Sn1per

Products Attack Surface Management About Sn1per News Contact Demo Pricing Shop Sn1per — The Offensive-Security Platform for Modern Teams Recon, scanning, exploitation, and reporting in a single workspace — whether you're a solo pentester or a global SOC. Sn1per Professional 2026 is here The large...

CVE-2024-3094

CVE-2024-3094 Detectar CVE-2024-3094...

CVE-2024-10924

CVE-2024-10924 Really Simple Security Free, Pro, and Pro Multisite 9.0.0 – 9.1.1.1 – Authentication Bypass Description The Really Simple Security Free, Pro, and Pro Multisite plugins for WordPress are vulnerable to authentication bypass in versions 9.0.0 to 9.1.1.1. This is due to improper user...

threat-modeling-playbook

Intro We aim to improve product and software security with our new threat modeling playbook. We consider threat modeling as a foundational activity to improve your software assurance. We are convinced that a good threat modeling practice will measurably decrease security issues of delivered...

Prober

Check network assumptions reproducibly This project uses Ansible to generate BATS test files verifying security assuptions about network infrastructure. Tests are run from probe machines "prober nodes " to which Prober is deployed. This tool is meant for reproducible, automated testing of own...

OpenHunterAI

OpenHunterAI Your local AI red team. Attacker-style reasoning for web, API, and LLM application security. Project website · Quick start · Agent skill · Assessment model · Architecture · Docs · Star history OpenHunterAI brings scope, scan activity, findings, and remediation into one local workspac...

ElectricEye

ElectricEye ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best...

decomp2dbg

decomp2dbg Reverse engineering involves both static decompiler and dynamic debugger analysis, yet we often use these analyses without sharing knowledge between the two. In the case of reversing static binaries, context switching between debugger assembly and the symbols you have reversed in...

awesome-osint-arsenal

🔍 AWESOME OSINT ARSENAL The Ultimate Open-Source Intelligence + Security Toolkit 751+ tools · 50 categories · Multi-distro installers · Georgian OSINT · Termux support The most comprehensive OSINT and security toolkit on the internet — every tool with installation instructions or a verified link....

cve-2023-50164

Disclaimer Notwithstanding anything that may be contained to the contrary in your agreements with Sysdig, Sysdig provides no support, no updates, and no warranty or guarantee of any kind with respect to these scripts, including as to their functionality or their ability to work in your...

shodan-eye

Shodan Eye This tool collects all information about all devices that are directly connected to the internet with the specified keywords that you enter. This way, you get a complete overview. Here you can read the latest article about Shodan Eye:...

owtf

Offensive Web Testing Framework OWTF OWASP OWTF helps penetration testers stay efficient and aligned with security standards such as the OWASP Web Security Testing Guide, the OWASP Top 10, PTES, and NIST so that they have more time to: See the big picture and think outside the box. Efficiently...

SecLists

About SecLists SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more. The goal is to...

BlueTeam-Tools

BlueTeam-Tools This github repository contains a collection of 70+ tools and resources that can be useful for blue teaming activities. Some of the tools may be specifically designed for blue teaming, while others are more general-purpose and can be adapted for use in a blue teaming context. 🔗 If...

burpgpt

!IMPORTANT Announcing the launch of BurpGPT Pro, the edition specifically tailored to meet the needs of professionals and cyber boutiques. Discover a host of powerful features and a user-friendly interface that enhances your capabilities and ensures an optimal user experience. To access these...

CMS-Made-Simple-2.2.10---SQL-Injection

CMS-Made-Simple-2.2.10---SQL-Injection Google Dorks for detecting CMS Made Simple 2.2.10 SQL Injection CVE-2019-9053. Built for security auditing and patch verification...

ClawGuard

ClawGuard 🛡️ 中文版 Our Project:https://github.com/SafeAgent-Beihang/clawguard ClawGuard is a security toolkit designed to mitigate risks associated with autonomous agents, such as OpenClaw and other LLM-driven entities. As agents gain more autonomy to execute code, access APIs, and manage files,...

wifi-passview

WiFi Passview WiFi Passview is an open-source batch script-based program that can recover your WiFi Password easily in seconds. This is for Windows OS only. Basically, this scripted program has the same function as other passview software such as webpassview and mailpassview. Disclaimer : WiFi...

kube-score

kube-score kube-score is a tool that performs static code analysis of your Kubernetes object definitions. The output is a list of recommendations of what you can improve to make your application more secure and resilient. You can test kube-score out in the browser with the online demo source...

SentryPeer

Protect your SIP Servers from bad actors Special thanks to Deutsche Telekom Security GmbH for sponsoring us in 2024. Why not give us a star and follow us onTwitter! Table of Contents Introduction Overview Features Talks Adoption Design Docker Environment Variables Installation Homebrew macOS or...