pulsar

PULSAR 协议学习、模拟与状态化模糊测试 Pulsar 是一个具备自动协议学习与模拟能力的网络模糊测试工具。该工具通过机器学习技术（如聚类和马尔可夫模型）对协议进行建模。这些模型可用于模拟 Pulsar 与真实客户端或服务器之间的通信，借助语义正确的消息，并结合一系列模糊测试原语，能够在协议状态机的更深层次测试未知协议实现的错误。 有关 Pulsar 实现方法的详细信息，可阅读以下论文： Pulsar: Stateful Black-Box Fuzzing of Proprietary Network Protocols Hugo Gascon, Christian...

sslyze

Nota El desarrollo actual de SSLyze ahora tiene lugar en un repositorio separado: https://github.com/nabla-c0d3/sslyze. Este repositorio se actualizará periódicamente desde este nuevo repositorio principal, pero para la versión más actual, consulte el nuevo repo. Si clonó el repositorio pero dese...

Prober

Verificar supuestos de red de forma reproducible Este proyecto utiliza Ansible para generar archivos de prueba BATS que verifican supuestos de seguridad sobre la infraestructura de red. Las pruebas se ejecutan desde máquinas de prueba "nodos prober " en las que se despliega Prober. Esta herramien...

AttackSurfaceManagement

ABOUT: Discover the attack surface and prioritize risks with our continuous Attack Surface Management ASM platform - Sn1per Professional. For more information, go to https://sn1persecurity.com. FEATURES: Attack Surface Discovery Easily discover the attack surface IPs, domain names, open ports, HT...

PHP-REVERSE-SHELL

PHP Reverse Shell Potente y Sigiloso Este es un potente y sigiloso PHP reverse shell diseñado para hacking ético y pruebas de penetración. Establece una conexión confiable y silenciosa de vuelta a tu máquina. ⚠️ Aviso legal Este PHP reverse shell ha sido desarrollado estrictamente con fines...

GraphQLer

¡La única herramienta de prueba de API GraphQL con conciencia de dependencias! GraphQLer es una herramienta de vanguardia diseñada para probar dinámicamente APIs GraphQL con un enfoque en la adaptabilidad. Ofrece una gama de características sofisticadas que agilizan el proceso de prueba y...

Penetration-Testing-on-Metasploitable2

Internship Project 2 — Penetration Testing on Metasploitable2 Summary: This project demonstrates a complete penetration testing workflow: reconnaissance, enumeration, exploitation, post-exploitation validation, and mitigation recommendations. The target used is Metasploitable2 and the attack box ...

Kvasir

Kvasir Welcome to Kvasir! Herein these directories lay the groundwork tools for effective data management during a Penetration Test. Penetration tests can be data management nightmares because of the large amounts of information that is generally obtained. Vulnerability scanners return lots of...

EUVD-2026-82925

OpenCVE: Server-Side Request Forgery SSRF in notifications...

GHSA-CH3G-4XVR-674Q OpenCVE: Server-Side Request Forgery (SSRF) in notifications

Impact OpenCVE contains a Server-Side Request Forgery SSRF vulnerability in the notification testing functionality for both Webhook and Slack integrations. An authenticated user with permission to configure notification channels can trigger test requests to arbitrary HTTPS endpoints. Insufficient...

OpenCVE: Server-Side Request Forgery (SSRF) in notifications

Impact OpenCVE contains a Server-Side Request Forgery SSRF vulnerability in the notification testing functionality for both Webhook and Slack integrations. An authenticated user with permission to configure notification channels can trigger test requests to arbitrary HTTPS endpoints. Insufficient...

CVE-2024-29269

Telesquare TLR-2005KSHRCE CVE-2024-29269 Escaneo/explotación por lotes 1.Esta herramienta se utiliza únicamente para pruebas de seguridad; no me hago responsable de ningún ataque ilegal. 2.La herramienta se utiliza únicamente para pruebas de seguridad, y no soy responsable de ningún ataque ilegal...

CVE-2017-9841

CVE-2017-9841 CVE-2017-9841 detector script by Massimiliano Brasile WHAT HAPPENED January 6th, 2020 I was advised of a security issue apparently affecting most versions of PrestaShop the warning was shared by PS team only internally on 3rd January 2020. After some digging, I have discovered the...

log4shell-mitigation-tester

Log4Shell Mitigation tester This is an example application using Log4j 2.14.1 . source code: App.java The purpose of this is to be able to test different mitigation approaches. The mitigation approaches are also mentioned in Microsoft’s Response to CVE-2021-44228 Apache Log4j 2. Example usage...

dnsmasq-cve-2026

dnsmasq CVE-2026 QA Verification Tool Automated black-box tool for verifying 6 dnsmasq vulnerabilities May 2026. Sends attack packets to a live DUT and reports PASS/FAIL — no source code access needed. Quick Start root@kitploit: Set DUT DNS to your laptop's WAN IP via GUI first, then: sudo python...

network-security-lab

🔬 Laboratorio de Seguridad en Redes Un entorno virtual controlado que simula escenarios reales de ataque y defensa 📋 Resumen Este laboratorio simula una prueba de penetración del mundo real y un ejercicio de endurecimiento defensivo en un entorno virtual completamente aislado. Demuestra el ciclo ...

CVE-2018-5803

CVE-2018-5803 Lab for testing CVE-2018-5803 root@kitploit: vagrant destroy -f vagrant up vagrant reload vagrant provision --provision-with sctp...

T-MAP

T-MAP: Red-Teaming LLM Agents with Trajectory-aware Evolutionary Search T-MAP is a trajectory-aware evolutionary search framework for red-teaming LLM agents over MCP servers. It iteratively generates and mutates adversarial prompts guided by execution trajectories, mapping the agent's vulnerabili...

gha-lab-0ba60e6456

Integration Testing This folder contains the integration tests of the extension. They are defined using Playwright test runner and Galata helper. The Playwright configuration is defined in playwright.config.js. The JupyterLab server configuration to use for the integration test is defined in...

CVE-2026-59827

Authorized Metabase CVE-2026-59827 Penetration Testing Tool An authorized security assessment utility for validating the presence of CVE-2026-59827 in Metabase deployments during approved penetration testing engagements. This tool is designed to demonstrate the existence of the vulnerability whil...