CVE-2024-6387

CVE-2024-6387 Bulk Scanning Tool for OpenSSH CVE-2024-6387 and 19 Other OpenSSH CVEs Overview Introducing a new OpenSSH bulk scanning tool! Quickly scan multiple SSH servers for security vulnerabilities like CVE-2024-6387, CVE-2006-5051, and others. This tool is designed for scanning and reportin...

refinery

Binary Refinery docs tests codecov pypi High Octane Triage Analysis || || || || || | / / / \ || ==||=====|| | / |/ \ /==| / \ ===| '======|| | \ | | \ | \ /| | || || /||/ / | | | || =========''====/=========/ /==||=====||======' \ / / The Binary Refinery™ is a collection of Python scripts...

mutillidae

OWASP Mutillidae II OWASP Mutillidae IIは、ウェブセキュリティ愛好家向けに設計された、無料のオープンソースで意図的に脆弱なウェブアプリケーションです。これは、ウェブセキュリティスキルを学び実践するためのターゲットとして機能します。Mutillidaeは、LAMP、WAMP、XAMPPスタックを使用してLinuxおよびWindowsシステムに簡単にインストールできます。さらに、SamuraiWTFおよびOWASP...

apidetector

APIDetector는 다양한 서브도메인에서 노출된 Swagger 엔드포인트를 테스트하고, 고유한 스마트 기능으로 오탐false-positive을 탐지하도록 설계된 강력하고 효율적인 도구입니다. API 테스트 및 취약점 스캐닝에 종사하는 보안 전문가와 개발자에게 특히 유용합니다. BlackHat Arsenal 2024에서 발표됨 링크 버전 이력 버전 3의 새로운 기능 현재 최신 웹 인터페이스 : 사용자 친화적인 인터페이스로 간편한 API 엔드포인트 스캔 실시간 결과 : 발견된 엔드포인트와 취약점의 실시간 업데이트 대화형 대시보...

reaver-wps-fork-t6x

Overview Reaver implements a brute force attack against Wifi Protected Setup WPS registrar PINs in order to recover WPA/WPA2 passphrases , as described in Brute forcing Wi-Fi Protected Setup When poor design meets poor implementation. by Stefan Viehböck. Reaver has been designed to be a robust an...

crowdsec

CrowdSec is an open-source and participative security solution offering crowdsourced server detection and protection against malicious IPs. Detect and block with our Security Engine, contribute to the network, and enjoy our real-time community blocklist. Features & Advantages Versatile Security...

ws4-secure-design-agentic-systems

CoSAI Workstream 4: Secure Design Patterns for Agentic Systems This repository is for the work of the CoSAI Workstream 4, Secure Design Patterns for Agentic Systems. CoSAI is an OASIS Open Project and an open ecosystem of AI and security experts from industry leading organizations dedicated to...

semgrep-rules

semgrep-rules "The attack surface is the vulnerability. Finding a bug there is just a detail." -- Mark Dowd "Some details are more important than others." -- Fedor G. Pikus A collection of my Semgrep rules to facilitate vulnerability research. Blog posts...

gh-safe-repo

gh-safe-repo Create GitHub repositories with safe defaults applied automatically. Replaces the five-minute post-creation settings checklist with a single command. gh-safe-repo create Branch protection, immutable tags, Dependabot, restricted Actions permissions, and secret scanning with push...

rsc-security-auditor

🛡️ RSC Security Auditor Detect critical security vulnerabilities CVE-2025-66478, CVE-2025-55184 in your Next.js & React Server Components stack. 🚨 Urgent: Recent disclosures Dec 2025 have revealed critical DoS and RCE vulnerabilities in React Server Components. This tool helps you audit your...

oracle-weblogic-CVE-2021-2109

oracle-weblogic-CVE-2021-2109 Oracle Weblogic RCE - CVE-2022-2109...

steganographer

Steganography in Python This script will hide files inside images and save the modified image to disk The maximum size of file which can be hidden inside an image depends on the dimension of the image. maxfilesize = heightofimage widthofimage 6 / 8 bytes '100k words.txt' is hidden in...

holehe

Holehe OSINT - Email to Registered Accounts 👋 Hi there! For any professional inquiries or collaborations, please reach out to me at: [email protected] 📧 Preferably, use your professional email for correspondence. Let's keep it short and sweet, and all in English! Holehe Online Version Summar...

ArchStrike

ArchStrike ArchStrike is shutting down This should come as no surprise to those who've been paying attention, but the project hasn't been getting maintained for a while now. Over time, most of the killer applications provided by ArchStrike have gained official upstream packages, and the list of...

Brutal

Now Teensy can be use for penetration Teensy like a rubber ducky , why im choose teensy ? because the price very cheap for me . t’s extremely useful for executing scripts on a target machine without the need for human-to-keyboard interaction HID -ATTACK .When you insert the device, it will be...

guac

GUAC: 아티팩트 구성 이해를 위한 그래프 참고: GUAC는 활발히 개발 중입니다. 기여에 관심이 있으시면 기여자 가이드를 확인해 주세요. GUAC는 공급망 무결성 WG 산하의 OpenSSF 인큐베이팅 프로젝트입니다. Graph for Understanding Artifact Composition GUAC은 소프트웨어 보안 메타데이터를 집계하여 고충실도 그래프 데이터베이스로 변환합니다. 엔티티 식별자를 정규화하고 이들 간의 표준 관계를 매핑합니다. 이 그래프를 쿼리하면 감사, 정책, 위험 관리, 심지어 개발자 지원과 같은 상...

guac

GUAC: Graph for Understanding Artifact Composition Note: GUAC is under active development - if you are interested in contributing, please look at contributor guide. GUAC is an OpenSSF incubating project under the Supply Chain Integrity WG. Graph for Understanding Artifact Composition GUAC...

prowler

Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...

prowler

Organizational Prowler with Serverless Language: English 이 문서는 AWS Organization 내의 multi account 환경에서 prowler 를 적용하기 위해 작성된 문서입니다. 일정 시간마다 CloudWatch는 CodeBuild 를 트리거합니다. CodeBuild 는 최신의 prowler 소스를 클론받고, Organization 내의 모든 Account 에 대해 security assessment 를 수행합니다. prowler 의 자세한 사용방법은 이 곳 을 참고합니다...

dcpwn

dcpwn an impacket-dependent script exploiting CVE-2019-1040, with code partly borrowed from those security researchers that I'd like to say thanks to. by taking a closer look you'll find the very technique for utilising the vulnerability slightly different to what common belief is...