haptyc

Haptyc Test Generation Framework What's Haptyc? Haptyc is a python library which was built to add payload position support and Sniper/Clusterbomb/Batteringram/Pitchfork attack types into Turbo Intruder. While Haptyc accomplishes these goals fairly well it also introduces a simpler way to express...

hardcidr

hardCIDR Background A Linux Bash script to discover the netblocks, or ranges, in CIDR notation owned by the target organization during the intelligence gathering phase of a penetration test. This information is maintained by the five Regional Internet Registries RIRs: ARIN North America RIPE...

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

recon-test-livewire

About Laravel Laravel is a web application framework with expressive, elegant syntax. We believe development must be an enjoyable and creative experience to be truly fulfilling. Laravel takes the pain out of development by easing common tasks used in many web projects, such as: Simple, fast routi...

metasploitable-pentest-report

Metasploitable 2 — Informe de Prueba de Penetración Descargo de responsabilidad: Esta prueba de penetración se realizó en un entorno de laboratorio privado y aislado de VMware con fines educativos únicamente. No se accedió a sistemas reales. Todas las direcciones IP han sido anonimizadas. Resumen...

shellcodetester

Shellcode Tester ShellcodeTester officially supports Python 3.8+. Main features Assembly ASM file 32 and 64 bits Assembly ASM file to Windows, Linux and MacOS Check badchars Output to several formats NASM Shell Other amazing features... Shellcode Tester - Getting stats shellcodetester -asm file.a...

nautilus

Nautilus 2.0 Nautilus is a coverage guided, grammar based fuzzer. You can use it to improve your test coverage and find more bugs. By specifying the grammar of semi valid inputs, Nautilus is able to perform complex mutation and to uncover more interesting test cases. Many of the ideas behind this...

CVE-2018-25031-test

Este repositorio no tiene un README...

roca

ROCA detection tool This tool is related to ACM CCS 2017 conference paper 124 Return of the Coppersmith’s Attack: Practical Factorization of Widely Used RSA Moduli. It enables you to test public RSA keys for a presence of the described vulnerability. Update 4.11.2017 : Python 2.7, 3.4+ supported...

Vuln_Exploitation_MegaQuagga_Pentest

Explotación de Vulnerabilidades — Informe de Prueba de Penetración de MegaQuagga Analista: Samuel Weiss Organización: 0x2A Security Fecha: 20 de abril de 2026 Cliente: MegaQuagga Publishing Objetivo: www.megaquagga.local Clasificación: CONFIDENCIAL Resumen Este proyecto documenta una prueba de...

kodex

Kodex Community Edition - CE is an open-source toolkit for privacy and security engineering. It helps you to automate data security and data protection measures in your data engineering workflows. It offers the following functionality: Read data items from a variety of sources such as files,...

cve-2018-9075

cve-2018-9075 asdf test...

mtechweek_04

mtechweek04 Metasploit-based penetration test on an isolated Metasploitable2 lab VM — remote exploitation via DistCC CVE-2004-2687, privilege escalation via udev netlink CVE-2009-1185, and vsftpd 2.3.4 backdoor analysis CVE-2011-2523, with firewall mitigation validated end-to-end. This repository...

[SECURITY] [DLA 4821-2] libmodule-cpants-analyse-perl regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4821-2 [email protected] https://www.debian.org/lts/security/ Arnaud Rebillout October 06, 2026 https://wiki.debian.org/LTS -...

CVE-2024-3094

CVE-2024-3094 Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specifi...

log4j-samples

log4j-muestras Muestras de versiones de la librería log4j para ayudar a los escáneres/detectores de log4j incluyendo nuestro propio log4j-detector a mejorar su precisión para detectar CVE-2021-45046 y CVE-2021-44228. Las muestras incluyen jars sombreados, uber jars, jars ejecutables de spring-boo...

BrightSign Digital Signage 8.2.26 - Server-Side Request Forgery

Unauthenticated Server-Side Request Forgery SSRF vulnerability exists in the BrightSign digital signage media player affecting the Diagnostic Web Server DWS. The application parses user supplied data in the 'url' GET parameter to construct a diagnostics request to the Download Speed Test service...

Hack-The-Box-Nexus-Findings-Report

🛡️ Hack The Box - Nexus Findings Report 📋 Overview This repository contains a comprehensive penetration test report for the Hack The Box machine Nexus. 🔍 Key Findings Exposed Credentials in Gitea Commit History - Medium Severity Krayin CRM Unrestricted File Upload CVE-2026-38526 - High Severity...

[SECURITY] Fedora 43 Update: python3.12-3.12.15-1.fc43

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...