jsecret

jsecret Outil simple et rapide pour détecter les données sensibles dans le code source, comme les fichiers JavaScript ou autres. Installation go install -v github.com/raoufmaklouf/jsecret@latest Utilisation cat jsfiles.txt | jsceret echo http://test.tld/main.js | jsecret Un grand merci à...

pwndrop

pwndrop is a self-deployable file hosting service for sending out red teaming payloads or securely sharing your private files over HTTP and WebDAV. If you've ever needed to quickly set up an nginx/apache web server to host your files and you were never happy with the limitations of python -m...

uoftctf-2025-chals-public

Конкурс Capture the Flag Университета Торонто 2025 Этот репозиторий содержит решения задач, представленных на UofTCTF 2025. Исходный код также включён в большинство директорий с задачами. Задачи Название задачи| Количество решений| Категория ---|---|--- Забавный шифр| 231/1510| Крипто Зачарованны...

wahh_extras

wahhextras The Web Application Hacker's Handbook - Contenuti Extra Per tutti voi che avete letto "The web application hacker's handbook vol2", ci sono diversi riferimenti a extra, domande, codice sorgente che non sono facili da trovare. Ho raccolto tutto in questo repository. TOC Penetration test...

klar

Klar Integration of Clair and Docker Registry supports both Clair API v1 and v3 Klar is a simple tool to analyze images stored in a private or public Docker registry for security vulnerabilities using Clair https://github.com/coreos/clair. Klar is designed to be used as an integration tool so it...

hardcodes

hardcodes extract strings from source code hardcodes is a utility for searching strings hardcoded by developers in programs. It uses a modular tokenizer that can handle comments, any number of backslashes & nearly any syntax you throw at it. Yes, it is designed to process any syntax and following...

goscan

GoScan is an interactive network scanner client, featuring auto-completion, which provides abstraction and automation over nmap. Although it started as a small side-project I developed in order to learn @golang, GoScan can now be used to perform host discovery, port scanning, and service...

bfac

BFAC Advanced Backup-File Artifacts Testing for Web-Applications BFAC Backup File Artifacts Checker is an automated tool that checks for backup artifacts that may disclose the web-application's source code. The artifacts can also lead to leakage of sensitive information, such as passwords,...

Intelbras WIN 300/WRN 342 - Credentials Disclosure

Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers to discover credentials by reading the defwirelesspassword line in the HTML source code. id: CVE-2021-3017 info: name: Intelbras WIN 300/WRN 342 - Credentials Disclosure author: pikpikcu severity: high description:...

Kyocera TASKalfa printer - Path Traversal

CCRX has a Path Traversal vulnerability. Path Traversal is an attack on web applications. By manipulating the value of the file path, an attacker can gain access to the file system, including source code and critical system settings. id: CVE-2023-34259 info: name: Kyocera TASKalfa printer - Path...

threat-research-and-intelligence

Blog di Intelligence Completi | Risultati dei Blog | Risultati dei Report | Talk Pubblici ℹ️ :: Panoramica Questo repository serve alla diffusione di IOC, regole YARA e codice sorgente provenienti dai report di threat intelligence pubblicati dal team BlackBerry Threat Research & Intelligence. Per...

shannon

!NOTE Shannon 2.0 is officially here Shannon is an autonomous, AI pentester for web applications and APIs. It analyzes your source code, identifies attack paths, and executes real exploits to prove vulnerabilities before they reach production. This repository is Shannon Open Source: the full agen...

chall.stypr.com

chall.stypr.com شكرًا لك على لعب chall.stypr.com لقد مرت تسع سنوات منذ أن أنشأت واستضفت لعبة الحرب الخاصة بي في البداية. لقد أعادت العديد من مسابقات CTF بالفعل استخدام تحديات مماثلة أو صنعها، لذا قررت مشاركة الكود المصدري لجميع التحديات والإعدادات المستخدمة لاستضافة البنية التحتية للتحدي. البنية...

scodescanner

SCodeScanner SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities. The main objective for this scanner is to find the vulnerabilities inside the source code before code gets published in Prod. Website for newreleases, new...

MalwareSourceCode

gestito da vx-underground | seguici su Twitter | scarica campioni di malware alla pagina VXUG/samples Limitazione di responsabilità: Nella misura massima consentita dalla legge applicabile, vx-underground e/o gli affiliati che hanno inviato contenuti a vx-underground non saranno ritenuti...

CVE-2024-40275_Scanner

CVE-2024-40725 Scanner Ein Python-basiertes Erkennungstool für CVE-2024-40725 , eine Schwachstelle zur Offenlegung von Quellcode im Apache HTTP Server, die die Versionen 2.4.0 und 2.4.61 betrifft. Rechtlicher Hinweis: Führen Sie diesen Scanner nur gegen Server aus, die Ihnen gehören oder für die...

Sub7

Sub7 SubSeven era un programma backdoor o R.A.T. strumento di amministrazione remota scritto in Delphi da mobman, che permetteva ad altri di ottenere pieno accesso ai sistemi Windows 9X attraverso una connessione di rete. Questo è il codice sorgente di Sub7 2.1.2 , rilasciato nell'aprile 2000, po...

cve-2021-41773-source-code-analysis

Analisi del Codice Sorgente di Apache HTTP Server CVE-2021-41773 Uno strumento di analisi statica delle patch basato su Python per studiare la causa principale e la risoluzione di CVE-2021-41773 Path Traversal di Apache HTTP Server confrontando il codice sorgente vulnerabile di Apache HTTP Server...

Vulnerability-Assessment-and-OSINT-CVE-2012-1823

Valutazione delle vulnerabilità e OSINT: CVE-2012-1823 Il mio repository documenta il processo di identificazione, analisi e raccolta di Open Source Intelligence OSINT su una specifica vulnerabilità di sicurezza rilevata durante una scansione della rete target. Panoramica del processo Il flusso d...

Myesve

myesve CVE-2024-38475 Exploitation-Framework – Version 1.0 Haftungsausschluss: Dieses Tool ist ausschließlich für autorisierte Sicherheitstests, Bildungsforschung und legitime Bug-Bounty-Programme bestimmt. Verwenden Sie es nicht gegen Systeme, die Ihnen nicht gehören oder für die Sie keine...