Juiceshopgl

Juice Shop Logo OWASP Juice Shop Test Coverage Maintainability...

cdf

CDF – crypto differential fuzzing CDF is a tool to automatically test the correctness and security of cryptographic software. CDF can detect implementation errors, compliance failures, side-channel leaks, and so on. CDF implements a combination of unit tests with "differential fuzzing", an approa...

inql

InQL v6.1.2 - 用于高级 GraphQL 测试的 Burp 扩展 !Doyensec Research...

sslscan

sslscan2 sslscan version 2 has now been released. This includes a major rewrite of the backend scanning code, which means that it is no longer reliant on the version of OpenSSL for many checks. This means that it is possible to support legacy protocols SSLv2 and SSLv3, as well as supporting TLSv1...

CVE-2021-41773.git1

CVE-2021-41773 Herramienta rápida en Python para probar el path traversal de Apache CVE-2021-41773 en una lista de URLs Uso :- crea un archivo de URLs activas y usa el flag "-l" python3 apachepathtraversal.py -l urls-list.txt...

uberscan

uberscan Security program for pen-testing servers, routers and IoT devices btw my bitcoin address is 3A7yuqBcPAcVEM59bNAVQdTCmkxRb5JRgE Here's an alternative, also for BTC, as I've been getting reports of some bitcoin wallets not supporting certain addresses: 1PEDKUiUTxGNJ3XTPfXCTAjpzVzX1VZAme...

rbndr

rbndr 简单的 DNS 重新绑定服务 rbndr 是一个非常简单的、非标准化的名称服务器，用于测试软件是否存在 DNS 重新绑定漏洞。该服务器通过从主机名中指定的地址中随机选取一个，并以极低的 TTL 值作为答案返回，来响应查询。 https://en.wikipedia.org/wiki/DNSrebinding DNS 重新绑定是一种 TOCTOU（检查时间与使用时间）漏洞。如果你有一个服务错误地使用“预检”检查来修改安全属性，那么你就可以使用它。例如，考虑一个（虚构的）浏览器插件，它有一个如下所示的 API： root@kitploit:...

SimplesApachePathTraversal

SimplesApachePathTraversal Simples Apache Path Traversal Es una herramienta simple para probar la vulnerabilidad Apache Path Traversal https://blog.mrcl0wn.com/2021/10/uma-simples-tool-para-apache-path.html root@kitploit: Autor: MrCl0wn Blog: https://blog.mrcl0wn.com GitHub:...

Dosinator

DoSinator DoSinator is a powerful Denial of Service DoS testing tool developed in Python. Designed for security professionals and researchers, this tool allows them to simulate various DoS attacks, providing a realistic environment for assessing the resilience of networks, systems, and applicatio...

CVE2022-1388_TestAPI

CVE2022-1388TestAPI A Test API for testing the POC against CVE-2022-1388 To run from host. root@kitploit: pip install -r requirements.txt uvicorn main:app --reload To run from Docker. root@kitploit: make build make run...

Integer-Overflow-test

Este repositorio no tiene un README...

MalQR.github.io

MalQR About MalQR is a collection of malicious QR codes and barcodes you can use to test the security of your scanners. It gives you the ability to conduct such tests with easiness : you just need to have a smartphone, a tablet or a laptop with an internet connection and browse MalQR.shielder.com...

PRET

PRET - Printer Exploitation Toolkit Is your printer secure? Check before someone else does... PRET is a new tool for printer security testing developed in the scope of a Master's Thesis at Ruhr University Bochum. It connects to a device via network or USB and exploits the features of a given...

CVE-2023-41064

vulnerabilidad-LibWebP-CVE-2023-41064 longitudes de código para desencadenar esta vulnerabilidad CVE-2023-41064 Este es un script de Python que crea un archivo WebP un formato de imagen vacío con una estructura de encabezado específica. El propósito de este script es generar un archivo WebP que...

dnsbin

dnsbin DNS 请求的 request.bin DNSBin 是一个简单的工具，用于测试通过 DNS 进行的数据外泄，并在环境有重大限制时帮助测试诸如 RCE 或 XXE 等漏洞。该项目分为两部分：第一部分是 Web 服务器及其组件，它提供了一个基本的 Web 用户界面，在大多数情况下你不需要更多。客户端部分提供了一个 Python 脚本，允许通过 DNS 使用 Web 服务双向传输数据。 演示 http://dnsbin.zhack.ca/ 设置与安装 DNS 我目前为演示服务器设置的 DNS...

smuggler

root@kitploit: / | | | | \ | | | | |/ |/ | || |/ | | | || | | | || | | /||||/ \ |\ || | @defparam Smuggler Una herramienta de prueba de HTTP Request Smuggling / Desync escrita en Python 3 Agradecimientos Un agradecimiento especial a James Kettle por su investigación y métodos sobre...

msdat

Quentin HARDY --- [email protected] [email protected] MSDAT MSDAT M icros oft SQL D atabase A ttacking T ool is an open source penetration testing tool that tests the security of Microsoft SQL Databases remotely. Usage examples of MSDAT: You have a Microsoft database listening remotely...

Log4j-JNDIServer

Log4j-JNDIServer Este proyecto ayudará a probar las vulnerabilidades Log4j CVE-2021-44228/CVE-2021-45046. Instalación y Compilación Cargue el proyecto en Intellij Idea Seleccione JDK en "Projects Settings" CTRL + ALT + SHIFT + S En "Project Settings", cree el Artifact - "Artifacts" - "Create JAR...

CVE-2025-61882-POC

CVE-2025-61882 Security Testing Tool 🚨 CRITICAL LEGAL WARNING See our blog post for technical details THIS TOOL IS FOR AUTHORIZED SECURITY TESTING ONLY root@kitploit: ╔══════════════════════════════════════════════════════════════╗ ║ ║ ║ 🚨 UNAUTHORIZED ACCESS TO COMPUTER SYSTEMS IS ILLEGAL 🚨 ║ ║ ...

openmagic

openmagic openmagic puede ayudarte en la automatización de pruebas y explotación de sistemas vulnerables a la lectura excesiva del heartbeat TLS de OpenSSL CVE-2014-0160. El módulo base incluye una versión modificada del programa "ssltest.py" de Jared Stafford y proporciona las siguientes...