EagleEye

EagleEye: With the addition of the -ss option in HTTPX by Project Discovery, it is now possible to create a list of potentially vulnerable URLs with gf xss and qsreplace with the XSS payload, such as alerthacked. HTTPX will then visit all the URLs and take screenshots of them, which are stored in...

thief_raccoon

Thief Raccoon - Login Phishing Tool Thief Raccoon is a tool designed for educational purposes to demonstrate how phishing attacks can be conducted on various operating systems. This tool is intended to raise awareness about cybersecurity threats and help users understand the importance of securit...

thief_raccoon

Thief Raccoon - Herramienta de Phishing para Inicio de Sesión Thief Raccoon es una herramienta diseñada con fines educativos para demostrar cómo se pueden realizar ataques de phishing en varios sistemas operativos. Esta herramienta tiene como objetivo crear conciencia sobre las amenazas de...

kalimux

ACERCA DE LA HERRAMIENTA : Kalimux es un script basado en bash que instala automáticamente Kali Linux en Termux sin ningún problema y sin necesidad de root. Esta herramienta funciona tanto en dispositivos Android rooteados como en dispositivos Android no rooteados...

CVE-2022-20866

RSA Key Checker for CVE-2022-20866 A vulnerability in the handling of RSA keys on devices running the Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software could allow an unauthenticated, remote attacker to retrieve the RSA private key. This vulnerability is due to a...

CVE-2024-24590-ClearML-RCE-CMD-POC

ClearML Exploit Script This repository contains a Python exploit script for CVE-2024-24590 The script is designed to upload a malicious pickle file to ClearML, which executes a reverse shell or a custom command. Features Uploads a malicious pickle artifact to ClearML. Executes a reverse shell or ...

cwe-tool

cwe-tool A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration. Official OWASP CWE Toolkit Page Install Executable with Node.js tooling If you have a Node.js environment, you can invoke cwe-tool using the npx tool as follows: npx cwe-tool ...command-lin...

vopono

vopono es una herramienta para ejecutar aplicaciones a través de túneles VPN mediante espacios de nombres de red temporales. Esto te permite ejecutar solo unas pocas aplicaciones a través de diferentes VPN simultáneamente, mientras mantienes tu conexión principal con normalidad. vopono incluye...

cve-2023-20198

cve-2023-20198 Description. 1vere$k POC on the CVE-2023-20198 based on the Blog. Also including a check on hexademical response according to the original Cisco article. The script works in the two modes: check mode which is just makes a connection for the particular URL and checks a response code...

RmiTaste

RmiTaste RmiTaste permite a los profesionales de seguridad detectar, enumerar, interactuar y atacar servicios RMI mediante la llamada a métodos remotos con gadgets de ysoserial. También permite llamar a métodos remotos con parámetros específicos. Aviso de responsabilidad RmiTaste fue creado para...

chomtesh

CHOMTE.SH ¡Asegúrate de dar :star: a este repositorio para mantenerte al día con el progreso diario! CHOMTE.SH es un framework versátil diseñado para automatizar tareas de reconocimiento en pruebas de penetración. Es útil para cazadores de bugs y pentesters tanto en compromisos de red internos co...

CVE-2026-54121

CVE-2026-54121 Certighost This is a proof-of-concept tool to demonstrace CVE-2026-54121 a.k.a Certighost. Read here https://gist.github.com/H0j3n/a5ef2609b5f2944ac2390a191a534c26 for the detailed analysis. Install dependencies The proof of concept is a self-contained Python script. It requires...

dnsenum

README - dnsenum.pl VERSION: 1.2.4 multithreaded perl script to enumerate DNS information of a domain and to discover non-contiguous ip blocks. OPERATIONS: 1 Get the host's addresse A record. 2 Get the namservers threaded. 3 Get the MX record threaded. 4 Perform axfr queries on nameservers and ge...

MasterHttpRelayVPN

MasterHttpRelayVPN La búsqueda segura de Youtube y la transmisión en vivo ahora están bypaseadas y funcionando por defecto. Por lo que no necesitas youtubeviarelay ni exitnode de Cloudflare / VPS para ello. Idioma: English | Persian / فارسی نسخه فارسی با AI ایجاد شده. ترجیحا از نسخه انگلیسی استفا...

CVE-2012-1675

CVE-2012-1675 Oracle Database TNS Listener Poison Attack Vulnerability nmap -Pn -sT --script=+oracle-tns-poison -p 1521 192.168.2.18 https://www.integrigy.com/files/Integrigy%20Oracle%20TNS%20Poisoning%20Attacks.pdf...

VSHG

VSHG - Resistencia de hardware y seguridad mejorada para GnuPG. VSHG tiene como objetivo proporcionar un refuerzo resistente a memoria/hardware para la función de derivación de clave s2k estándar de GnuPG + una interfaz simplificada para el cifrado simétrico . Acerca de VSHG VSHG Generador de has...

hakkuframework

Hakku Framework Hakku is a simple framework that is made for penetration testing tools. Hakku framework has a simple structure, basic CLI, and useful features for penetration testing modules development. Getting started Use the "help" command to see all available commands. Here is a video if you...

social-analyzer

Social Analyzer - API, CLI, and Web App for analyzing & finding a person's profile across +1000 social media \ websites. It includes different analysis and detection modules, and you can choose which modules to use during the investigation process. The detection modules utilize a rating mechanism...

zeek-spicy-stun

STUN Session Traversal Utilities for NAT STUN This is a Zeek protocol analyzer that detects STUN based on Spicy. You must install Spicy to use this package. This package will create two logs: stun.log - This log has every STUN message. stunnat.log - This log has NAT detections from mapped...

vcenter-log4j

VMware vCenter log4j workaround Script to workaround VMware vCenter log4j vulnerability CVE-2021-44228, as per the VMware KB article. 2021-12-13 02:09 UTC - Added Secure Token & Identity Management services 2021-12-13 12:46 UTC - Added PSC Client for 6.5 - see below VMware have released a python...