cbrutekrag

cbrutekrag Penetration tests on SSH servers using dictionary attacks. Written in C. brute krag means "brute force" in afrikáans Disclaimer This tool is for ethical testing purpose only. cbrutekrag and its owners can't be held responsible for misuse by users. Users have to act as permitted by loca...

Eris

Eris Eris는 Fyne를 사용해 Go로 작성된 데스크톱 PGP 워크스테이션입니다. 키를 암호화된 볼트에 저장하며, 서명, 암호화, 복호화, 검증을 위한 깔끔한 UI를 제공합니다. 기능 저장된 키를 위한 암호화된 로컬 볼트 자체 키 쌍 생성 연락처 공개 키 가져오기 및 관리 메시지 암호화 및 서명 수신 메시...

scorecard

OpenSSF Scorecard Overview What Is Scorecard? Prominent Scorecard Users View a Project's Score Scorecard's Public Data Using Scorecard Scorecard GitHub Action Scorecard REST API Scorecard Badges Scorecard Command Line Interface Prerequisites Installation Authentication Basic Usage Checks Default...

tiktok-scraper

TikTok Scraper & Downloader Scrape and download useful information from TikTok. No login or password are required This is not an official API support and etc. This is just a scraper that is using TikTok Web API to scrape media and related meta information. Content Features To Do Contribution...

debian-ssh

Debian OpenSSL Predictable PRNG Links Original URL: http://metasploit.com/users/hdm/tools/debian-openssl/1 Mirror2 Exploit: https://www.exploit-db.com/exploits/5622/ Perl3 https://www.exploit-db.com/exploits/5720/ Python4 https://www.exploit-db.com/exploits/5632/ Ruby12 Recommend Tool: Crowbar13...

coreruleset

Branch| 상태 ---|--- main| 🛡️ OWASP CRS OWASP CRS는 OWASP ModSecurity, OWASP Coraza 또는 기타 호환 웹 애플리케이션 방화벽에서 사용할 수 있는 일반적인 공격 탐지 규칙 집합입니다. CRS는 최소한의 오탐으로 OWASP Top Ten을 포함한 다양한 공격으로부터 웹 애플리케이션을 보호하는 것을 목표로 합니다. 📚 CRS 리소스, 관련 프로젝트 및 도구 CRS 설치, 구성 및 작업에 대한 리소스를 확인하려면 OWASP CRS 페이지를 방문하세요. 또한 CRS 관련 프로젝트...

sudo-snooper

sudo-snooper sudo-snooper acts like the original sudo binary to fool users into entering their passwords. It will show a fake prompt just like the original to the user to enter their sudo password. This can be useful in penetration tests or security evaluations for testing user knowledge...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

nikto

nikto Nikto web server scanner - https://cirt.net/Nikto2 Full documentation - https://github.com/sullo/nikto/wiki Run normally: git clone https://github.com/sullo/nikto Main script is in program/ cd nikto/program Run using the shebang interpreter ./nikto.pl -h http://www.example.com Run using per...

hyenae-ng

Hyenae NG Hyenae NG Next Generation is a re-write of the original Hyenae tool which was originally published back in the year 2010. Besides switching from C to C++, using modern design concepts, Hyenae NG was just like the original Hyenae written with maximum portability in mind. Since the origin...

mongoaudit

mongoaudit is a CLI tool for auditing MongoDB servers, detecting poor security settings and performing automated penetration testing. Installing Clone this repository and run the setup: git clone https://github.com/stampery/mongoaudit.git cd mongoaudit python setup.py install mongoaudit...

tesseract

Tesseract の単体テスト 要件 ファイルと構造 ├── langdatalstm │ ├── common.punc │ ├── common.unicharambigs │ ├── desiredbigrams.txt │ ├── eng │ │ ├── desiredcharacters │ │ ├── eng.config │ │ ├── eng.numbers │ │ ├── eng.punc │ │ ├── eng.singlestext │ │ ├── eng.trainingtext │ │ ├──...

prowler

Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...

wuzz

wuzz Interactive cli tool for HTTP inspection. Wuzz command line arguments are similar to cURL's arguments, so it can be used to inspect/modify requests copied from the browser's network inspector with the "copy as cURL" feature. Installation and usage GO $ go get github.com/asciimoo/wuzz $...

AIDOR

AIDOR 👁️ - 자동화된 Insecure Direct Object Reference 탐지기 AIDOR Automated IDOR Detector은 허가된 침투 테스터 가 웹 애플리케이션에서 Insecure Direct Object Reference IDOR 취약점을 식별할 수 있도록 하는 전문 Bash 유틸리티입니다. 숫자형 ID, 매개변수 패턴을 탐지하고 자동화된 열거 테스트를 수행합니다. 🔍 IDOR이란? Insecure Direct Object Reference IDOR는 애플리케이션이 적절한 접근 제어 검증 없이 내부...

jsteg

jsteg go get lukechampine.com/jsteg jsteg is a package for hiding data inside jpeg files, a technique known as steganography. This is accomplished by copying each bit of the data into the least-significant bits of the image. The amount of data that can be hidden depends on the filesize of the jpe...

tsfresh

tsfresh このリポジトリには、 TSFRESH Python パッケージが含まれています。この略称は、次の意味を表します。 "Time Series Feature extraction based on scalable hypothesis tests". このパッケージは、統計学、時系列解析、信号処理、非線形力学からの確立されたアルゴリズムと、堅牢な特徴選択アルゴリズムを組み合わせることで、体系的な時系列特徴抽出を提供します。この文脈では、 時系列 という用語は可能な限り広い意味で解釈され、あらゆる種類のサンプリングデータやイベントシーケンスさえも特徴付けることができます。...

linux-smart-enumeration

First, a couple of useful oneliners ; wget "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -O lse.sh;chmod 700 lse.sh curl "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -Lo lse.sh;chmod 700 lse.sh Note that...

nullscan

Description A modular framework designed to chain and automate security tests. It parses target definitions from the command line and runs corresponding modules and their nullscan-tools afterwards. It can also take hosts and start nmap first in order to perform a basic portscan and run the module...

openentropy

openentropy 하드웨어 엔트로피를 연구와 보안을 위해 측정하고 운영화합니다. 온보드 하드웨어 소스에서 엔트로피를 수집하고, 통계적 테스트로 소스 품질을 분석하며, CLI, Rust, Python 및 HTTP 인터페이스를 통해 원시 또는 컨디셔닝된 출력을 제공합니다. 엔트로피 연구, 검증 및 암호화 배포를 위한 하나의 워크플로우. Amenti Labs 제공 빠른 시작 Install cargo install openentropy-cli Discover entropy sources on your machine...