netzob

=========================================================== Netzob : Protocol Reverse Engineering, Modeling and Fuzzing .. image:: https://img.shields.io/badge/Python-3-brightgreen.svg :target: https://github.com/netzob/netzob :alt: Python3 See complete documentation here:...

Recheck

Recheck Recheck Deep scan domain and find all possible domain to takeover Quick Links Demo Installation Feature Example Run / Installation How to run ? git clone https://github.com/tegal1337/Recheck cd Recheck npm install npm start Feature Feature| Status ---|--- Deepscan domain| Ok Find Possible...

dirmap

Dirmap 中文 An advanced web directory scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian Demand analysis After a lot of research, summarizing an excellent web directory scanning tool has at least the following features: Concurrency engine Can use the dictionary...

pbscan

SUMMARY polarbearscan is an attempt to do faster and more efficient banner grabbing and port scanning. It combines two different ideas which hopefully will make it somewhat worthy of your attention and time. The first of these ideas is to use stateless SYN scanning using cryptographically protect...

nmap-scan-results

Nmap Scan: 200+ Vulnerabilities Found Critical: CVE-2023-38408 9.8, CVE-2024-38476 9.8, Slowloris DoS Full Report...

sandsifter

s a n d s i f t e r : the x86 processor fuzzer Overview The sandsifter audits x86 processors for hidden instructions and hardware bugs, by systematically generating machine code to search through a processor's instruction set, and monitoring execution for anomalies. Sandsifter has uncovered secre...

log4j-Scan-Burpsuite

log4j-Scan-Burpsuite Burpsuite detection plugin for Log4j vulnerability CVE-2021-44228 Includes ON/OFF switch, Filter, Send Features: Automatically replace request headers Automatically replace POST request application/json parameters Automatically replace POST request application/x-www-urlencode...

log4v-vuln-check

Log4JS File & Vulnerability Scanner + Local Port Bind Scanner This script is used to perform a fast check to see if your server is possibly affected by CVE-2021-44228 the log4j vulnerability. It does not provide 100% guarantee that you are not vulnerable, but it gives a hint if it is possible tha...

nmap-bootstrap-xsl

nmap-bootstrap-xsl Have a nice interface for checking the result of your Nmap scans. This software must not be used by military or secret service organisations. How to use 1. New Nmap scan Add the nmap-bootstrap.xsl as stylesheet to your Nmap scan with the --stylesheet argument : nmap -sS -T4 -A...

cloud-doctor

cloud-doctor One command grades your whole cloud account — misconfigurations, missing observability, and security posture, ranked by the five things to fix first. Point it at AWS, Cloudflare, Vercel, Supabase, Render, Fly.io, or Railway and it comes back with a score, what's broken, and a fix for...

YARAify

YARAify YARAify is an open YARA scan- and search engine. This repository provides some sample python3 scripts on how to interact with the YARAify API. Obtain an Auth-Key In order to query the YARA API, you need to obtain an Auth-Key. If you don't have an Auth-Key yet, you can get one at...

CVE-2020-0796-Scanner

CVE-2020-0796-Scanner This PoC source: QiAnXin http://dl.qianxin.com/skylar6/CVE-2020-0796-Scanner.zip...

OnTheEdge

OnTheEdge OnTheEdge is a small Windows research PoC written in C for studying credential-related data that may be present in the memory of Microsoft Edge processes while the browser is running. The project provides two variants: Standalone executable — intended for local testing and research. BOF...

inspec-log4j

inspec-log4j This profile scans for vulnerable versions of Log4j Core JAR files directly on the file system, and embedded in WAR files. Running the profile locally git clone https://github.com/trickyearlobe/inspec-log4j inspec exec inspec-log4j Running the profile against a remote SSH target Ensu...

wp2shell-scan

wp2shell-scan A scanner and proof-of-concept toolkit for CVE-2026-63030 wp2shell, a pre-authenticated remote code execution vulnerability in WordPress core Features Two non-destructive detection methods: --check-type time-based SLEEP timing and --check-type error-based TRUE/FALSE/broken...

Log4j_scan_Advance

log4j-scan A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers not only 3-4 headers as previously seen tools. Fuzzing for HTTP POST Data parameters. Fuzzing for JSON data parameters...

liblzma-scan

This repository does not have a README...

log4j-scanner

Log4j Scanner Discover Log4Shell vulnerability CVE-2021-44832 in your files and directories. Description This Rust-based Log4j Scanner is designed to help you identify and locate vulnerable files that may contain the Log4Shell vulnerability CVE-2021-44832. It scans files and directories to find...

log4j-quick-scan

log4j-quick-scan Scan your IP network and determine hosts with possible CVE-2021-44228 vulnerability in log4j library. There are far better and advanced tools for security audit, but many of them requires commercial penetration software or external, 3rd party service or software. This script is...

exfil-scan

exfil-scan Scan LLM outputs and AI-generated content for data exfiltration signals before they reach users, logs, or downstream systems. 1 Why exfil-scan exists Modern LLM applications routinely process sensitive prompts, internal documents, API responses, and user data. That creates a new securi...