48157 matches found
CloudScraper
CloudScraper es una herramienta para rastrear y extraer objetivos en busca de recursos en la nube. Introduce una URL y rastreará y buscará en el código fuente de las páginas rastreadas cadenas como 's3.amazonaws.com', 'windows.net' y 'digitaloceanspaces'. Actualmente se admiten recursos de AWS,...
WaSonar
Disclaimer : This tool is for educational purposes and security research only. The developers are not responsible for misuse. Please use responsibly and ethically. WaSonar is a powerful CLI tool designed for educational research, device tracking, and stress testing on the WhatsApp protocol. Built...
Quantum-Algorithm-for-Elliptic-Curve-Discrete-Logarithms-with-Space-Efficient-Point-Addition
Quantum Algorithm for Elliptic Curve Discrete Logarithms with Space-Efficient Point Addition This repository contains Qiskit code for resource estimation of the space-efficient quantum modular inversion and affine point-addition circuits used in elliptic-curve discrete logarithm settings. The...
kubebox
= Kubebox small^⎈❏^ Antonin Stefanutti https://github.com/astefanutti@astefanutti // Meta :description: Terminal y consola web para Kubernetes // Settings :idprefix: :idseparator: - :experimental: // Aliases ifdef::env-github :note-caption: ℹ️ :icon-check: ✔️ :icon-edit: ✏️ endif::...
Wordpress-DOS-Attack-CVE-2018-6389
Wordpress-DOS-Attack-CVE-2018-6389 Load-scripts.php file, which purpose is to retrieve several JavaScript packages through one single request. root@kitploit: $ chmod +x Execute.sh $ ./Execute.sh How it Works! The problem lies upon the load-scripts.php file, which purpose is to retrieve several...
cloudsplaining
Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report Documentation For full documentation, please visit the project on ReadTheDocs. Installation Cheatsheet Example report...
awesome-list
Awesome Cybersecurity List My personal collection of awesome blog posts, write-ups, and papers focusing on cybersecurity. For a deeper dive into cybersecurity-related tools, check out the dedicated Cybersecurity Tools list. Outline 2026 2025 2024 2023 2022 2021 2020 2019 2018 2017 2016 2014 2011...
CVE-2023-2255
CVE-2023-2255 CVE-2023-2255 RCE y carga de recursos externos encontrado por @Icare1337 https://nvd.nist.gov/vuln/detail/CVE-2023-2255 Exploit Solo un ejemplo para colocar una webshell en el directorio actual. root@kitploit: python3 CVE-2023-2255.py --cmd 'wget...
awesome-entra
Awesome Entra A curated list of awesome Microsoft Entra tools, guides, and other resources. Contents Merill's newsletter & podcast Mind Map Learning Hubs Presentations aka.ms Tools Community YouTube Podcast Bluesky Twitter LinkedIn Blogs Merill's newsletter & podcast Entra.News - Weekly round up...
flipperzero-firmware
Flipper Zero Firmware Flipper Zero Official Website - A simple way to explain to your friends what Flipper Zero can do. Flipper Zero Firmware Update - Improvements for your dolphin: latest firmware releases, upgrade tools for PC and mobile devices. User Documentation - Learn more about your...
awesome-cybersecurity-resources
awesome-cybersecurity-resources Recursos impresionantes de ciberseguridad, more. Propósito Este repositorio almacena recursos seleccionados de ciberseguridad recopilados de internet, documentación de repositorios y notas locales seleccionadas. El formato canónico es: un recurso por archivo Markdo...
awesome-security
Awesome Security A collection of awesome software, libraries, documents, books, resources and cool stuff about security. Inspired by awesome-php, awesome-python. Thanks to all contributors, you're awesome and wouldn't be possible without you! The goal is to build a categorized community-driven...
CVE-2023-27163-POC
CVE-2023-27163 CVE-2023-27163 Request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/baskets/name. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request. This POC utilizes the...
sonar.js
sonar.js Un framework para identificar y lanzar exploits contra hosts de la red interna. Funciona mediante enumeración de IPs por WebRTC, escaneo de hosts por WebSocket y fingerprinting de recursos externos. ¿Cómo funciona? Al cargar el payload sonar.js en un navegador web moderno ocurrirá lo...
sonar.js
sonar.js A framework for identifying and launching exploits against internal network hosts. Works via WebRTC IP enumeration, WebSocket host scanning, and external resource fingerprinting. How does it work? Upon loading the sonar.js payload in a modern web browser the following will happen: sonar....
malware_training_vol1
malwaretrainingvol1 Materials for Windows Malware Analysis training volume 1 🚧 WARNING: work in progress! More material will be added gradually. Content The goal of this training it to build understanding of various common techniques used by malware. It contains elements of programming as well as...
Get-RBCD-Threaded
Get-RBCD-Threaded Tool to discover Resource-Based Constrained Delegation attack paths in Active Directory Environments Based almost entirely on wonderful blog posts "Wagging the Dog: Abusing Resource-Based Constrained Delegation to Attack Active Directory" by Elad Shamir and "A Case Study in...
gcp_scanner
Descargo de responsabilidad Este proyecto no es un proyecto oficial de Google. No cuenta con el respaldo de Google y Google específicamente renuncia a todas las garantías sobre su calidad, comerciabilidad o idoneidad para un propósito particular. GCP Scanner Este es un escáner de recursos de GCP...
mad-metasploit
Módulos personalizados de Metasploit, plugins, scripts de recursos y.. colección impresionante de metasploit https://www.hahwul.com/p/mad-metasploit.html Awesome abre awesome.md Añadir mad-metasploit al framework de metasploit...