wphardening

WPHardening 모든 WordPress 설치의 보안을 강화합니다. ❮ 참고 ❯ 이 도구는 정기적으로 새 버전을 출시합니다. 최신 버전을 사용하려면 종속성을 자주 업데이트하세요. 새로운 기능에 대해 알아보려면 changelog 또는 CHANGELOG.md를 확인하세요. 설치 WPHardening을 설치하려면 하나의 콘솔 명령을 실행해야 합니다: $ pip install -r requirements.txt 사용법 $ python wphardening.py -h \ \ / / | | | | | | \ \ /\ / /| | |...

wphardening

WPHardening Fortify the security of any WordPress installation. ❮ NOTE ❯ This tool releases new versions on a regular basis. Make sure to update your dependencies frequently to get the latest version. Check out the changelog or CHANGELOG.md to learn about the new features. Installation Installing...

route-detect

route-detect Find authentication authn and authorization authz security bugs in web application routes: Routes fromkoel streaming server Web application HTTP route authn and authz bugs are some of the most common security issues found today. These industry standard resources highlight the severit...

cve-2020-1066

cve-2020-1066 분석 https://blog.csdn.net/qq37353105/article/details/114481214...

freddy

Freddy the Serialisation Killer - Deserialization Bug Finder A Burp Suite extension to aid in detecting and exploiting serialisation libraries/APIs. This useful extension was originally developed by Nick Bloor @nickstadb for NCC Group and is mainly based on the work of Alvaro Muñoz and Oleksandr...

HawkScan

HawkScan Security Tool for Reconnaissance and Information Gathering on a website. python 3.x News Installation Special features TODO Usage Exemples Thanks Donations Tools used Wiki News v2.x - Add proxy function - Redefining priorities/tasks - Let's debug certificate subdomains results - Display...

awesome-cybersecurity-blueteam

Awesome Cybersecurity Blue Team サイバーセキュリティのブルーチームのための、素晴らしいリソース、ツール、その他のキラリと光るものを集めたリストです。...

Chaya

Chaya Right To Privacy Chaya protects your privacy through steganography, cryptography and compression. It effectively encrypts your payloads using AES-256-GCM cryptography, embeds them using LSB-LPS steganography technique into images and compresses them using FLIF to evade detection by performi...

lab_security_apache_spark_emulation_detection

This repository does not have a README...

huskyCI

This article can also be read inBrazilian Portuguese. Introduction huskyCI is an open source tool that orchestrates security tests and centralizes all results into a database for further analysis and metrics. It can perform static security analysis in Python BanditBandit and SafetySafety, Ruby...

CVE-2023-49438

CVE-2023-49438 Proof of Concept Description An open redirect vulnerability in the python package Flask-Security-Too =2.1.0 the autocorrectloc...

dotdotslash

dotdotslash An tool to help you search for Directory Traversal Vulnerabilities Benchmarks Platforms that I tested to validate tool efficiency: DVWA low/medium/high bWAPP low/medium/high Screenshots Instalation You can download the last version cloning this repository git clone...

legitify

Strengthen the security posture of your source-code management! Detect and remediate misconfigurations, security and compliance issues across all your GitHub and GitLab assets with ease 🔥 by Legit Security. Wonder what Legit Security does? Legit Security is an application security posture...

hackazon

Hackazon Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful API’s used by a companion mobile app providing uniquely-effective...

ship-safe

The independent security agent for AI-written software. It finds issues, investigates whether they are real, and shows you the evidence. Website · Docs · Security & Data Flow · Benchmark · Pricing · Blog · Contribute Ship Safe CLI Ship Safe runs locally in your repo and works in two layers. A...

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 : Palo Alto OS Command Injection - Proof of Concept POC Disclamer This is a tool for security engineering and vulnerability assessment teams to quickly verify the existance of the vulnerability on their assets across the environment...

blackhat-arsenal-tools

Black Hat Arsenal Tools Official Account Arsenal This github account maps to the Black Hat Arsenal tools since its inception in 2011. For readibility, the tools are classified by category and not by session. This account is maintained by ToolsWatch.org the official organizer of the Black Hat...

PiFinger

| \ | | | | | | | | .--. .--./ .---. .--. | / | | | | .-. | / /';/ /\ /'\ | | | | | | | | | | | | \ .//| ., | | || || ||.', '..' --- Just for fun and security @octosec --- --- W:besimaltinok.com | T:altnokbesim...

ChopChop

ChopChop ChopChop is a command-line tool for dynamic application security testing on web applications, initially written by the Michelin CERT. Its goal is to scan several endpoints and identify exposition of services/files/folders through the webroot. Checks/Signatures are declared in a config fi...

dorkish

Dorkish During reconaissance phase or when doing OSINT , we often use google dorking and shodan and thus the idea of Dorkish. Dorkish is a Chrome extension tool that facilitates custom dork creation for Google and Shodan using the builder and it offers prebuilt dorks for efficient reconnaissance...