24550 matches found
Platypus
Platypus A host management hub for fleets of Linux machines. Install the Platypus agent on every host you own; the agent dials back to your Platypus server over TLS + protobuf; from the server you get an interactive shell, file management, and network tunnelling on every managed host β through on...
badssl.com
Visit badssl.com for a list of test subdomains, including: self-signed.badssl.com expired.badssl.com mixed.badssl.com rc4.badssl.com hsts.badssl.com Server Setup Stock Ubuntu VM, DNS A records for badssl.com. and .badssl.com. pointing to the VM. Testing and development...
sslsplit
SSLsplit - transparent SSL/TLS interception https://www.roe.ch/SSLsplit Overview SSLsplit is a tool for man-in-the-middle attacks against SSL/TLS encrypted network connections. It is intended to be useful for network forensics, application security analysis and penetration testing. SSLsplit is...
interactsh
An OOB interaction gathering server and client library Features β’ Usage β’ β’ β’ β’...
mole
Mole A framework for identifying and exploiting out-of-band OOB vulnerabilities. Installation & Setup Mole Install Python = 3.6 virtualenv -p /usr/bin/python3 venv source venv/bin/activate ./venv/bin/pip3 install -r requirements.txt git submodule update --init --recursive Set an API key in...
publications
Publications from Calif MAD Bugs: Month of AI-Discovered Bugs Apple Internals A series reverse-engineering Apple's internals. Security Research A Race Within A Race: Exploiting CVE-2025-38617 in Linux Packet Sockets Security Audits Shamir39 Security Audit, commissioned by an unnamed client. Mbed...
openssl
Welcome to the OpenSSL Project OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations are based on a full-strength general purpose cryptographic library, which...
caddy
a project Every site on HTTPS Caddy is an extensible server platform that uses TLS by default. Releases Β· Documentation Β· Get Help...
filebuster
Filebuster An extremely fast and flexible web fuzzer What is it? Filebuster is a HTTP fuzzer / content discovery script with loads of features and built to be easy to use and fast! It uses one of the fastest HTTP classes in the world of PERL - Furl::HTTP. Also the thread modelling is optimized to...
TLS-Attacker
TLS-Attacker TLS-Attacker is a Java-based framework for analyzing TLS libraries. It is able to send arbitrary protocol messages in an arbitrary order to the TLS peer, and define their modifications using a provided interface. This gives the developer an opportunity to easily define a custom TLS...
IG-Detective
IG-Detective π΅οΈββοΈπΈ Created by@shredzwho | π Sponsor this project IG-Detective is a high-performance, Python-based Open Source Intelligence OSINT tool for Instagram. It offers a premium interactive shell to perform deep analysis on Instagram accounts, extract location history, mapping interactions,...
httpgrep
Description A fast, asynchronous Python tool that scans HTTPS servers and greps for strings or regex patterns in HTTP response bodies and headers. It takes single hosts, URLs, CIDR ranges, IP ranges or files; scans multiple ports per target single, comma-lists or ranges, auto-detecting TLS vs pla...
nmap
Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...
kubeshark
Network Observability for SREs & AI Agents Live Demo Β· Docs Kubeshark indexes cluster-wide network traffic at the kernel level using eBPF β delivering instant answers to any query using network, API, and Kubernetes semantics. What you can do: Download Retrospective PCAPs β cluster-wide packet...
EUVD-2026-78276
A flaw was found in hawtio-operator. When a custom Route TLS secret is configured and the operator runs at debug log level 1 or higher, the entire Route object β including the TLS private key in PEM format β is serialized to JSON and written to the operator's standard output. Operator logs are...
CVE-2026-81320
hawtio-operator (used in the OpenShift ecosystem) leaks the TLS private key in PEM format when a custom Route TLS secret is configured and the operator runs at debug log level 1 or higher . The entire Route object is serialized to JSON and written to the operator's standard output, which is typic...
CVE-2026-81320 Hawtio-operator: hawtio-operator: tls private key written to operator log at debug level
A flaw was found in hawtio-operator. When a custom Route TLS secret is configured and the operator runs at debug log level 1 or higher, the entire Route object β including the TLS private key in PEM format β is serialized to JSON and written to the operator's standard output. Operator logs are...
CVE-2026-81320
A flaw was found in hawtio-operator. When a custom Route TLS secret is configured and the operator runs at debug log level 1 or higher, the entire Route object β including the TLS private key in PEM format β is serialized to JSON and written to the operator's standard output. Operator logs are...
VPNPivot
VPN Pivot: Sometime we do external penetration testing and when we compromise the remote target we would like to explore the internal network behind and getting such compromise like owning Active directory, accessing shared files, conducting MITM attacks ... etc. There are many techniques around...
pgbackrest
pgBackRest Reliable PostgreSQL Backup & Restore Introduction pgBackRest is a reliable backup and restore solution for PostgreSQL that seamlessly scales up to the largest databases and workloads. pgBackRest v2.59.1 is the current stable release. Release notes are on the Releases page. Please give ...