24108 matches found
PatchaPalooza
PatchaPalooza patchapalooza.com — the interactive version is live! This CLI tool has been superseded by patchapalooza.com , a full interactive website for exploring and analyzing Microsoft Patch Tuesday data. It covers everything this tool does — and much more. Head there for the best experience...
CVE-2021-34527-Scanner-Based-On-cube0x0-POC
This is a scanner for the service Windows-Print-Spooler in risk Based on CVE-2021-34527 PoC originally created by cube0x0...
Refloow-Geo-Forensics
📍 Refloow™ Geo Forensics Official Github Repository Professional Open-Source OSINT & Digital Forensics Tool Version 1.4.0 Latest: Version 1.0.0 Launch: Refloow™ Geo Forensics is a high-performance, open-source digital forensics tool designed for investigators, OSINT practitioners, and security...
htattack
htattack.py An exploit implementation for RCE in RTF docs CVE-2017-0199. Video in Spanish: https://www.youtube.com/watch?v=0lDvclMrymM Usage: python htattack.py -u...
BWASP
BWASP The BoB Web Application Security Project BWASP is an open-source, analysis tool to support for Web Vulnerability Manual Analysis hackers. The BWASP tool basically provides predicted information through vulnerability analysis without proceeding with an attack. BWASP supports performing...
o5logon-fetch
o5logon-fetch A small Java program that attempts to exploit CVE-2012-3137 on vulnerable Oracle 11 servers. By exploiting this vulnerability, you can run offline brute force attacks until you discover a given user’s password, without any apparent audit trail. Vulnerability Details A good writeup o...
A2SV--SSL-VUL-Scan
A2SV--SSL-VUL-Scan A2SV = Auto Scanning to SSL Vulnerability HeartBleed, CCS Injection, SSLv3 POODLE, FREAK... etc Support Vulnerability CVE-2007-1858 Anonymous Cipher CVE-2012-4929 CRIMESPDY CVE-2014-0160 CCS Injection CVE-2014-0224 HeartBleed CVE-2014-3566 SSLv3 POODLE CVE-2015-0204 FREAK Attac...
openrisk
openrisk openrisk is an experimental tool which reads nuclei output text, markdown, and JSON and generates a risk score for the host using OpenAI's GPT-4o model. It is intended, for now, to work against a single target at a time. NOTE : This is an experimental program released by the...
cve-2024-4577
cve-2024-4577 poc Check for vulnerabilities python cve-2024-4577.py -u http://172.16.128.133 After a vulnerability is detected, you can use -c to execute a custom command python cve-2024-4577.py -u http://172.16.128.133 -c '?php system'whoami';'...
ramnit_traffic_parser
ramnittrafficparser If you have traffic data between Ramnit and C2, you can dump the configs & modules Require PHP 7 tshark Usage $ php main.php pcap/URL Example $ php main.php "https://content.any.run/tasks/b1cf6c3e-f079-49b4-9798-44a7c511d194/download/pcap" + REGISTERBOT0xe2 : output/00e2.bin +...
urless
About - v2.7 This is a tool used to de-clutter a list of URLs. As a starting point, I took the amazing tool uro by Somdev Sangwan. But I wanted to change a few things, make some improvements like deal with GUIDs and make it more customizable. Installation urless supports Python 3. Install urless ...
gitGRAB
gitGRAB Install Requests pip install requests Execute the program python3 gitgrab.py...
autobloody
autobloody autobloody is a tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound. Description This tool automates the AD privesc between two AD objects, the source the one we own and the target the one we want if a privesc path exists in BloodHound database...
Nerv0usR4bbit
ɴᴇʀᴠ0ᴜs ʀ4ʙʙɪᴛ Automated Pᴏsᴛ Exᴘʟᴏɪᴛᴀᴛɪᴏɴ Eɴᴜᴍᴇʀᴀᴛɪᴏɴ ᴛᴏᴏʟ for Windows target Author : @34zY /!\ NEW PORTABLE VERSION AVAILABLE SOON. ---------------------------------------------------------------------------- | .--, \ 🐰 | \ / | \ / | | / ,/ /\ \ 💙 | \ 2.0 Windows ' . ' -. | | . ' " . | | /─-.-...
ShellSweep
ShellSweep ShellSweeping the evil Why ShellSweep "ShellSweep" is a PowerShell/Python/Lua tool designed to detect potential web shell files in a specified directory. ShellSheep and it's suite of tools calculate the entropy of file contents to estimate the likelihood of a file being a web shell. Hi...
pwned
pwned A command-line tool for querying Troy Hunttroy's Have I been pwned?haveibeenpwned service using the hibphibp Node.js module. !npm Versionnpm-imagenpm-url !Build Statusci-imageci-url Installation Download and install Node.jsnodejs, then install pwned globally using npm: npm install pwned -g...
BurpSentinel
Burp Sentinel Eases discovery of common security holes in web applications. Intro / tutorial: https://github.com/dobin/BurpSentinel/wiki/BurpSentinel---HowTo-and-introduction Blog: http://dobin.github.io/ With BurpSentinel it is possible for the penetration tester to quickly and easily send a lot...
sage
Sage Safety for Agents — Agent Detection & Response for AI coding assistants Sage is a lightweight security layer that protects AI agents from executing dangerous actions. It intercepts tool calls — shell commands, URL fetches, file writes — and checks them against multiple threat detection layer...
CVE-2026-20245
cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...