1460063 matches found
yasuo
YASUO @0xsauby Description Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise th...
can-i-take-over-xyz
Aviso legal ⚠️ Los autores de este documento no asumen ninguna responsabilidad por la exactitud. Este proyecto solo está aquí para ayudar a guiar a los investigadores de seguridad a determinar si algo es vulnerable o no, pero no garantiza precisión. Este proyecto depende en gran medida de las...
oss-oopssec-store
OSS - OopsSec Store Security training for the apps you actually ship. 36 challenges across web, API, authentication, business logic, cryptography, supply chain, AI agents and MCP. Break a deliberately vulnerable e-commerce app built on Next.js, React, TypeScript and Prisma. Find the bugs. Exploit...
CVE-2015-2153
CVE-2015-2153 An implementation of the CVE-2015-2153 exploit. The exploit-db post can be found at https://www.exploit-db.com/exploits/37663/...
adapt
Summary ADAPT is a tool that performs Automated Dynamic Application Penetration Testing for web applications. It is designed to increase accuracy, speed, and confidence in penetration testing efforts. ADAPT automatically tests for multiple industry standard OWASP Top 10 vulnerabilities, and outpu...
w3af
w3af - Web Application Attack and Audit Framework w3af is an open source web application security scanner which helps developers and penetration testers identify and exploit vulnerabilities in their web applications. The scanner is able to identify 200+ vulnerabilities, including Cross-Site...
collection-document
Project Description Collection of quality safety articlesTo be rebuilt Some are inconvenient to release. Some forget update,can see me star. collection-document awesome 以前的链接中大多不是优质的 渗透测试部分不再更新 因精力有限，缓慢更新 Author: tom0li Blog: https://tom0li.github.io root@kitploit: - Project Description -...
pwnspoof
pwnSpoof de Punk Security genera archivos de registro falsos realistas para servidores web comunes con escenarios de ataque personalizables. Cada paquete de registros es único y completamente personalizable, lo que lo hace perfecto para generar escenarios CTF y para series de entrenamiento. ¿Pued...
ElectricEye
ElectricEye ElectricEye es una herramienta CLI de Python multi-nube y multi-SaaS para la gestión de activos, la postura de seguridad y la monitorización de la superficie de ataque, que admite cientos de servicios y evaluaciones para fortalecer tus entornos CSP y SaaS con controles asignados a más...
h2t
h2t - HTTP Hardening Tool Description h2t is a simple tool to help sysadmins to hardening their websites. Until now h2t checks the website headers and recommends how to make it better. Dependences Python 3 colorama requests Install root@kitploit: $ git clone https://github.com/gildasio/h2t $ cd h...
h2t
h2t - Herramienta de Endurecimiento HTTP Descripción h2t es una herramienta simple para ayudar a los administradores de sistemas a endurecer sus sitios web. Hasta ahora h2t verifica las cabeceras del sitio web y recomienda cómo mejorarlas. Dependencias Python 3 colorama requests Instalación...
BurpSuite-Plugin
BurpSuite-Plugin Plugin For BurpSuite Pentester...
python-hacklib
hacklib Kit de herramientas para entusiastas del hacking con Python. hacklib es un módulo de Python para entusiastas del hacking interesados en la seguridad de redes. Ya no está en desarrollo activo. Instalación Para obtener hacklib, simplemente ejecuta en la línea de comandos: root@kitploit: pip...
OWASPWebGoatPHP
WebGoatPHP OWASP WebGoatPHP is a port of OWASP WebGoat to PHP and MySQL/SQLite databases. The goal is to create an interactive teaching environment for web application security by offering lessons in the form of challenges. In each challenge the user must exploit the vulnerability to demonstrate...
spyse.py
spyse.py Python API wrapper and command-line client for the tools hosted on spyse.com. "Spyse is a developer of complete DAAS Data-As-A-Service solutions for Internet security professionals, corporate and remote system administrators, SSL / TLS encryption certificate providers, data centers and...
CVE-2024-6387
CVE-2024-6387 Bulk Scanning Tool for OpenSSH CVE-2024-6387 and 19 Other OpenSSH CVEs Overview Introducing a new OpenSSH bulk scanning tool! Quickly scan multiple SSH servers for security vulnerabilities like CVE-2024-6387, CVE-2006-5051, and others. This tool is designed for scanning and reportin...
onionscan
What is OnionScan? OnionScan is a free and open source tool for investigating the Dark Web. For all the amazing technological innovations in the anonymity and privacy space, there is always a constant threat that has no effective technological patch - human error. Whether it is operational securi...
intercept
!zreadhttps://img.shields.io/badge/AskZread-.svg?style=plastic&color=00b0aa&labelColor=000000&logo=data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMTYiIGhlaWdodD0iMTYiIHZpZXdCb3g9IjAgMCAxNiAxNiIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHBhdGggZD0iTTQuOTYxNTYgMS42MDAxSDIuMjQxNTZD...
ASST
ASST BETA OWASP ASST Automated Software Security Toolkit | Un novedoso escáner de seguridad web de código abierto. Nota: AWSS es el nombre anterior de ASST Introducción Las aplicaciones web se han convertido en una parte integral de la vida cotidiana, pero muchas de estas aplicaciones se...