uncaptcha

uncaptcha Defeating Google's audio reCaptcha system with 85% accuracy. Disclaimer unCaptcha is intended to be a proof of concept. As of the time of our paper, we found it to successfully solve reCaptcha's audio challenges with 85% success. Since that time, reCaptcha appears to include some...

CVE-2024-38475

This repository does not have a README...

pentesterlab-cve-2018-6574

This repository does not have a README...

CVE-2025-29927

This repository does not have a README...

Portspoof

Portspoof Portspoof emulates open ports and service signatures across all 65535 TCP ports, turning the reconnaissance phase from a quick scan into a long, resource-intensive process. Scanners see thousands of convincing but fake services, making it impractical to identify the real attack surface...

CVE-2023-3450

CVE-2023-3450...

CaptfEncoder

CaptfEncoder English | 中文 | V1 | V2 Captfencoder is a opensource rapid cross platform network security tool suite, providing network security related code conversion, classical cryptography, cryptography, asymmetric encryption, miscellaneous tools, and aggregating all kinds of online tools...

docker-bench-security

Docker Bench for Security Docker Bench for Security es un script que verifica docenas de buenas prácticas comunes en torno al despliegue de contenedores Docker en producción. Todas las pruebas están automatizadas y se basan en el CIS Docker Benchmark v1.6.0. Lo ponemos a disposición como una...

sandmap

sandmap Descripción • Cómo Usar • Línea de Comandos • Configuración • Requisitos • Otros • Contribuir • Licencia • Wiki Descripción sandmap es una herramienta que apoya el reconocimiento de redes y sistemas utilizando el masivo motor de Nmap. Proporciona una interfaz amigable, automatiza y aceler...

cipherscan

CipherScan Cipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl sclient command line. Cipherscan is meant to ru...

giskard-oss

Evals, Red Teaming and Test Generation for Agentic Systems Modular, Lightweight, Dynamic and Async-first...

dvna

Aplicación NodeJS Vulnerable a Propósito DVNA La Aplicación NodeJS Vulnerable a Propósito DVNA es una aplicación NodeJS simple para demostrar las Vulnerabilidades del Top 10 de OWASP y guiar sobre cómo corregir y evitar estas vulnerabilidades. La rama de fixes contendrá las correcciones para las...

datadome-vm

DataDome VM Analysis Summary This repository documents the first public version of DataDome's in-browser JavaScript virtual machine VM used in their CAPTCHA/interstitial flow. This analysis covers: Bytecode loading and decoding mechanisms VM memory layout and architecture A proof-of-concept...

WebSecurityProject

WebSecurityProject Analysis and replication of CVE-2022-23988 and CVE-2022-34265...

uro

uro Usar una lista de URLs para pruebas de seguridad puede ser tedioso, ya que hay muchas URLs con contenido poco interesante/duplicado; uro tiene como objetivo solucionar eso. No realiza ninguna solicitud http a las URLs y elimina: URLs incrementales, p. ej. /page/1/ y /page/2/ publicaciones de...

nishang

Nishang Nishang es un conjunto de scripts y payloads que permite el uso de PowerShell para seguridad ofensiva, pruebas de penetración y red teaming. Nishang es útil durante todas las fases de las pruebas de penetración. Por Nikhil Mittal Fundador de Altered Security - ¡Formación práctica en red...

assetfinder

assetfinder Find domains and subdomains potentially related to a given domain. Install If you have Go installed and configured i.e. with $GOPATH/bin in your $PATH: root@kitploit: go get -u github.com/tomnomnom/assetfinder Otherwise download a release for your platform. To make it easier to execut...

CVE-2019-19231

CVE-2019-19231 https://techdocs.broadcom.com/us/product-content/recommended-reading/security-notices/CA20191218-01-security-notice-for-ca-client-automation-agent-for-windows.html...

OBO

Off-By-One Diapositivas de las conferencias Off-By-One Ver todas las charlas Año ↓| Diapositivas| Lista de reproducción de YouTube ---|---|--- 2024| Diapositivas del Día 1...

AppSecEzine

AppSec Ezine Raising awareness towards the prevention of security risks is challenging. Most people are unaware of or just don’t have access to the right information. Keeping up the pace in the tech world is a golden rule. If you are not ready to deal with security issues, you are heading in the...