nushell v0.115.0

Nushell A new type of shell. Table of Contents Status Learning About Nu Installation Configuration Philosophy Pipelines Opening files Plugins Goals Officially Supported By Contributing License Status This project has reached a minimum-viable-product level of quality. Many people use it as their...

misp-extractor

MISP Extractor This code connects to a given MISP Malware Information Sharing Platform server and parses a given number of events, writing the IP addresses, URLs, and MD5 hashes found in the events to three separate files. Usage To use this script, you will need to provide the URL of your MISP...

nginx-ultimate-bad-bot-blocker

REPO| BECOME A SPONSOR ---|--- | Your logo and link to your domain will appear here if you become a sponsor. Simply email me on [email protected] if you would like to sponsor this project as South Africa is not supported yet under the Github sponsor program. | Help Support Me at...

lua-resty-waf

Name lua-resty-waf - High-performance WAF built on the OpenResty stack Table of Contents Name Status Description Requirements Performance Installation Synopsis Public Functions lua-resty-waf.loadsecrules lua-resty-waf.init Public Methods lua-resty-waf:new lua-resty-waf:setoption...

godehashed

Godehashed A golang tool that uses the dehashed.com API to search for compromised assets. Results can then be compiled into a CSV for further analysis. Screenshot Dehashed API You must supply the tool an api key. See apikeytemplate.txt for example. Installation To install the tool in CLI run the...

godehashed

Godehashed 一款使用 dehashed.com API 搜索受损资产的 Golang 工具。结果可编译为 CSV 文件以供进一步分析。 截图 Dehashed API 您必须向工具提供 API 密钥。请参阅 apikeytemplate.txt 文件中的示例。 安装 要在 CLI 中安装该工具，请运行以下命令。您的 $GOPATH 必须已经设置好。 go get https://github.com/an00byss/godehashed 用法 ./godehashed -s email -i apikey.txt -e SOMEDOMAIN -o leaks.csv...

CVE-2014-3120

LAB 10-CVE-2014-3120 I. SYSTEM ANALYSIS Identifying the Attack Surface from the Docker Environment Starting with what is running in the environment. We list all active containers: root@kitploit: docker ps Result: Container p1/lab10:latest is running, exposing 2 ports externally: Port mapping|...

log4j-Scan-Burpsuite

log4j-Scan-Burpsuite Burpsuite detection plugin for Log4j vulnerability CVE-2021-44228 Includes ON/OFF switch, Filter, Send Features: Automatically replace request headers Automatically replace POST request application/json parameters Automatically replace POST request application/x-www-urlencode...

ctftool

CTFTOOL Just want to test the SYSTEM exploit? Click here. An Interactive CTF Exploration Tool This is ctftool, an interactive command line tool to experiment with CTF, a little-known protocol used on Windows to implement Text Services. This might be useful for studying Windows internals, debuggin...

aes256_passwd_store

aes256passwdstore Este script cifra o descifra de forma segura contraseñas en disco dentro de un archivo de base de datos personalizado. También incluye funcionalidad para recuperar contraseñas de un archivo de base de datos previamente generado. Este script toma una contraseña maestra de stdin/d...

chaos-mesh

Chaos Mesh is an open source, cloud-native Chaos Engineering platform for Kubernetes. It uses Kubernetes custom resources to define, orchestrate, and observe controlled fault injection against workloads, infrastructure, cloud services, and applications. Chaos Mesh is a Cloud Native Comp...

chaostoolkit-kubernetes

Chaos Toolkit Extensions for Kubernetes This project contains activities, such as probes and actions, you can call from your experiment through the Chaos Toolkit to perform Chaos Engineering against the Kubernetes API: killing a pod, removing a statefulset or node... Install To be used from your...

backdoor-learning-resources

Backdoor Learning Resources This Github repository summarizes a list of Backdoor Learning resources. For more details and the categorization criteria, please refer to our survey. We will try our best to continuously maintain this Github Repository in a monthly manner. Why Backdoor Learning?...

awesome-incident-response

Awesome Incident Response A curated list of tools and resources for security incident response, aimed to help security analysts and DFIR teams. Digital Forensics and Incident Response DFIR teams are groups of people in an organization responsible for managing the response to a security incident,...

awesome-cybersecurity-blueteam

Awesome Cybersecurity Blue Team A collection of awesome resources, tools, and other shiny things for cybersecurity blue teams. Cybersecurity blue teams are groups of individuals who identify security flaws in information technology systems, verify the effectiveness of security measures, and monit...

x8

x8 Suite de descubrimiento de parámetros ocultos escrita en Rust. La herramienta ayuda a identificar parámetros ocultos que podrían ser vulnerables o revelar funcionalidades interesantes que otros evaluadores podrían pasar por alto. Su alta precisión se logra mediante la comparación línea por lín...

androrat

'm in progress internationalization, Welcome to join. Androrat Fork/Silent Edition Remote Administration Tool for Android Androrat is a client/server application developed in Java Android for the client-side and in Java/Swing for the Server. The name Androrat is a mix of Android and RAT Remote...

c-jwt-cracker

JWT cracker A multi-threaded JWT brute-force cracker written in C. If you are very lucky or have a huge computing power, this program should find the secret key of a JWT token, allowing you to forge valid tokens. This is for testing purposes only, do not put yourself in trouble : I used the Apple...

robustbench

RobustBench: a standardized adversarial robustness benchmark Francesco Croce University of Tübingen, Maksym Andriushchenko EPFL, Vikash Sehwag Princeton University, Edoardo Debenedetti EPFL, Nicolas Flammarion EPFL, Mung Chiang Purdue University, Prateek Mittal Princeton University, Matthias Hein...

CVE-2026-66492

Path Traversal in File Upload Destination PhocaCommander ≤ 6.1.3 — Authenticated Admin Writes Files Outside Webroot SUMMARY The file upload handler in PhocaCommander constructs the destination path from an attacker-controlled base64-encoded folder parameter without any path containment validation...