Sudo-Security-Bypass-Vulnerability

This repository does not have a README...

CVE-2020-1054

CVE-2020-1054 CVE-2020-1054 Aprendizaje Captura de pantalla Referencia https://0xeb-bp.github.io/blog/2020/06/15/cve-2020-1054-analysis.html robar token de seguridad https://github.com/mwrlabs/CVE-2016-7255 filtrar función https://github.com/DreamoneOnly/CVE-2019-0808-32-64-exp...

golismero

What's GoLismero? GoLismero is an open source framework for security testing. It's currently geared towards web security, but it can easily be expanded to other kinds of scans. The most interesting features of the framework are: Real platform independence. Tested on Windows, Linux, BSD and OS X. ...

golismero

GoLismero 是什么？ GoLismero 是一个用于安全测试的开源框架。它目前主要针对 Web 安全，但可以轻松扩展到其他类型的扫描。 该框架最有趣的功能包括： 真正的平台独立性。已在 Windows、Linux、BSD 和 OS X 上测试通过。 没有原生库依赖。整个框架完全用纯 Python 编写。 与使用 Python 和其他脚本语言编写的其他框架相比，性能良好。 非常易于使用。 插件开发极其简单。 该框架还收集并统一了知名工具的结果：sqlmap、xsser、openvas、dnsrecon、theharvester... 与标准集成：CWE、CVE 和 OWASP。...

CQPToolkit

CQP Tool kit The system provides various components for integrating QKD into a security system. It's written in C++11 but uses GRPC interfaces so can be integrated with lots of different languages. Quick Start To run the software natively, ether: download and install the Ubuntu deb packages or...

honssh

!!! This project is no longer maintained. !!! HonSSH https://github.com/tnich/honssh Copyright C 2016 Thomas Nicholson HonSSH is designed to be used in conjunction with a high interaction honeypot. HonSSH sits between the attacker and the honey pot and creates two separate SSH conncetions. Read t...

AtomShields-cli

AtomShields Cli AtomShields Cli is a Command-Line Interface to use the software AtomShields .. raw:: html Installation .. code-block:: shell pip install atomshieldscli Basic usage .. code-block:: shell ascli --target --name The allowed action values are: install : To install a checker or a...

ssh-mitm

SSH MITM v2.3-dev Author: Joe Testa @therealjoetesta Overview This penetration testing tool allows an auditor to intercept SSH connections. A patch applied to the OpenSSH v7.5p1 source code causes it to act as a proxy between the victim and their intended SSH server; all plaintext passwords and...

parameth

parameth This tool can be used to brute discover GET and POST parameters Often when you are busting a directory for common files, you can identify scripts for example test.php that look like they need to be passed an unknown parameter. This hopefully can help find them. example scan The -off flag...

purpleteam-tls-checker

purpleteam-tls-checker TLS checking component of purpleteam...

lockc

lockc 是一款用于为容器工作负载提供 MAC（强制访问控制）类型安全审计的开源软件。 lockc 存在的主要原因是容器并不隔离 。容器并不像虚拟机那样安全和隔离。默认情况下，它们会暴露大量关于宿主机的信息，并提供从容器中“逃逸”的方式。lockc 旨在为容器提供更强的隔离性，使其更加安全。 容器并不隔离 文档部分解释了这句话的含义，以及我们希望通过 lockc 限制哪些行为。 lockc 背后的核心技术是 eBPF——更确切地说，是其挂载到 LSM 钩子 上的能力。 请注意，目前 lockc...

purpleteam-app-scanner

purpleteam application scanner Application scanning component of purpleteam - Currently in alpha Clone this repository. cd to the repository root directory and run:...

vulnreport

Abandoned Project This project is not currently maintained and has been abandoned. Vulnreport Pentesting management and automation platform Vulnreport is a platform for managing penetration tests and generating well-formatted, actionable findings reports without the normal overhead that takes up...

metlo

Metlo API Security 保护您的API。 Metlo 是一个开源的API安全平台 Metlo 是一个开源API安全工具，您可以在15分钟内完成部署，它能够盘点您的端点、检测恶意行为，并实时拦截恶意流量。 实时检测API攻击。 自动拦截恶意行为者。 创建所有API端点和敏感数据的清单。 在API投入生产前主动进行安全测试。 免费开始使用！ 如果您想部署我们的开源产品，我们提供了面向 AWS、GCP、Azure 和 Docker 的部署说明。 功能特性 端点发现 - Metlo 扫描网络流量，为您API中的每一个端点建立清单。 敏感数据扫描 -...

apicheck

APICheck - El conjunto de herramientas DevSecOps para APIs REST .. image:: https://img.shields.io/badge/License-Apache%202.0-blue.svg :target: https://github.com/BBVA/apicheck/blob/master/LICENSE :alt: Licencia .. image:: https://readthedocs.org/projects/apicheck/badge/?version=latest :target:...

blind-sql-bitshifting

Blind SQL Injection via Bitshifting This is a module that performs blind SQL injection by using the bitshifting method to calculate characters instead of guessing them. It requires 7/8 requests per character, depending on the configuration. Usage root@kitploit: import blind-sql-bitshifting as x...

Windows-Exploit-Suggester

DESCRIPTION This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins. It requires the...

bluewall

BLUEWALL Bluewall 是一个为进攻型和防御型网络专业人士设计的防火墙框架。 该框架允许网络安全专业人员快速搭建其环境，同时保持在授权范围内。 致谢 灵感来源于 Andrew Benson 的 hostfw iptable 生成脚本。 功能特点 Bluewall root@kitploit: 配置防火墙 配置主机名 配置网络接口 支持的操作系统 root@kitploit: Redhat/CentOS 可生成 Windows 配置，但不执行。 命令行 root@kitploit: bluewall -c config/example.ini 参阅示例配置 工具...

hackazon

Hackazon Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful API’s used by a companion mobile app providing uniquely-effective...

envizon

envizon - 由 evait security 开发 生命周期结束（EOL） https://github.com/evait-security/envizon/issues/130 我们（evait security）已将内部项目文档迁移至 https://gitlab.com/invuls/pentest-projects/pcf。 网络可视化与渗透测试报告 版本 5.0 本工具由 evait security 设计、开发并维护。为了回馈安全社区，我们公开发布了内部使用并持续优化的先进网络可视化与漏洞报告工具 'envizon'。希望您的反馈能帮助我们进一步改进和完善它。 网站...