1446244 matches found
abaddon
Abaddon Red team operations involve miscellaneous skills, last several months and are politically sensitive; they require a lot of monitoring, consolidating and caution. Wavestone’s red team operations management software, Abaddon, has been designed to make red team operations faster, more...
inql
InQL v6.1.2 - Burp Extension for Advanced GraphQL Testing !Doyensec Research...
api-security-audit-action
Acción de GitHub: Pruebas estáticas de seguridad de API REST de 42Crunch La acción de Pruebas estáticas de seguridad de API REST localiza contratos de API REST que siguen la Especificación OpenAPI OAS, anteriormente conocida como Swagger y ejecuta comprobaciones de seguridad exhaustivas sobre...
trivy-action
Trivy Action GitHub Action for Trivy Table of Contents Usage Scan CI Pipeline Scan CI Pipeline w/ Trivy Config Cache Trivy Setup Scanning a Tarball Using Trivy with templates Using Trivy with GitHub Code Scanning...
GuardScan
🛡️ GuardScan 100% Gratuito y de Código Abierto • Escaneo de Seguridad Centrado en la Privacidad y CLI de Revisión de Código con IA root@kitploit: / | | | | / \ | | \ / | / | / \ | \ | | / | | | | | | | | | |/ \ | | | | | | \ | | / \ | | | | | | | | | | || | || / | | || | | | / | |\ | || | || |...
imagick_secure_puppet
solo incluye la clase y si imagick existe... reemplazará el policy.xml con una versión base de ubuntu 14.04 ligeramente modificada con políticas adicionales implementadas Ejecutando mediante puppet apply: root@kitploit: $ git clone https://github.com/jackdpeterson/imagicksecurepuppet.git $ mv...
cloudquery
CloudOps, without the chaos CloudQuery is a cloud asset inventory built for platform teams. Sync your cloud infrastructure metadata into your data warehouse, powering insights and automation. Unify data and provide context across AWS, Azure, GCP, and 70+ cloud and SaaS sources such as Wiz, Finout...
CVE-2021-41644
Este repositorio no tiene un README...
LambdaGuard
LambdaGuard AWS Lambda is an event-driven, serverless computing platform provided by Amazon Web Services. It is a computing service that runs code in response to events and automatically manages the computing resources required by that code. LambdaGuard is an AWS Lambda auditing tool designed to...
CaA
信息洞察，智探千方！ 第一作者： EvilChen 第二作者： 0chencc（米斯特安全团队） 第三作者：MingXi（米斯特安全团队） README 版本: English | 简体中文 项目介绍 CaA 是一款网络安全（漏洞挖掘）领域下的辅助型项目，主要用于分析、拆解HTTP协议报文，提取HTTP协议报文中的参数、路径、文件、参数值等信息，并统计出现的频次，帮助用户构建出具有实战应用价值的Fuzzing字典。除此之外CaA可以生成各类HTTP请求提供给BurpSuite Intruder用于Fuzzing工作。 CaA 的设计思想来源于Web...
dismap
🌀 Dismap - Asset discovery and identification tool 中文 Readme Dismap positioning is an asset discovery and identification tool. It can quickly identify protocols and fingerprint information such as web/tcp/udp, locate asset types, and is suitable for internal and external networks. It assists red...
CVE-2019-0803
CVE-2019-0803 PoC de elevación de privilegios de Win32k Captura de pantalla Referencia robar token de seguridad https://github.com/mwrlabs/CVE-2016-7255...
cloud-sniper
Cloud Sniper : Detection-as-code platform Cloud Sniper is a comprehensive platform meticulously designed to streamline Cloud Security Operations. It swiftly responds to security incidents by analyzing and correlating cloud artifacts, ensuring a holistic view of the company's cloud security postur...
cloud-sniper
Cloud Sniper：检测即代码平台 Cloud Sniper 是一个全面设计的平台，旨在简化云安全运营。它通过分析和关联云工件，迅速响应安全事件，确保护航公司云安全态势的全局视图。 作为集中式事件响应枢纽，我们的平台利用云原生工件和开源技术执行自动化操作。这种方法赋能社区以多样化的安全用例丰富项目。 Cloud Sniper 高效处理安全信息流，自主保护云基础设施。其分析模块关联入侵指标（IOC），揭示攻击者的战术、技术与程序（TTP），为分析师提供增强的安全发现。 用户通过 Cloud Sniper...
yasuo
YASUO @0xsauby Description Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise th...
Leaktopus
Deprecation Notice Dear Leaktopus Users, We want to inform you that the Leaktopus project will be officially deprecated. After careful evaluation, we have decided to discontinue active development and maintenance of this library. What Does This Mean for You? No New Features or Updates: We will no...
aura
This repository has moved to a new location: https://github.com/SourceCode-AI/aura Security Auditing and code introspection About the problem The current trend in the development is to use a lot of packages in the development phase, even if they provide only trivial functionality and consist of 1...
weevely3
Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...
mimipenguin
MimiPenguin 2.0 A tool to dump the login password from the current linux desktop user. Adapted from the idea behind the popular Windows tool mimikatz. This was assigned CVE-2018-20781 https://vulners.com/cve/CVE-2018-20781. Fun fact it's still not fixed after GNOME Keyring 3.27.2 and still works ...