DepFuzzer

DepFuzzer DepFuzzer is a tool used to find dependency confusion or project where owner's email can be takeover. Install the tool /!\ This tool requires python = 3.10 /!\ $ python3 -m venv .venv $ source .venv/bin/activate $ pip3 install -r requirements.txt Or you can use the docker image : $ dock...

nacker

Nacker Nacker is a tool to bypass 802.1x Network Access Control NAC on a wired LAN. Nacker will help you locate any non-802.1x configurable hosts on your subnet, and spoof their MAC address so that you appear authenticated to the switch. The name "Nacker" is a derived from the word "knocker" and...

nemesis

N E M E S I S - Crafting & Injection The Nemesis Project is designed to be a command line based, portable human IP stack for UNIX-like and Windows systems. The suite is broken down by protocol, and should allow for useful scripting of injected packets from simple shell scripts. The latest release...

Invoke-Transfer

Invoke-Transfer PowerShell Clipboard Data Transfer Invoke-Transfer is a PowerShell tool that helps you to send files in highly restricted environments such as Citrix, RDP, VNC or Guacamole. You can send files in text format, in small Base64 encoded chunks or in plaintext. Additionally, you can...

crAPI

crAPI c ompletely r idiculous API crAPI will help you to understand the ten most critical API security risks. crAPI is vulnerable by design, but you'll be able to safely run it to educate/train yourself. crAPI is modern, built on top of a microservices architecture. When time has come to buy your...

FollinaScanner

FollinaScanner A tool written in Go that scans files & directories for the Follina exploit CVE-2022-30190 Note: "Suspicious files" means files that have a URL in them but isn't working Compiling git clone https://github.com/ErrorNoInternet/FollinaScanner cd FollinaScanner go build Usage Scan the...

frida-interception-and-unpinning

Frida Mobile Interception Scripts !Funded by NLnet - NGI Zero...

pyhunter

pyhunter Tool to search possible emails indexed throught API's Hunter.io https://hunter.io Instalation You can download the latest version of pyhunter by cloning the GitHub repository: git clone https://github.com/n4xh4ck5/pyhunter.git Install the dependencies via pip: pip install -r...

martian

Martian Proxy Martian Proxy is a programmable HTTP proxy designed to be used for testing. Martian is a great tool to use if you want to: Verify that all or some subset of requests are secure Mock external services at the network layer Inject headers, modify cookies or perform other mutations of...

whispers

Whispers "My little birds are everywhere, even in the North, they whisper to me the strangest stories." - Lord Varys Whispers is a static code analysis tool designed for parsing various common data formats in search of hardcoded credentials and dangerous functions. Whispers can run in the CLI or...

CVE-2024-23897

Modifications by Anant File read for files like /etc/os-release was stripping content. this is fixed now Added support for Authenticated session : provide username and password as commandline arguments usage: jenkinsfileread.py -h -u URL -a USERAGENT -f FILE -t TIMEOUT -s -o -p PROXY -v --usernam...

CVE-2015-3864-Exploitation

This repository does not have a README...

ipsw

ipsw iOS/macOS Research Swiss Army Knife ipsw is a command-line toolkit for Apple firmware research and reverse engineering. Download and unpack IPSWs and OTAs, inspect Mach-O binaries and dyld shared caches, analyze kernelcaches, and work with connected iOS devices. Agent skill · Install · CLI...

factual-rules-generator

factual-rules-generator Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a running operating system. The goal of the software is to be able to use a set of rules against collected or acquired digital forensic evidences and find...

zeno

Zeno Framework Installation cd git clone https://github.com/Traxes/zeno --recursive sudo pip3 install termcolor tqdm git clone https://github.com/Z3Prover/z3 --recursive cd z3 python3 scripts/mkmake.py --python cd build make sudo make install cd /zeno Usage /zeno$ PYTHONPATH=$PYTHONPATH:$HOME/zen...

JAW

J A W Website | Docs | Setup | Crawler | Quick Start Docker Example JAW An open-source, prototype implementation of property graphs for JavaScript based on the esprima parser, and the EsTree SpiderMonkey Spec. JAW can be used for analyzing the client-side of web applications and JavaScript-based...

silph

SILPH: Stealthy In-Memory Local Password Harvester SILPH is an open-source red team tool designed to dump LSA secrets, SAM hashes, and DCC2 credentials entirely in memory, without writing any files to disk. Unlike its upstream project go-secdump , SILPH is built to be integrated into the Orsted C...

CVE-2024-3094-Nmap-NSE-script

This repository does not have a README...

my-little-honeypot

my-little-honeypot Description This repository aims to show how easy it is to code a telnet honeypot in order to recovering IOT malwares, and thus, active Command & Control. This code has been released espacially because of the conference I gave at the INSHACK event in Lyon, France on April 6th...

tofu

tofu A modular tool for hacking offline Windows filesystems and bypassing login screens. Can do hashdumps, OSK-Backdoors, user enumeration and more. How it works : When a Windows machine is shut down, unless it has Bitlocker or another encryption service enabled, it's storage device contains...