IOCs

This repository does not have a README...

CVE-2019-14287-

CVE-2019-14287 A script to check for the sudo security bypass CVE-2019-14287. This script checks for a vulnerable sudo version and tries to exploit it. It can run alone or can be integrated into a enumeration scanner like LinEnum.sh...

Resources-for-Application-Security

Publicación actualizada en https://ishaqmohammed.me/posts/resources-for-application-security/ Recursos para la Seguridad de Aplicaciones Algunos buenos recursos para comenzar con la seguridad de aplicaciones Nota: Los recursos que he puesto son aquellos que usaré en mis aprendizajes de seguridad ...

PentestingEverything

PentestingEverything Una base de conocimiento completa y buscable sobre pruebas de penetración en 23 dominios de seguridad. Sitio web en vivo: pentesting.m14r41.in Sitio web en vivo · PentestingChecklist · Contribuir · Reportar un problema Léelo en línea en pentesting.m14r41.in : completamente...

PurpleLlama

🤗 Models on Hugging Face | Blog | Website | CyberSec Eval Paper | Llama Guard Paper Purple Llama Purple Llama is an umbrella project that over time will bring together tools and evals to help the community build responsibly with open generative AI models. The initial release will include tools an...

oauth-scan

OAUTHScan Description OAUTHScan is a Burp Suite Extension written in Java with the aim to provide some automatic security checks, which could be useful during penetration testing on applications implementing OAUTHv2 and OpenID standards. The plugin looks for various OAUTHv2/OpenID vulnerabilities...

AzureADAssessment

Microsoft Azure AD Assessment Assessor Guide If you are a Microsoft employee or partner performing the assessment for a customer please see the Wiki for the Assessment Guide. Install from the PowerShell Gallery If you run into any errors please see the FAQ section at the end of this document...

dllspy

DllSpy Escanea ensamblados .NET compilados para descubrir superficies de entrada puntos finales HTTP, concentradores SignalR, servicios WCF, servicios gRPC, páginas Razor, componentes Blazor, funciones de Azure, puntos finales OData, verificar la configuración de autorización y señalar problemas ...

awesome-websocket-security

Awesome WebSockets Security A collection of CVEs, research, and reference materials related to WebSocket security Contents WebSocket Library Vulnerabilities Conference Talks Common WebSocket Weaknesses WebSocket Security Tools Bug Bounty Writeups Useful blog posts WebSocket Library Vulnerabilitie...

gh-workflow-auditor

GitHub Workflow Auditor Workflow auditing tools to identify security issues in GitHub workflows Usage root@kitploit: usage: main.py -h --type repo,org,user --log-level debug,info,warning,error,critical input Identify vulnerabilities in GitHub Actions workflow positional arguments: input User/Org...

patoolkit

.. image:: https://user-images.githubusercontent.com/743886/43845704-6dbd2558-9ae1-11e8-9f77-239210fe7b6a.png PA Toolkit Pentester Academy Wireshark Toolkit PA Toolkit is a collection of traffic analysis plugins to extend the functionality of Wireshark from a micro-analysis tool and protocol...

malicious-pdf

Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...

fileless-xec

➲ fileless-xec 🦜 👋 Certainly useful , mainly for fun, rougly inspired by 0x00 article Pentest use: fileless-xec is used on target machine to stealthy execute a binary file located on attacker machine ➲ Short story fileless-xec enable us to execute a remote binary on a local machine directly from...

aircrack-ng

Aircrack-ng Insignias GitHub CI...

aircrack-ng

Aircrack-ng Badges GitHub CI...

cloudgoat

CloudGoat ☁️🐐...

kubernetes-goat

Kubernetes Goat ✨ The Kubernetes Goat is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security 🚀 🙌 Refer to https://madhuakula.com/kubernetes-goat for the guide 📖 🧰 Setting up Kubernetes Goat Ensure you have admin access to the Kubernetes cluster...

kubernetes-goat

Kubernetes Goat ✨ Kubernetes Goat está diseñado para ser un entorno de clúster intencionalmente vulnerable para aprender y practicar seguridad en Kubernetes 🚀 🙌 Consulta https://madhuakula.com/kubernetes-goat para la guía 📖 🧰 Configuración de Kubernetes Goat Asegúrate de tener acceso de...

CVE-2023-2523

CVE-2023-2523 CVE-2023-2523...

unimap

Unimap Escanea solo una vez por dirección IP y reduce los tiempos de escaneo con Nmap para grandes cantidades de datos. Unimap es una abreviatura de "Unique Nmap Scan ". La herramienta puede ejecutarse en Linux, OSX, Windows o Android Termux sin problemas. ¿Por qué? Si tienes planes de ejecutar u...