo de seguridad fundamental de Kubernetes El Ingress-NGINX Admission Controller queda expuesto a la red sin...

subdomain3

Subdomain3 README.md inChinese 中文 Description Subdomain3 is a new generation of tool , It helps penetration testers to discover more information in a shorter time than other tools.The information includes subdomains, IP, CDN, and so on. Please enjoy it. Screenshot medium pattern for speed Feature...

APKLab

APKLab The ultimate Android RE experience right inside your VS Code. APKLab seamlessly integrates the best open-source tools: Apktool, smali-lsp, Jadx, uber-apk-signer, apk-mitm and more to the excellent VS Code so you can focus on app analysis and get it done without leaving the IDE. Features...

feroxbuster

!WARNING Security Notice – Domain Impersonation The domain feroxbuster.com is NOT affiliated with this project, its maintainers, or any official feroxbuster releases. Official feroxbuster downloads are distributed ONLY through: https://github.com/epi052/feroxbuster open source...

CertificateDsc

CertificateDsc Code of Conduct This project has adopted this code of conduct. Releases For each merge to the branch main a preview release will be deployed to PowerShell Gallery. Periodically a release version tag will be pushed which will deploy a full release to PowerShell Gallery. Contributing...