fast-security-scanners

Scanner/controlli di sicurezza veloci Un piccolo contributo alla community : Usiamo tutti questi strumenti nelle valutazioni di sicurezza e nel nostro servizio di monitoraggio delle vulnerabilità Controlla il tuo dominio per DNS NS takeover Repo docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e...

SecuSphere

SecuSphere Sua Solução Abrangente de DevSecOps Bem-vindo ao SecuSphere, sua solução completa para todas as necessidades de DevSecOps. Nossa plataforma centralizada é projetada de forma especializada para gerenciar e otimizar seu gerenciamento de vulnerabilidades, integração de pipeline CI/CD,...

wfuzz

Wfuzz - The Web Fuzzer Wfuzz has been created to facilitate the task in web applications assessments and it is based on a simple concept: it replaces any reference to the FUZZ keyword by the value of a given payload. A payload in Wfuzz is a source of data. This simple concept allows any input to ...

offensive-docker-vps

Offensive Docker VPS Crea un VPS su Google Cloud Platform o Digital Ocean facilmente per usare Offensive Docker e lanciare le valutazioni verso i target. 🎉🎉Bonus Digital Ocean 🎉🎉 Puoi registrarti con il mio link di referral https://m.do.co/c/0d2d40f6a8a1 e ottenere $100 di credito gratuito per...

secator

The pentester's swiss knife. Features • Supported commands • Installation • Usage • Documentation • Join us on Discord ! secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to improve productivity for pentesters a...

fast-security-scanners

Fast security scanners/checks A small contribution to community : We use all these tools in security assessments and in our vulnerability monitoring service Check your domain for DNS NS takeover Repo docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e DOMAIN=site.com whitespots/dnsnstakeover Cach...

cdb

Pown CDB Pown CDB is a Chrome Debug Protocol utility. The main goal of the tool is to automate common tasks to help debug web applications from the command-line and actively monitor and intercept HTTP requests and responses. This is particularly useful during penetration tests and other types of...

Common-Web-Application-Bug-Classes-Cheatsheet

Common Web Application Bug Classes Cheatsheet A defensive ref...

Dark-Moon

The Open-Source AI-...

DarkMoon - the Open-Source AI-Powered Autonomous Penetration Testing Platform

DarkMoon is an automated penetration testing tool that orchestrates complete security assessments using artificial intelligence security agents. Built as an open-source cybersecurity tool, it enables organizations to run professional-grade vulnerability assessments without manual intervention...

Microsoft Graph Cloud Intelligence Collector

The Microsoft Graph Cloud Intelligence Collector is a Metasploit Auxiliary module designed to interact with the Microsoft Graph API to gather information from Microsoft 365 and Microsoft Azure Active Directory environments. The module authenticates using the OAuth2 Client Credentials flow with a...

Microsoft Graph Enterprise Intelligence Collector

This Metasploit auxiliary module interacts with the Microsoft Graph API to perform enterprise intelligence collection. It supports authentication using Azure AD application credentials or an existing access token and enables enumeration of Azure users, SharePoint sites, OneDrive files, and Exchan...

blacksmith

BlacksmithAI OPEN-SOURCE AI-Powered Penetration Testing F...

Bounty Hunter: Autonomous, Comprehensive Emulation of Multi-Faceted Adversaries

Adversary emulation is an essential procedure for cybersecurity assessments such as evaluating an organization's security posture or facilitating structured training and research in dedicated environments. To allow for systematic and time-efficient assessments, several approaches from academia an...

EUVD-2025-15291

Malicious code in bioql PyPI...

Exploit for CVE-2023-5561

CVE-2023-5561-POC-Updated This repository contains a modified...

GHSA-CGC6-4XGF-5Q5X vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-XRRJ-GF93-VR4J vulnerabilities

Vulnerabilities for packages: mysql...

GHSA-7P72-RX35-JHVC vulnerabilities

Vulnerabilities for packages: mysql...

Under The Hoodie: The Pen Test Diaries

Breaking In So You Don’t Have To Each year, Rapid7 penetration testers conduct over 1,000 security assessments, pushing boundaries to expose vulnerabilities before the bad guys do. The mission? Get in, escalate privileges, and own the environment—physically, digitally, or sometimes just by...