adapt

Summary ADAPT is a tool that performs Automated Dynamic Application Penetration Testing for web applications. It is designed to increase accuracy, speed, and confidence in penetration testing efforts. ADAPT automatically tests for multiple industry standard OWASP Top 10 vulnerabilities, and outpu...

kscan

Kscan - Lightweight Comprehensive Scanner Chinese Readmeurl-doczh | English Readmeurl-docen 0 Disclaimer The author did not participate in any XX operation, please stop tracing This tool is intended only for legally authorized enterprise security construction activities and personal learning. If...

bbrecon

This project is no longer maintained and I took the crawling infrastructure offline. The audience was not big enough to justify maintaining it. Bug Bounty Recon bbrecon is a free Recon-as-a-Service for bug bounty hunters and security researchers. The API aims to provide a continuously up-to-date...

SMShell

SMShell PoC for an SMS-based shell. Send commands and receive responses over SMS from mobile broadband capable computers. This tool came as an insipiration during a research on eSIM security implications led by Markus Vervier, presented at Offensivecon 2023 Disclaimer This is not a complete C2 bu...

mimipenguin

MimiPenguin 2.0 A tool to dump the login password from the current linux desktop user. Adapted from the idea behind the popular Windows tool mimikatz. This was assigned CVE-2018-20781 https://vulners.com/cve/CVE-2018-20781. Fun fact it's still not fixed after GNOME Keyring 3.27.2 and still works ...

laurel

Linux Audit – تسجيل سهل وقوي وقابل للاستخدام LAUREL هو مكون إضافي لمعالجة الأحداث بعد وقوعها لـ auditd8 يقوم بتوليد سجلات تدقيق غنية ومفيدة بتنسيق JSON مناسبة لإعدادات مراقبة الأمان الحديثة. يمكن العثور على الوثائق المقابلة لأحدث إصدار مستقر هنا. لماذا؟ باختصار: بدلاً من أحداث التدقيق التي تبدو...

dockerscan

DockerScan v2.0 أكثر ماسح أمان Docker شمولاً بواسطةDaniel Garcia cr0hn | GitHub | الموقع الإلكتروني الميزات • التثبيت • بداية سريعة • التوثيق • حالات الاستخدام • ما الجديد • المساهمة 📑 جدول المحتويات نظرة عامة الميزات ما الجديد في v2.0 التثبيت بداية سريعة الاستخدام مصادقة السجل الخاص ماسحات الأما...

CLSA-2026-1791629172 TuxCare security update for postcss (2 CVEs)

TuxCare rebuilt postcss to address 2 CVEs. Fixed in 8.5.2-tuxcare.2...

cheatsheets

Catégorie| Description ---|--- Api| Collection de commandes curl Exploit| Trié par CVE Linux| Ligne de commande pour Linux Other| Tout ce qui ne trouve pas sa place ailleurs Snippet| Extraits de code pour différents langages Theorie| Connaissances de fond sur des sujets spécifiques Url| Ressource...

cve-2023-34034

cve-2023-34034 Demonstration of CVE-2023-34034 authorization bypass in Spring Security. See CVE-2023-34034 Spring Security Authorization Bypass on Don't Panic!...

camjacking-templates

CamJacking CamJacking is a security awareness training and simulation framework designed to help organizations educate users about camera permission risks, browser security, and social engineering awareness in controlled, authorized environments. 🎯 What is CamJacking? CamJacking is an...

CLSA-2026-1791629015 TuxCare security update for postcss (2 CVEs)

TuxCare rebuilt postcss to address 2 CVEs. Fixed in 8.5.3-tuxcare.2...

BurpAPISecuritySuite

Support Development If this project helps your work, support ongoing maintenance and new features. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. BurpAPISecuritySuite Professional-grade Burp Suite extension for comprehensive API...

hardcidr

hardCIDR Background A Linux Bash script to discover the netblocks, or ranges, in CIDR notation owned by the target organization during the intelligence gathering phase of a penetration test. This information is maintained by the five Regional Internet Registries RIRs: ARIN North America RIPE...

cumulus

OWASP Cumulus - Threat modeling the clouds Cumulus is the easy way to bring security into cloud and devOps teams. As a variant of the card game Elevation of Privilege it follows the idea to threat model a system via gamification. This lightweight and low-barrier approach helps you find threats to...

Moxy

Moxy Moxy Next-Gen Man in the middle proxy Open-source DAST tool for pentesting powered by agentic AI capabilities Supporting Ollama. Built on top of browser-use, Moxy streamlines dynamic application security testing. 🚀 INSANELY EASY TO USE And it's free, who doesn't like free stuff? Preview Aler...

kube-trivy

A Simple and Comprehensive Vulnerability Scanner for Kubernetes Abstract KubeTrivy is a extends trivy for kubernetes. KubeTrivy is a simple and comprehensive vulnerability scanner for Kubernetes. KubeTrivy detects vulnerabilities of OS packages Alpine, RHEL, CentOS, etc. and application...

Samuraizer

Samuraizer — Cyber‑Security Knowledge Base Engine NotebookLM on steroids — purpose-built for security researchers. 💡 Why Samuraizer? Every security researcher knows the feeling — you find an interesting GitHub repo, a fresh CVE writeup, a blog post about a new exploitation technique. You forward ...

all-my-collection-repos

All Resource Collection Projects: All open source security tools I collected: sec-tool-list: More than 21K. Both Markdown and Json format. Github Security Resource Collection Repos: 1000+ Github Repos about Security Resource Collection Reverse Engineering Resources For All Platforms: Windows:...

tiuku

Tiuku Tiuku is a tool for scanning various kinds of systems and environments for security related information and displaying the results in a browser-based user interface. It can also detect and highlight some issues automatically. Both the data collection scripts and the user interface can be...