1434193 matches found
ct-exposer
Discover sub-domains by searching through Certificate Transparency logs What is CT? Certificate Transparency CT is an experimental IETF standard. The goal of it was to allow the public to audit which certificates were created by Certificate Authorities CA. TLS has a weakness that comes from the...
CVE-2024-10924-Wordpress-Docker
CVE-2024-10924 : Vulnérabilité de contournement d'authentification dans Wordpress Really Simple Security sur Docker Description Les plugins Really Simple Security Free, Pro et Pro Multisite pour WordPress, versions 9.0.0 à 9.1.1.1, sont affectés par une vulnérabilité de contournement...
kiterunner
Kiterunner Introduction For the longest of times, content discovery has been focused on finding files and folders. While this approach is effective for legacy web servers that host static files or respond with 3xx’s upon a partial path, it is no longer effective for modern web applications,...
skf-flask
OLD and archived Security Knowledge Framework Please note that this is the archived version of SKF, we are busy building a brand new Security Knowledge Framework. For more updates please visit this github repo: https://github.com/Security-Knowledge-Framework/Platform...
cipherscan
CipherScan Cipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl sclient command line. Cipherscan is meant to ru...
cloud-sniper
Cloud Sniper : Detection-as-code platform Cloud Sniper is a comprehensive platform meticulously designed to streamline Cloud Security Operations. It swiftly responds to security incidents by analyzing and correlating cloud artifacts, ensuring a holistic view of the company's cloud security postur...
hash-identifier
hash-identifier Software to identify the different types of hashes used to encrypt data and especially passwords. Encryption formats supported: ADLER-32 CRC-32 CRC-32B CRC-16 CRC-16-CCITT DESUnix FCS-16 GHash-32-3 GHash-32-5 GOST R 34.11-94 Haval-160 Haval-192 110080 ,Haval-224 114080 ,Haval-256...
cloud-security-audit
Аудит безопасности облака...
cumulus
Application Weakness Monitoring Software What's Cumulus Cumulus is a service that helps you monitor and fix security weakness in realtime. The issues will be reported on web dashboard. It's very simple and powerful...
cumulus
Logiciel de surveillance des faiblesses d'applications Qu'est-ce que Cumulus Cumulus est un service qui vous aide à surveiller et corriger les faiblesses de sécurité en temps réel. Les problèmes sont signalés sur un tableau de bord web. C'est très simple et puissant...
salus
Salus: Guardian of Code Safety and Security 🔍 Overview Salus Security Automation as a Lightweight Universal Scanner, named after the Roman goddess of protection, is a tool for coordinating the execution of security scanners. You can run Salus on a repository via the Docker daemon and it will...
decider
Decider This work is licensed under a Creative Commons Attribution 4.0 International License. This project makes use of MITRE ATT&CK® - ATT&CK Terms of Use. 📰 3.0.0 - Kiosk is Here Decider is now login-less and responsive. Content updates have been simplified to copying files and restarting Docke...
kscan
Kscan - Escáner integral ligero Readme en Chino | Readme en Inglés 0 Aviso de exención de responsabilidad El autor no participó en la Operación XX, no rastreen Esta herramienta está destinada únicamente a actividades legítimas de seguridad empresarial y al aprendizaje personal. Si necesita probar...
tarnish
tarnish tarnish est un outil d'analyse statique conçu pour aider les chercheurs dans les revues de sécurité des extensions Chrome. Il automatise une grande partie du travail de routine et vous aide à identifier rapidement les vulnérabilités de sécurité potentielles. Cet outil accompagne l'article...
tarnish
tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...
seal-security-nuget-demo-net7
Browser + CLI Demo NuGet/C — .NET 7 Edition Зачем форк .NET 7? Это переориентированный форк канонического seal-security-nuget-demo который предназначен для net9.0. История эксплойта, контроллеры и список запатченных пакетов идентичны — отличается толькоTargetFramework. Он существует потому, что...
CVE-2025-55182-Exploit-extension
Détecteur d'empreintes RSC Une extension Chrome pour détecter les empreintes des React Server Components RSC et du Next.js App Router sur les pages web. ⚠️ Avis important Cette extension est destinée uniquement à des fins éducatives et de recherche en sécurité. Elle inclut des fonctionnalités...
drupwn
Drupwn v1.0.4 Description Drupwn prétend offrir un moyen efficace de collecter des informations sur Drupal. Énumération Exploitation Plus d'explications dans notre article de blog. Versions testées supportées Drupal 7 Drupal 8 Mode d'exécution Drupwn peut être exécuté en utilisant deux modes...
rdpy
RDPY Remote Desktop Protocol in twisted python. RDPY is a pure Python implementation of the Microsoft RDP Remote Desktop Protocol protocol client and server side. RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA...