versionscan

versionscan Versionscan is a tool for evaluating your currently installed PHP version and checking it against known CVEs and the versions they were fixed in to report back potential issues. PLEASE NOTE: Work is still in progress to adapt the tool to linux distributions that backport security fixe...

pown

Pown Pown.js is a security testing and exploitation toolkit built on top of Node.js and NPM. Unlike traditional security tools, notably Metasploits, Pown.js considers frameworks to be an anti-pattern. Therefore, each feature in Pown is in fact a standalone NPM module allowing greater degree of...

jsfinder

Features | Installation | Usage | Demo | TODOs| Contact jsFinder is a command-line tool written in Go that scans web pages to find JavaScript files linked in the HTML source code. It searches for any attribute that can contain a JavaScript file e.g., src, href, data-main, etc. and extracts the UR...

jsfinder

Funktionen | Installation | Verwendung | Demo | TODOs| Kontakt jsFinder ist ein in Go geschriebenes Kommandozeilenwerkzeug, das Webseiten durchsucht, um JavaScript-Dateien zu finden, die im HTML-Quellcode verlinkt sind. Es sucht nach jedem Attribut, das eine JavaScript-Datei enthalten kann z.B...

security-research

security-research Proof-of-concept code and technical write-ups for vulnerabilities I discovered and reported through coordinated disclosure. Every entry here is already public: the vendor advisory is published and a fixed release is available. Nothing under embargo or in draft is included. The...

erebus

Veloce e personalizzabile scanner di vulnerabilità basato su parametri, basato su semplici regole YAML...

reverie

reverie Automated Pentest Tools Designed For Parrot Linux this tool will make your basic pentesting task like Information Gathering, Security Auditing, And Reporting so this tool will do every task fully automatic. Usage Guide Download / Clone git clone https://github.com/baguswiratmaadi/reverie ...

corsair_scan

Willkommen bei Corsairscan Corsairscan ist ein Sicherheitstool zum Testen von Fehlkonfigurationen beim Cross-Origin Resource Sharing CORS. CORS ist ein Mechanismus, der es erlaubt, eingeschränkte Ressourcen auf einer Webseite von einer anderen Domain anzufragen, die nicht die Domain ist, von der...

python-tuf

Un framework per proteggere i sistemi di aggiornamento software The Update Framework TUF è un framework per la distribuzione sicura di contenuti e aggiornamenti. Protegge contro vari tipi di attacchi alla supply chain e offre resilienza ai compromessi. Questo repository è un'implementazione di...

hyenae-ng

Hyenae NG Hyenae NG Next Generation is a re-write of the original Hyenae tool which was originally published back in the year 2010. Besides switching from C to C++, using modern design concepts, Hyenae NG was just like the original Hyenae written with maximum portability in mind. Since the origin...

kubernetes-goat

Kubernetes Goat ✨ The Kubernetes Goat is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security 🚀 🙌 Refer to https://madhuakula.com/kubernetes-goat for the guide 📖 🧰 Setting up Kubernetes Goat Ensure you have admin access to the Kubernetes cluster...

UnmarshalPwn

UnmarshalPwn POC per CVE-2018-0824 Per i dettagli vedere https://codewhitesec.blogspot.com/2018/06/cve-2018-0624.html...

urlbrute

URLBrute Strumento per il brute-force di directory/DNS su siti web Modalità Disponibili Brute-force directory/file Brute-force DNS Installazione Compilazione dal sorgente Installa le dipendenze root@kitploit: go get Compila l'eseguibile root@kitploit: go build Se vuoi installare nella cartella...

CVE-2021-3156

CVE-2021-3156...

vger

V'ger V'ger ist eine interaktive Kommandozeilenanwendung für die Post-Exploitation authentifizierter Jupyter-Instanzen mit Fokus auf KI/ML-Sicherheitsoperationen. Benutzergeschichten Als Red Teamer hast du Jupyter-Anmeldeinformationen gefunden, weißt aber nicht, was du damit anfangen kannst. V'ge...

iotmap

IoTMap IoTMap ist ein Werkzeug, das IoT-Netzwerke unter Verwendung eines oder mehrerer Protokolle gleichzeitig modelliert. Dies ist eine laufende Arbeit im Rahmen einer Doktorarbeit über die Sicherheit des Internets der Dinge. Dieses Repository wird regelmäßig aktualisiert, sobald neue Ergebnisse...

dirsearch

DirSearch This software is a Go implementation of the original dirsearch tool written by Mauro Soria. DirSearch is the very first tool I write in Go, mostly to play and experiment with Go's concurrency model, channels, and so forth : Purpose DirSearch takes an input URL -url parameter and a...

pwndbg

pwndbg pwndbg /paʊnˈdiˌbʌɡ/ is a GDB and LLDB plug-in that makes debugging suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers. It has a boatload of features, see our Features page and CHEATSHEET feel free to prin...

DELTA

DELTA: FRAMEWORK DI VALUTAZIONE DELLA SICUREZZA SDN Cos'è DELTA? DELTA è un framework di penetration testing che rigenera scenari di attacco noti per diversi casi di test. Questo framework fornisce anche la capacità di scoprire problemi di sicurezza sconosciuti nelle SDN utilizzando una tecnica d...

wphardening

WPHardening Fortify the security of any WordPress installation. ❮ NOTE ❯ This tool releases new versions on a regular basis. Make sure to update your dependencies frequently to get the latest version. Check out the changelog or CHANGELOG.md to learn about the new features. Installation Installing...