1446244 matches found
cicd-goat
Deliberately vulnerable CI/CD environment. Hack CI/CD pipelines, capture the flags. π© Created by Cider Security Acquired by Palo Alto Networks. Table of Contents...
dnsrecon
DNSRecon DNSRecon is a Python port of a Ruby script that I wrote to learn the language and about DNS in early 2007. This time I wanted to learn about Python and extend the functionality of the original tool and in the process re-learn how DNS works and how could it be used in the process of a...
AuraBorealisApp
AuraBorealis: Do You Know What's In Your Python Packages? About AuraBorealis is a web application for visualizing anomalous and potentially malicious code in Python package registries. It uses security audit data produced by scanning the Python Package Index PyPI via Aura, a static analysis...
whatfiles
whatfiles Whatfiles is a Linux utility that logs what files another program reads/writes/creates/deletes on your system. It traces any new processes and threads that are created by the targeted process as well, and records whether each operation succeeded. Rationale: I've long been frustrated at...
LAST
L.A.S.T. Linux Automated Security scanning Tool the LAST tool you will ever use! This tool is used to automate the recon proces of Red Team Excercises. It gathers all the information and reports it back in an easy to read format. The script is made so it is possible for everyone to include his ow...
driftwood
Driftwood β οΈ The Driftwood CLI tool is no longer supported. Please use TruffleHog instead! β οΈ Driftwood is a tool that can enable you to lookup whether a private key is used for things like TLS or as a GitHub SSH key for a user. Driftwood performs lookups with the computed public key, so the...
JoySafety
JoySafety β Large Model Security Framework π Table of Contents Project Introduction β¨ Features π Quick Start π User Guide π Best Practices ποΈ Architecture Design π οΈ Development π License π Roadmap Star History new release β Prompt injection detection model fully upgraded : Training system...
PyCk
PyCk For complete details please take a look at the wiki. Installation git clone https://github.com/Naategh/PyCk.git cd PyCk pip3 install -r requirements.txt Install via docker git clone https://github.com/Naategh/PyCK.git docker build . Requirements Python 3.5 Roadmap This is an educational...
wwwgrep
WWWGrep OWASP Foundation Web Respository Author: Mark Deen & Aditi Mohan Introduction WWWGrep is a rapid search βgreppingβ mechanism that examines HTML elements by type and permits focused single, multiple file based URLs and recursive with respect to root domain or not searches to be performed...
CVE-2023-0157
CVE ID : CVE-2023-0157 Vulnerability Type : Directory Traversal Description : The All-In-One Security AIOS plugin for WordPress is vulnerable to directory traversal in versions up to, and including, 5.1.4. This allows authenticated attackers with administrator-level permissions to read the conten...
mcpsafetywarden
MCP safety warden is a proxy server that wraps any MCP server and adds behavioral profiling, security scanning, risk gating, and safe execution to its tools...
ggshield
ggshield: protect your code with GitGuardian...
commando-vm
What is CommandoVM? Complete Mandiant Offensive VM "CommandoVM" is a comprehensive and customizable, Windows-based security distribution for penetration testing and red teaming. CommandoVM comes packaged with a variety of offensive tools not included in Kali Linux which highlight the effectivenes...
santa
Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...
autoresponder
AutoResponder Carbon Black Response IR tool for hunting threats in an environment What is it? AutoResponder is a tool aimed to help people to carry out their Incident Response tasks WITH the help of Carbon Black Response's awesome capabilities and WITHOUT much bothering IT/System/Network Teams Wh...
MemShellParty
MemShellParty δΈζ | English !WARNING This tool is intended only for security researchers, network administrators, and related technical personnel for authorized security testing, vulnerability assessment, and security auditing. Using this tool for any unauthorized network attack or penetration tes...
findom-xss
FinDOM-XSS FinDOM-XSS is a tool that allows you to finding for possible and/ potential DOM based XSS vulnerability in a fast manner. Installation root@kitploit: $ git clone https://github.com/dwisiswant0/findom-xss.git --recurse-submodules Dependencies: LinkFinder Usage To run the tool on a targe...
chaps
CHAPS: Configuration Hardening Assessment PowerShell Scripts CHAPS is a set of read-only scripts for checking Windows system security configuration where additional assessment software such as Microsoft Policy Analyzer or commercial tools cannot be installed. It is designed for Industrial Control...