1493926 matches found
guac
GUAC: Graph for Understanding Artifact Composition Note: GUAC is under active development - if you are interested in contributing, please look at contributor guide. GUAC is an OpenSSF incubating project under the Supply Chain Integrity WG. Graph for Understanding Artifact Composition GUAC...
0
Open-source security workflows in your browser or coding agent. Backed by Y Combinator Β· The Swiss Applied AI & Cybersecurity Research Lab 0.security Β· Documentation Β· FoxGuard Latest release Get started Install on Apple Silicon macOS or x64/ARM64 Linux: curl -fsSL...
Java-Compressed-file-security
Java-Compressed-file-security java web Compressed File Security Vulnerability Test environment: Windows For Apache Tomcat/8.5.16 0x01 Crafting a Directory Traversal Malicious Compressed File Code: coding=utf-8 import zipfile import sys if name == "main": try: with open"404.jsp", "r" as f: binary ...
pentesting_scripts
Introduction This repository contains a random variety of penetration testing tools that consultants may find useful on their engagements. Feel free to make any changes, suggest features, or provide comments. Contact information Facebook: https://www.facebook.com/vonahisec Twitter:...
sysmon-config
sysmon-config | A Sysmon configuration file for everybody to fork This is a Microsoft Sysinternals Sysmon configuration file template with default high-quality event tracing. The file should function as a great starting point for system change monitoring in a self-contained and accessible package...
PMAT-labs
PMAT-labs π¬ Welcome to the labs for Practical Malware Analysis & Triage. !Release Versionimg-version-badgerelease !Course Linkcoursecourse-link !EULAimg-license-badgeeula π΄ WARNING π΄ Read this carefully before proceeding. This repository contains live malware samples for use in the Practical...
pwneye
pwneye is a focused and portable offensive security tool for working with IP cameras that expose ONVIF and RTSP services, aiming to give security researchers and hackers an easy way to handle discovery, authentication testing, metadata collection, stream validation, recording, and follow-up actio...
cve-2018-6574
cve-2018-6574...
Wifi-Purple
π WIFI-PURPLE π Automate script for wifi hacking This Python script, titled "WIFI-PURPLE," is a network tool designed for WiFi security testing and hacking. It provides a user-friendly command-line interface and utilizes popular network tools to perform various wireless network-related tasks...
hashview
Hashview v0.8.2 Hashview is a tool for security professionals to help organize and automate the repetitious tasks related to password cracking. It is broken into two compoents, the Hashview Server, and Hashview Agent. The Hashview Server is a web application that manages one or more agents,...
msnm-sensor
Description MSNM-S Multivariate Statistical Network Monitoring-Sensor shows the practical suitability of the approaches found in PCA-MSNM and in Hierarchical PCA-MSNM works. The first one present the MSNM approach and new multivariate statistical methodology for network anomaly detection while th...
CVE-2022-2588
CVE-2022-2588...
CVE
CVE CVE, reports, research...
promptmap
O O o.-. Humans, Do Not Resist! |/ ,-'-. / /, / /|.-.| / --O-- .--""" /\ /\ | o.o / Utku Sen's /|\ -'--' / /| | - | / | | | \ /| | | ' \ '/ \ ' | ' \ | ' / | ' \ | / | | | ./| /||| ./|||,| .// / / |-----| || || || || promptmap2 is a an automated prompt injection scanner for custom LLM...
Security-Datasets
Security Datasets The Security Datasets project is an open-source initiatve that contributes malicious and benign datasets, from different platforms, to the infosec community to expedite data analysis and threat research. Docs https://securitydatasets.com Goals Provide open portable datasets to...
Notes
Security Engineering at Google: My Interview Study Notes By nolang I am a security engineer at Google and these are the notes from when I was studying for the interviews. This is my first job in security and a lot of people have asked me how I studied. My notes consist mostly of a list of terms a...
zap-hud
ZAP Heads Up Display The HUD is no longer under active development Unfortunately the HUD is no longer under active development due to the fact no one is focusing on it. The HUD is a unique and innovative interface that we know some people love. But it also needs a non trivial amount of maintenanc...
skulto
Skulto Scan AI agent skills for prompt injection before you install them ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ β βββββββββββ ββββββ ββββββ βββββββββ βββββββ β β βββββββββββ βββββββ ββββββ ββββββββββββββββββ β β βββββββββββββββ βββ ββββββ βββ βββ βββ β β βββββββββββββββ βββ...
vamp-forticheck
vamp-forticheck Multi-Vendor Edge Device CVE Scanner β VampSecure Labs π¬π§ English Β· πͺπΈ EspaΓ±ol π¬π§ English vamp-forticheck is an asynchronous, non-destructive security scanner that detects CVE vulnerabilities across seven major network security vendors. It performs a structured three-phase analysis:...
FinalRecon
Twitter - Telegram - thewhiteh4t's Blog FinalRecon is an all in one automatic web reconnaissance tool written in python. Goal of FinalRecon is to provide an overview of the target in a short amount of time while maintaining the accuracy of results. Instead of executing several tools one after...