audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

birp

Big Iron Recon & Pwnage BIRP by @singe Dominic White @ SensePost Overview BIRP is a tool that will assist in the security assessment of mainframe applications served over TN3270. Much like what BURP and other web application proxies do for web application assessments, BIRP aims to do the same for...

hacker-container

Hacker Container Container with all the list of useful tools/commands while hacking Kubernetes Clusters. Read more about it in the blogpost https://blog.madhuakula.com/hacker-container-for-kubernetes-security-assessments-7d1522e96073 List of the tools/commands/utilities available in container are...

scrounger

Description Scrounger - एक व्यक्ति जो दूसरों से उधार लेता है या उन पर निर्भर रहता है। इस उपकरण के लिए दो मुख्य कारणों से इससे बेहतर कोई विवरण नहीं है, पहला यह कि यह उपकरण पहले से प्रकाशित कई अन्य उपकरणों से प्रेरणा लेता है, दूसरा कारण यह है कि यह मोबाइल एप्लिकेशन की कमजोरियों पर निर्भर करता है।...

httptoolkit

HTTP Toolkit...

React2Shell-Scanner

🔬 React2Shell Scanner Framework d'évaluation de la sécurité des applications web pour les applications React et Next.js ⚠️ Avis important Cet outil est conçu uniquement pour les tests de sécurité autorisés. ✅ Tests d'intrusion autorisés ✅ Programmes de bug bounty dans le cadre défini ✅ Recherche e...

PingCastleCloud

Ping Castle Cloud مهم: تم نقل الكود المصدري إلى مشروع PingCastle الرئيسي. هذا المشروع مؤرشف الآن. مقدمة Ping Castle Cloud هي أداة مصممة لتقييم مستوى أمان AzureAD بسرعة باستخدام منهجية تستند إلى تقييم المخاطر وإطار نضج. إنها لا تهدف إلى تقييم مثالي، بل إلى حل وسط يحقق الكفاءة. وهي مستوحاة من مشروع...

Atlas

أطلس أطلس هو مجموعة أدوات عبر المنصات ويندوز/لينكس لتنفيذ العمليات الشبكية وتقييم الأمان، مبنية على مكتبة بروتوكول Titanis من TrustedSec. وهو مستوحى من سير عمل NetExec/CrackMapExec: قوائم الأهداف، مجموعات بيانات الاعتماد، التعداد المعياري، ومخرجات وحدة التحكم المدمجة بصيغة HH:mm:ss + host -...

Dnsplit

Dnsplit - सब-डोमेन एन्यूमरेशन टूल 🕵️‍♂️ Dnsplit एक Python-आधारित उपकरण है जो सब-डोमेन को कुशलतापूर्वक खोजने के लिए डिज़ाइन किया गया है। 🚀 यह एक ऐसा प्रोजेक्ट है जो मेरे दिल के करीब है, क्योंकि मैं अभी भी कोडिंग और एथिकल हैकिंग के क्षेत्र दोनों में अपेक्षाकृत नया हूँ। अपनी शुरुआती स्थिति के बावजूद,...

viper

This repository is archived and development of Viper 1.x is discontinued. A full refactor of the project started withViper 2. Viper is a binary analysis and management framework. Its fundamental objective is to provide a solution to easily organize your collection of malware and exploit samples a...

Scout2

AWS Scout2 .. image:: https://travis-ci.org/nccgroup/Scout2.svg?branch=master :target: https://travis-ci.org/nccgroup/Scout2 .. image:: https://coveralls.io/repos/github/nccgroup/Scout2/badge.svg?branch=master :target: https://coveralls.io/github/nccgroup/Scout2 .. image::...

needle

Needle is an open source, modular framework to streamline the process of conducting security assessments of iOS apps. NOTE: This tool has been decomissioned and is no longer maintained. We are leaving the original project up for archival purposes. Needle was originally made to work with iOS 9 and...

aztarna

This repository has been archived and is not maintained any further. Refer to alurity for future progress on robot footprinting and fingerprinting. aztarna This repository contains Alias Robotics' aztarna, a footprinting tool for robots. Alias Robotics supports original robot manufacturers...

pipe-intercept

pipe-intercept Intercept Windows Named Pipes communication using Burp or similar HTTP proxy tools Named Pipes are very popular for interprocess communication on Windows. They are used in many applications, including Windows Remote Procedure Call RPC. The purpose of this tool is to allow security...

umap2

Umap2 Umap2 is the second revision of NCC Group's python based USB host security assessment tool. This revision will have all the features that were supported in the first revision: umap2emulate - USB device emulation umap2scan - USB host scanning for device support umap2detect - USB host OS...

ginger

Ginger Ginger is an open source security assessment tool that helps in assessing the security of a given Pentaho BA application instance. Please keep in mind that this project is still a work in progress, and not all features might be present or work as intended. Usage Ginger has only one mandato...

SecAssessment-GapDetection-Thesis

D3FENDer - Security Assessment & Gap Detection Tool Using MITRE ATT&CK & D3FEND Frameworks D3FENDer is a rule-based CLI tool developed by Michael for his thesis titled Development of a security assessment and gap detection system using the MITRE ATT&CK and D3FEND Frameworks. It is designed to...

WinFlesher

Like PingCastle went out for drinks with Bloodhound, and they actually decided to get some work done. 🍷 WinFlesher is an advanced attack surface security assessment framework designed to analyze, evaluate, and report on security postures, attack paths, and remediation strategies in complex...

helm-plugin-path-traversal-security-assessment

CVE-2026-35204 - Helm Plugin Path Traversal Arbitrary File Write Consultant-Style Cybersecurity Report Professional vulnerability assessment report for Helm plugin path traversal risk, including technical analysis, impact, remediation, and mitigation strategy. 📍 Report Snapshot...

apache-mina-deserialization-security-assessment

CVE-2024-52046 - Apache MINA Deserialization RCE Consultant-Style Cybersecurity Report Professional vulnerability assessment report for Apache MINA deserialization risk, including executive summary, technical impact, remediation, and mitigation strategy. 📍 Report Snapshot...