PortGuard

Port-Guard Port-Guard is a USB port management and security tool designed for Debian. It allows you to control access to USB devices , maintain a custom whitelist , and run an automatic background scan to detect any unauthorized connection. ⚠️ Beta version : The software is functional, but...

BurpBounty

Burp Bounty Free - Scan Check Builder BApp Store This Burp Suite extension allows you, in a quick and simple way, to improve the active and passive burpsuite scanner by means of personalized rules through a very intuitive graphical interface. Through an advanced search of patterns and an...

bambdas

Bambda scripts Welcome to the official Bambda scripts repository from PortSwigger. This repo contains a collection of scripts developed by both PortSwigger and the community with 🧡 📑 On this page Types of Bambda scripts Repository contents Importing scripts into Burp Updating scripts in your...

HackBot

HackBot - AI Cybersecurity Chatbot | | | | | | | | | | || |/ |/ | |/ / \ / | | By: Morpheuslord | | | | | | | | | | AI used: Meta-LLama2 || ||,|||\/ / | Introduction Welcome to HackBot, an AI-powered cybersecurity chatbot designed to provide helpful and accurate answers to your...

sandsifter

s a n d s i f t e r : the x86 processor fuzzer Overview The sandsifter audits x86 processors for hidden instructions and hardware bugs, by systematically generating machine code to search through a processor's instruction set, and monitoring execution for anomalies. Sandsifter has uncovered secre...

marshalsec

Java Unmarshaller Security - Turning your data into code execution If you came here for Log4Shell/CVE-2021-44228, you may want to read about the exploitation vectors and affected Java runtime versions: https://mbechler.github.io/2021/12/10/PSALog4ShellJNDIInjection/ Paper It's been more than two...

dirstalk

Dirstalk Dirstalk is a multi threaded application designed to brute force paths on web servers. The tool contains functionalities similar to the ones offered by dirbuster and dirb. Here you can see it in action: Contents How to use it Scan Useful resources Dictionary generator Download Developmen...

shai-hulud-scan

shai-hulud-scan A Claude Code skill that scans machines for indicators of compromise IOCs from the Mini Shai-Hulud supply chain worm CVE-2026-45321, CVSS 9.6. What is Mini Shai-Hulud? A self-propagating supply chain worm that compromised 170+ npm/PyPI packages on May 11, 2026 - including...

nmap-scan-results

Nmap Scan: 200+ Vulnerabilities Found Critical: CVE-2023-38408 9.8, CVE-2024-38476 9.8, Slowloris DoS Full Report...

Recheck

Recheck Recheck Deep scan domain and find all possible domain to takeover Quick Links Demo Installation Feature Example Run / Installation How to run ? git clone https://github.com/tegal1337/Recheck cd Recheck npm install npm start Feature Feature| Status ---|--- Deepscan domain| Ok Find Possible...

ShellShock-CGI-Scan

ShellShock-CGI-Scan A script, in C, to check if CGI scripts are vulnerable to CVE-2014-6271 The Bash Bug. Options: -i local ip-address -p port to listen -l site list -t connection timeout Default: 15s Example: $ ./Scanner -i 127.0.0.1 -p 31337 -l sites.txt -t 5 Starting listen in localhost on por...

CVE-2019-17558_Solr_Vul_Tool

Solr Velocity Template Injection Vulnerability Detection Tool Tool Introduction At the end of October 2019, the Solr Velocity template injection remote command execution vulnerability was disclosed. Manual detection of this vulnerability requires several rounds of capturing and modifying packets...

nmap-vulnerability-scan-scripts

Synopsys CyRC Vulnerability Advisory: https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps.html CVE-2022-45477, CVE-2022-45479, CVE-2022-45482, CVE-2022-45481...

ansible-role-log4shell

Ansible role - log4shell ⭐ Star us on GitHub — it motivates us a lot! Find Log4Shell CVE-2021-44228 on your system This role tries to find JAR and WAR from filesystem and from opened files lsof ⚠️ Your system may runs slowly during the scan due to a find on / and the unarchive process to lookup...

rdp0708scanner

rdp0708scanner This is a CVE-2019-0708 scanner wrapper for the single thread 0708Detector, it dose a safe scan on a single or list of IPs. Usage python rdp0708scanner.py -t ip-address -f ip.lst -p port -x threads -v...

YARAify

YARAify YARAify is an open YARA scan- and search engine. This repository provides some sample python3 scripts on how to interact with the YARAify API. Obtain an Auth-Key In order to query the YARA API, you need to obtain an Auth-Key. If you don't have an Auth-Key yet, you can get one at...

crawpy

Crawpy Yet another content discovery tool written in python. What makes this tool different than others: Sends asynchronous HTTP requests, fast Calibration mode, applies filters on its own Recursive scan mode with additional flags Report generation, you can later go and check your results Multipl...

SecureAI-Scan

SecureAI-Scan An offline scanner for the code that talks to LLMs, MCP servers, vector stores, and Agent Skills. It finds prompt injection, MCP command injection and path traversal, RAG data leaks, and poisoned skills, and it proves each finding with a source → sink trace through your real imports...

wireshark-forensics-plugin

wireshark-forensics-plugin Wireshark is the most widely used network traffic analyzer. It is an important tool for both live traffic analysis & forensic analysis for forensic/malware analysts. Even though Wireshark provides incredibly powerful functionalities for protocol parsing & filtering, it...

log4j-Scan-Burpsuite

log4j-Scan-Burpsuite Burpsuite detection plugin for Log4j vulnerability CVE-2021-44228 Includes ON/OFF switch, Filter, Send Features: Automatically replace request headers Automatically replace POST request application/json parameters Automatically replace POST request application/x-www-urlencode...