mesh-kridik

mesh-kridik Enhance your Kubernetes service mesh security !! mesh-kridik is an open-source security checker that performs various security checks on a Kubernetes cluster with istio service mesh and outputs a security report The security checks tests are the full implementation of istio security...

CVE-2016-0801

CVE-2016-0801...

joy

| |/ | | | | | | | || |/ |/ , | |/ | / root@kitploit: Un pacchetto per catturare e analizzare dati di flusso di rete e dati intraflusso, per ricerca di rete, forensics e monitoraggio della sicurezza. Fingerprinting TLS Addendum: per i nostri strumenti e dati di fingerprinting di rete più recenti,...

linux-security-audit

Strumento di Audit di Sicurezza per Linux Strumento di Audit di Sicurezza per Linux basato sul CIS - Red Hat Enterprise Linux 8 Benchmark v3.0.0 Se lo trovi utile, per favore lascia una "stellina" 🌟 per supportare ulteriori miglioramenti. Indice dei Contenuti 1. Funzionalità 2. Anteprima 3. Log...

sharingan

Sharingan Sharingan ist ein Recon-Multitool für offensive Sicherheit / Bug Bounty WIP, werde ich jemals fertig? Wer weiß Klonen für die Entwicklung Außerhalb deines GOPATH git clone https://github.com/leobeosab/sharingan Installation go get github.com/leobeosab/sharingan/cmd/sharingancli...

CVE-2023-2640-32629

Ubuntu Privilege Escalation: CVE-2023-2640 e CVE-2023-32629 Questa è una vulnerabilità di escalation dei privilegi locali che interessa alcuni kernel Ubuntu. Consente a utenti non privilegiati di impostare attributi estesi privilegiati su file montati, aggirando i controlli di sicurezza e...

versionscan

versionscan Versionscan is a tool for evaluating your currently installed PHP version and checking it against known CVEs and the versions they were fixed in to report back potential issues. PLEASE NOTE: Work is still in progress to adapt the tool to linux distributions that backport security fixe...

pown

Pown Pown.js is a security testing and exploitation toolkit built on top of Node.js and NPM. Unlike traditional security tools, notably Metasploits, Pown.js considers frameworks to be an anti-pattern. Therefore, each feature in Pown is in fact a standalone NPM module allowing greater degree of...

jsfinder

Features | Installation | Usage | Demo | TODOs| Contact jsFinder is a command-line tool written in Go that scans web pages to find JavaScript files linked in the HTML source code. It searches for any attribute that can contain a JavaScript file e.g., src, href, data-main, etc. and extracts the UR...

jsfinder

Funktionen | Installation | Verwendung | Demo | TODOs| Kontakt jsFinder ist ein in Go geschriebenes Kommandozeilenwerkzeug, das Webseiten durchsucht, um JavaScript-Dateien zu finden, die im HTML-Quellcode verlinkt sind. Es sucht nach jedem Attribut, das eine JavaScript-Datei enthalten kann z.B...

security-research

security-research Proof-of-concept code and technical write-ups for vulnerabilities I discovered and reported through coordinated disclosure. Every entry here is already public: the vendor advisory is published and a fixed release is available. Nothing under embargo or in draft is included. The...

erebus

Veloce e personalizzabile scanner di vulnerabilità basato su parametri, basato su semplici regole YAML...

python-tuf

Un framework per proteggere i sistemi di aggiornamento software The Update Framework TUF è un framework per la distribuzione sicura di contenuti e aggiornamenti. Protegge contro vari tipi di attacchi alla supply chain e offre resilienza ai compromessi. Questo repository è un'implementazione di...

hyenae-ng

Hyenae NG Hyenae NG Next Generation is a re-write of the original Hyenae tool which was originally published back in the year 2010. Besides switching from C to C++, using modern design concepts, Hyenae NG was just like the original Hyenae written with maximum portability in mind. Since the origin...

kubernetes-goat

Kubernetes Goat ✨ The Kubernetes Goat is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security 🚀 🙌 Refer to https://madhuakula.com/kubernetes-goat for the guide 📖 🧰 Setting up Kubernetes Goat Ensure you have admin access to the Kubernetes cluster...

UnmarshalPwn

UnmarshalPwn POC per CVE-2018-0824 Per i dettagli vedere https://codewhitesec.blogspot.com/2018/06/cve-2018-0624.html...

CVE-2021-3156

CVE-2021-3156...

vger

V'ger V'ger ist eine interaktive Kommandozeilenanwendung für die Post-Exploitation authentifizierter Jupyter-Instanzen mit Fokus auf KI/ML-Sicherheitsoperationen. Benutzergeschichten Als Red Teamer hast du Jupyter-Anmeldeinformationen gefunden, weißt aber nicht, was du damit anfangen kannst. V'ge...

dirsearch

DirSearch This software is a Go implementation of the original dirsearch tool written by Mauro Soria. DirSearch is the very first tool I write in Go, mostly to play and experiment with Go's concurrency model, channels, and so forth : Purpose DirSearch takes an input URL -url parameter and a...

pwndbg

pwndbg pwndbg /paʊnˈdiˌbʌɡ/ is a GDB and LLDB plug-in that makes debugging suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers. It has a boatload of features, see our Features page and CHEATSHEET feel free to prin...