Stardox

Available in: Sponsors Huge thanks to the companies supporting Stardox: | | | ---|---|---|--- About Stardox is an advanced GitHub stargazers' information gathering tool. It scrapes GitHub and displays the results in a tree view, letting you collect data on any repository's stargazers — yours or...

scannerl

Scannerl Scannerl is a modular distributed fingerprinting engine implemented by Kudelski Security. Scannerl can fingerprint thousands of targets on a single host, but can just as easily be distributed across multiple hosts. Scannerl is to fingerprinting what zmap is to port scanning. Scannerl wor...

sish

sish Open source SSH tunneling for HTTPS, WSS, TCP, aliases, and SNI. If you like the simplicity of serveo/ngrok-style sharing but want to use plain SSH and run your own infrastructure, sish is built for that. No custom client required for end users Public and private tunnel workflows Docker and...

CVE-2026-100885

A vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown function of the file packages/Webkul/Installer/src/Http/Middleware/CanInstall.php of the component admin-config-setup API Endpoint. The manipulation results in authorization bypass. The attack may be launched...

attifyos

AttifyOS v3.0 AttifyOS is a distro intended to help you perform security assessment and penetration testing of Internet of Things IoT devices. It saves you a lot of time by providing a pre-configured environment with all the necessary tools loaded. The new version is based on Ubuntu 18.04 64-Bit ...

gophish

Gophish fork This is a fork of Gophish: Open-Source Phishing Toolkit Gophish New features This fork has a focus on running real-life phishing campaigns for a single customer. The following features are added: Script to automatically setup a fully configured Gophish instance on a fresh VPS. This...

Metabase-Pre-Auth-RCE-POC

CVE-2023-38646 — Metabase Remote Code Execution RCE Proof-of-Concept Overview This repository documents a Proof-of-Concept PoC security research project analysing CVE-2023-38646 , a critical pre-authentication Remote Code Execution RCE vulnerability affecting vulnerable versions of Metabase. The...

dvna

Damn Vulnerable NodeJS Application DVNA Damn Vulnerable NodeJS Application DVNA is a simple NodeJS application to demonstrate OWASP Top 10 Vulnerabilities and guide on fixing and avoiding these vulnerabilities. The fixes branch will contain fixes for the vulnerabilities. Fixes for vulnerabilities...

filtron

Filtron Reverse HTTP proxy to filter requests by different rules. Can be used between production webserver and the application server to prevent abuse of the application backend. The original purpose of this program was to defend searx, but it can be used to guard any web application. Installatio...

gmailc2

gmailc2 root@kitploit: A Fully Undetectable C2 Server That Communicates Via Google SMTP to evade Antivirus Protections and Network Traffic Restrictions Note: root@kitploit: This RAT communicates Via Gmail SMTP or u can use any other smtps as well but Gmail SMTP is valid because most of the...

CVE-2023-38646-PoC

CVE-2023-38646 - Metabase RCE pre-autenticación Metabase de código abierto anterior a 0.46.6.1 y Metabase Enterprise anterior a 1.46.6.1 permiten a los atacantes ejecutar comandos arbitrarios en el servidor, con el nivel de privilegios del servidor. No se requiere autenticación para la explotació...

hacktricks-cloud

HackTricks Cloud Hacktricks logos & motion designed by @ppieranacho .1 Run HackTricks Cloud Locally The workflow below follows Git's documented clone, checkout, and pull operations and the repository's published language branches and container setup.238910 root@kitploit: Download latest version o...

metabase-pre-auth-rce-poc

Metabase Pre-Auth RCE CVE-2023-38646 POC Este es un script escrito en Python que permite la explotación de la falla de seguridad del software Metabase descrita en CVE-2023-38646. El sistema es vulnerable en versiones anteriores a la 0.46.6.1 , en la edición de código abierto, y anteriores a la...

PwnBox-Kali

PwnBox-Kali Script Bash para automatizar el proceso de configurar una nueva máquina virtual Kali Linux para que se parezca a HTB PwnBox Solo un script para automatizar todo el proceso de ajustar e instalar herramientas en una nueva VM de Kali Linux Fue hecho principalmente para mí pero quizás...

dockernymous

DESPLÁZATE HACIA ABAJO PARA REQUISITOS E INSTRUCCIONES NO FUNCIONARÁ SI NO LOS SIGUES Advertencia: Dockernymous se encuentra en una fase muy temprana de desarrollo. Úsalo solo con fines educativos. ¡NO lo uses si dependes de un anonimato fuerte! Novedades 13.10.2018 Cambié completamente la lógica...

CorelightForSecOps

Recopilar registros del Sensor de Corelight Este documento describe cómo puede recopilar registros del Sensor de Corelight mediante la configuración del Sensor de Corelight y un forwarder de Chronicle. Este documento también enumera los tipos de registro admitidos y las versiones de Corelight...

pyt

.. image:: https://travis-ci.org/python-security/pyt.svg?branch=master :target: https://travis-ci.org/python-security/pyt .. image:: https://readthedocs.org/projects/pyt/badge/?version=latest :target: http://pyt.readthedocs.io/en/latest/?badge=latest .. image::...

setup-ipsec-vpn

English | 简体中文 | 繁體中文 | 日本語 | Русский Scripts de instalación automática de servidor VPN IPsec Configura tu propio servidor VPN IPsec en solo unos minutos, con IPsec/L2TP, Cisco IPsec e IKEv2. Una VPN IPsec cifra tu tráfico de red, de modo que nadie entre tú y el servidor VPN pueda espiar tus dato...

CVE-2023-38646

Metabase Pre Authentication RCE CVE-2023-38646 Hemos proporcionado dos archivos:- CVE-2023-38646-POC.py para comprobar si alguna instancia de Metabase está filtrando el setup-token. CVE-2023-38646-Reverse-Shell.py para obtener una reverse shell en la máquina controlada por el atacante...

WebPort-v1.19.1-Reflected-XSS

WebPort-v1.19.1-XSS-Reflejado El XSS reflejado en WebPort-v1.19.1 afecta a los usuarios que abren un enlace maliciosamente elaborado o una página web de terceros. CVE-2019-12460 https://vulners.com/cve/CVE-2019-12460 PoC-1 Para explotar la vulnerabilidad, alguien podría usar la solicitud...