aiodnsbrute

Async DNS Brute A Python 3.5+ tool that uses asyncio to brute force domain names asynchronously. Speed It's fast. Benchmarks on small VPS hosts put around 100k DNS resoultions at 1.5-2mins. An amazon M3 box was used to make 1 mil requests in just over 3 minutes. Your mileage may vary. It's probab...

PF_RING

PFRING™ Introducción PFRING™ es un módulo del kernel de Linux y un framework de espacio de usuario que te permite procesar paquetes a altas velocidades mientras te proporciona una API consistente para aplicaciones de procesamiento de paquetes. ¿Quién necesita PFRING™? Básicamente, cualquiera que...

BrightSign Digital Signage 8.2.26 - Server-Side Request Forgery

Unauthenticated Server-Side Request Forgery SSRF vulnerability exists in the BrightSign digital signage media player affecting the Diagnostic Web Server DWS. The application parses user supplied data in the 'url' GET parameter to construct a diagnostics request to the Download Speed Test service...

Pymap-Scanner

Pymap-Scanner Características 1-Basic Gui 2-Speed Scan 3-Custom Services 4-User Control 5-Error Control 6-Useful parameters And More. Módulos de Instalación $ Pyqt4 $ Nmap Requisitos Terceros +xsltproc +CAPTURA DE PANTALLA...

etherify

Etherify - devolviendo el éter a ethernet c 2020 Jacek Lipkowski SQ5BPF [email protected] 2020 RC3 Conference talk: https://www.youtube.com/watch?v=7ek994-fwNE Etherify 1 and 2: https://lipkowski.com/etherify with RPI 4 Etherify 3: https://lipkowski.com/etherify3/ with no ethernet cable...

turbo-intruder

Turbo Intruder Turbo Intruder 是一个 Burp Suite 扩展，用于发送大量 HTTP 请求并分析结果。它旨在通过处理需要异常速度、持续时间或复杂性的攻击来补充 Burp Intruder。以下特点使其脱颖而出： 快速 - Turbo Intruder 使用从头开始手写的 HTTP 栈，注重速度。因此，在许多目标上，它可以严重超越甚至时尚的异步 Go 脚本。 可扩展 - Turbo Intruder 可以实现平坦的内存使用，从而实现可靠的多天攻击。它还可以通过命令行在无头环境中运行。 灵活 - 使用 Python...

seeker

Available in Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Read more on thewhiteh4t's Blog .Seeker Hosts a fake website which asks for Location Permission and if...

catalyst

Catalyst 加速你的响应 网站 - Catalyst 手册（文档） - 演示 Catalyst 是一个事件响应平台。 它可以帮助自动化你的告警处理和事件响应流程。 功能特性 工单（告警与事件）管理 工单是 Catalyst 的核心。 它们代表告警、事件、取证调查、 威胁狩猎或你组织中需要处理的任何其他事件。 任务 任务是 Catalyst 中最小的作业单元。它们可以分配给用户并具有状态。 任务可用于记录调查进度或向不同用户分配工作。 反应 反应是一种自动化 Catalyst 的方式。 每个反应由一个触发器和一项动作组成。 触发器监听事件，当触发器被激活时执行动作。 存在...

arp-validator

arp-validator Security Tool to detect arp poisoning attacks Features Uses a faster approach in detection of arp poisoning attacks compared to passive approaches Detects not only presence of ARP Poisoning but also valid IP-MAC mapping when LAN hosts are using non-customized network stack Stores...

rdpscan

rdpscan for CVE-2019-0708 bluekeep vuln This is a quick-and-dirty scanner for the CVE-2019-0708 vulnerability in Microsoft Remote Desktop. Right now, there are about 900,000 machines on the public Internet vulnerable to this vulnerability, so many are to expect a worm soon like WannaCry and...

port-scan-automation

LazyMap - Auto NMAP Scanning Script Automate NMAP scans and custom Nessus polices. Developed by Daniel Compton https://github.com/commonexploits/port-scan-automation.git Released under AGPL see LICENSE for more information Installing git clone...

ator

Authentication Token Obtain and Replace Extender Introduction In the world of web security testing, automation is key, and Burp Suite is the go to choice. However, to truly harness the power of Burp for automated scanning, you need the right plugins. That's where ATOR comes in. This open-source...

fierce

Fierce Fierce is a DNS reconnaissance tool for locating non-contiguous IP space. Useful links: Domain Name System DNS Domain Names - Concepts and Facilities Domain Names - Implementation and Specification Threat Analysis of the Domain Name System DNS Name Servers NS State of Authority Record SOA...

certsync

certsync certsync is a new technique in order to dump NTDS remotely, but this time without DRSUAPI : it uses golden certificate and UnPAC the hash. It works in several steps: 1. Dump user list, CA informations and CRL from LDAP 2. Dump CA certificate and private key 3. Forge offline a certificate...

the-backdoor-factory

The new version of BACKDOOR FACTORY is available! Get access here: https://github.com/sponsors/secretsquirrel WARNING: Pull Requests WILL BE IGNORED AND CLOSED. The Backdoor Factory BDF For security professionals and researchers only. The goal of BDF is to patch executable binaries with user...

ImpossibleTravelLogAnalysis

Análisis de Registros de Viaje Imposible por NCC Group Acerca de Herramienta básica de análisis de registros para detectar viajes imposibles mediante la información geográfica de las direcciones IP Formato de Datos Esperado Un archivo CSV con los siguientes encabezados When,User,Event,IP Con el...

CVE-2026-36958

CVE-2026-36958: Denegación de Servicio mediante Solicitudes HTTP Concurrentes ID CVE: CVE-2026-36958 Fecha: 2026-04-29 Descubridor: Kirubel Solomne Proveedor: U-SPEED Producto: Router U-SPEED Versión de Firmware: V1.0.0 CWE: CWE-400 - Consumo de Recursos No Controlado Descripción El firmware V1.0...

CVE-2026-36960

CVE-2026-36960: Cross-Site Request Forgery CSRF en la Interfaz de Administración Web ID CVE: CVE-2026-36960 Fecha: 2026-04-29 Descubridor: Kirubel Solomne Fabricante: U-SPEED Producto: Router U-SPEED Versión de Firmware: V1.0.0 CWE: CWE-352 - Cross-Site Request Forgery CSRF Descripción El firmwar...

CVE-2026-36959

CVE-2026-36959: Falta de Limitación de Velocidad en el Endpoint de Inicio de Sesión ID CVE: CVE-2026-36959 Fecha: 2026-04-29 Descubridor: Kirubel Solomne Proveedor: U-SPEED Producto: Router U-SPEED Versión de Firmware: V1.0.0 CWE: CWE-307 - Restricción Inadecuada de Intentos de Autenticación...

conn-burst

Identificación de ráfagas de conexión Este paquete identifica "conexiones de ráfaga", que se consideran conexiones que transfieren una gran cantidad de datos rápidamente. Una vez que se identifica una conexión de ráfaga, ya no se vigila por ser de ráfaga. Cuando se identifica una conexión de...