SmartScanner-Source

SmartScanner A web vulnerability scanner built with C++17 and Qt 6, featuring graphical and command-line interfaces. This repository contains a reconstruction of SmartScanner 3.0.0 for educational purposes. It combines a web crawling engine, vulnerability detection modules, and JSON reporting...

legion

AVISO El repositorio de Legion se está trasladando a https://github.com/hackman238/legion. Todas las versiones futuras, actualizaciones, etc. se realizarán desde allí. ¡Grandes mejoras en camino! Este repositorio bajo esta organización ya no recibirá mantenimiento. ✨ Acerca de Legion, una...

IoT-PT-v1

🛠️ IoT-PT OS v1 Sistema Operativo de Pruebas de Penetración en Internet de las Cosas - Versión 1 📦 ¿Qué es IoT-PT OS v1? IoT-PT OS v1 es una máquina virtual de pruebas de penetración diseñada específicamente para evaluaciones de seguridad en IoT. Incluye herramientas, scripts y entornos...

hide-me

Cambiador aleatorio de MAC y nombre de host hide-me Cada vez que intentaba realizar una Prueba de Penetración de Red, necesitaba seguir algunos pasos para asegurarme de estar oculto: poner mi interfaz hacia abajo, cambiar mi dirección MAC, cambiar mi nombre de host, volver a levantar la interfaz ...

NSEC3-X

DISCLAIMER: This project was generated by Artificial Intelligence AI but has undergone a rigorous "Human-in-the-Loop" HITL process. This means the code has been reviewed and refactored by a human software engineer, the architectural design was human-directed, and a basic security audit was...

heartthreader

Heartthreader Because manual vulnerability testing is tiresome. Just add some magic multithreading sauce!...

vagrant-shellshock

This repository does not have a README...

redash-vulnerable

redash-vulnerable 🐛 A Dockerized Redash instance that is vulnerable to CVE-2021-21239 as written about by Calif. Usage 💻 Starting the server preserving data script/server This will start the Redash server using Docker Compose in detached mode, preserving any existing data. The server will be...

reachability

-- START DISCLAIMER -- USE AT OWN RISK -- IN NO WAY AM I RESPONSIBLE FOR ANY DAMAGES INCURRED -- IF YOU DON'T HAVE EXPLICT PERMISSION BY THE NETWORK OWNER DO NOT AND I REPEAT DO NOT LAUNCH THIS THIS IS PYTHON WRAPPED AROUND MASSCAN https://github.com/robertdavidgraham/masscan -- END DISCLAIMER--...

pentest-metasploitable2

Penetration Testing Lab: Kali Linux vs Metasploitable2 Disclaimer: This lab was conducted entirely within an isolated virtual network between two locally-hosted VMs. No external systems, live networks, or real infrastructure were targeted at any point. All techniques demonstrated are for...

faraday_zap

Its requiered have JDK installed. For ubuntu version you can use sudo apt install default-jdk Set development environment clone zap-extensions repo clone https://github.com/zaproxy/zap-extensions/ add faraday folder to zap-extensions/addOns add "faraday" to settings.gradle.kts Build ./gradlew...

AutoRepeater

AutoRepeater: Automated HTTP Request Repeating With Burp Suite tl;dr Within extender import AutoRepeater.jar Some Brief Instructions AutoRepeater will only resend requests which are changed by a defined replacement. When AutoRepeater receives a request that matches the conditions set for a given...

autochrome

autochrome Esta herramienta descarga, instala y configura una nueva copia reluciente de Chromium. Incluye cosas útiles como: ¡Desactivar todos esos molestos auto-actualizadores! ¡Bonitos temas de colores para alta visibilidad! ¡Sin auditor XSS! ¡Configuración automática de proxy! usa 127.0.0.1:80...

mongobleedburp

MongoBleed Burp Extension Burp Suite extension to detect CVE-2025-14847 MongoBleed via manual leak tests from a dedicated UI tab. Repository: https://github.com/j0lt-github/mongobleedburp Current version: 1.1.0 Features Manual test UI tab with host/port and min/max offsets Temporary-file leak...

lapith

Lapith Lapith is a Python GUI tool that presents Nessus results in a format more useful for penetration testers. Results can be viewed by issue as opposed to by host. It is therefore easier to report all the hosts affected by an issue, rather than all of the issues affecting the host. Multiple...

nOBEX

nOBEX Introduction nOBEX allows emulating the PBAP, MAP, and HFP profiles to test vehicle infotainment systems and similar devices using these profiles. nOBEX provides PBAP and MAP clients to clone the genuine virtual filesystems for these profiles from a real phones. This means downloading the...

readable-thrift

Readable Thrift Readable Thrift makes binary Thrift protocol messages easy to work with by converting them to and from a human-friendly format. This makes manual analysis of and tampering with binary format Thrift messages just as easy as working with plaintext protocols like HTTP. The library is...

CVE-Vulnerability-Research-Exploit-Analysis

CVE-Vulnerability-Research-Exploit-Analysis A structured penetration testing project researching and executing real-world CVE exploits in a controlled sandbox environment. Targets included Windows 95 and Windows XP SP3 running across a multi-machine virtual network built with VirtualBox. Exploits...

zigdiggity

ZigDiggity Version 2 Introducing ZigDiggity 2.0 , a ZigBee penetration testing framework created by Matt Gleason & Francis Brown of Bishop Fox. Special thanks to Caleb Marion! ZigDiggity version 2 is a major overhaul of the original package and aims to enable cybersecurity professionals, auditors...

firecat

firecat For more info, see: http://www.bishopfox.com/resources/tools/other-free-tools/firecat/ Firecat is a penetration testing tool that allows you to punch reverse TCP tunnels out of a compromised network. After a tunnel is established, you can connect from an external host to any port on any...