JBWPer

JBWPer | CVE-2022-4061 - JobBoardWP 自动化批量工具，用于检测和利用 CVE-2022-4061 - JobBoardWP install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh 使用方法 确保你已经安装了Parallel！ 然后执行： git clone https://github.com/im-hanzou/JBWPer.git cd JBWPer && chmod +x jbwper.sh...

bbot

BEE·bot is a multipurpose scanner inspired by Spiderfoot, built to automate your Recon , Bug Bounties , and ASM! https://github.com/blacklanternsecurity/bbot/assets/20261699/e539e89b-92ea-46fa-b893-9cde94eebf81 A BBOT scan in real-time - visualization withVivaGraphJS Installation root@kitploit:...

Pinacolada

Wireless Intrusion Detection System for Hak5's WiFi Coconut Pinacolada looks for typical IEEE 802.11 attacks and then informs you about them as quickly as possible. All this with the help of Hak5's WiFi Coconut, which allows it to listen for threats on all 14 channels in the 2.4GHz range...

PKCS11SSHAgent

SRO PKCS11 – SSH Agent CNG Sovereign unification PKCS11 + SSH-agent + Pageant + CNG/Smartcard A single Windows executable that unifies four traditionally separate functions: Full PKCS11 module Firefox, OpenSC, ssh -I SSH agent compatible with OpenSSH/Git/VS/WSL Pageant server compatible with...

expel-intel

expel-intel 这里是 Expel 情报团队的大本营。 在这里，我们将分享 IOC 以及其他要么不适合放入其他媒介、要么特别适合放入 git 仓库的信息。 保持安全，行善积德，保重身体，玩得开心！ 本仓库仅供参考。...

CakeFuzzer

CakeFuzzer 最新版本 : 1.0 许可证 : GNU GPL v3.0 Cake Fuzzer 是一个项目，旨在帮助自动且持续地发现基于特定框架的 Web 应用程序中的漏洞，且假阳性率极低。目前它已实现支持 Cake PHP 框架。 如果您想了解更多关于研究过程的信息，请查看这篇文章系列：CakePHP 应用程序网络安全研究 🏆 已报告的漏洞 🏆 以下是 Cake Fuzzer 发现的部分漏洞列表： 标题| 严重性| 链接 ---|---|--- Cerebrate 中的盲 SQL 注入| 9.8 严重|...

gethspoit

Gethsploit gethsploit is a set of python scripts to enumerate ethereum peers which have rpc-ports enabled. Prerequisites Make sure you have geth installed, preferably the latest version, which has some fixes concerning attaching to other rpc-instances. Using Gethsploit Make sure geth is not...

OWASP-Subtractive-Hardening-Top-10

OWASP 减法式安全 Top 10 项目 概述 OWASP 减法式安全 Top 10 项目是一项旨在通过消除攻击路径来识别、记录并推广降低网络风险最高影响力机会的倡议。 与主要侧重于添加控制措施的传统安全指南不同，减法式安全 Top 10 强调移除不必要的攻击面、信任关系、协议、权限、服务以及通信路径，这些正是助长攻击者推进的因素。 该项目基于这样一个原则：最有效的安全控制往往是彻底移除攻击路径，而非试图监控或管理它。 该项目的长期愿景是通过路径擦除率（PER）标准，将攻击路径消除确立为一门以可衡量成果为支撑的基础性安全工程学科。 指导原则 攻击者只能穿越存在的路径。...

nodexp

NodeXP - Detection and Exploitation Tool for Node.js Services! NodeXP is an intergrated tool, written in Python 2.7, capable of detecting possible vulnerabilities on Node.js services as well as exploiting them in an automated way, based on ServerSideJavascriptInjection attack! Getting Started -...

nodexp

NodeXP - Node.js 服务的检测与利用工具！ NodeXP 是一个集成化工具，基于 SSJI （服务端 JavaScript 注入）攻击，使用 Python 2.7 编写，能够自动检测 Node.js 服务上的潜在漏洞并进行利用。 入门 - 安装与使用 通过克隆 Git 仓库下载 NodeXP： root@kitploit: git clone https://github.com/esmog/nodexp 要查看所有选项列表，运行： root@kitploit: python2.7 nodexp -h 分别针对 POST 和 GET 情况的示例： root@kitploit...

Insanity-Framework

Insanity-Framework THIS PROJECT ARE CLOSED NOW - FEEL FREE TO CONTINUE IT Copyright 2017 Insanity Framework IF 2.0 END Written by: Alisson Moretto - 4w4k3 Special Thanks to Thomas Perkins - Ekultek Insanity Payload consists of encrypting your code and decrypting it in memory, thus avoiding a...

omnisci3nt

⭐️ If you find this GitHub repo useful, please consider giving it a star! ⭐️ 🕵️‍♂️ Omnisci3nt: Unified Web Reconnaissance Toolkit Omnisci3nt is a comprehensive web reconnaissance and intelligence framework designed for cybersecurity professionals, ethical hackers, and security researchers. It...

omnisci3nt

⭐️ 如果您觉得这个 GitHub 仓库有用，请考虑给它一颗星！ ⭐️ 🕵️‍♂️ Omnisci3nt：统一的网络侦察工具包 Omnisci3nt 是一个全面的网络侦察与情报框架，专为网络安全专业人士、道德黑客和安全研究人员 设计。它能够自动发现并分析域名相关数据，如子域名、SSL/TLS 证书、暴露的服务、技术栈以及历史网页内容。 通过将多种侦察技术整合为单一工作流程，Omnisci3nt 帮助用户清晰了解域名的外部攻击面、配置状态和历史足迹。这使其成为安全评估、漏洞悬赏侦察、威胁建模和防御研究 的有效工具。 Omnisci3nt 适用于授权测试和安全分析...

dns-zone-audit

DNS Zone Audit A lightweight Bash-based security tool for testing DNS zone transfer misconfigurations AXFR, associated with CVE-1999-0532. This script queries authoritative name servers for a domain and attempts full zone transfers. If successful, it indicates a critical DNS misconfiguration that...

danish_phone_wordlist_generator

Danish Phone Wordlist Generator This tool can generate wordlists of Danish phone numbers by area and/or usage Mobile, landline etc. Useful for password cracking or fuzzing Danish targets. See also my Danish Wordlists repo for a collection of Danish general-purpose wordlists. Getting started: Clon...

subjs

subjs subjs 从 URL 列表或子域名中获取 JavaScript 文件。分析 JavaScript 文件可以帮助你找到未公开的端点、秘密等。 建议将其与 gau 配合使用，然后再与 LinkFinder 配合使用。 资源 用法 安装 用法： 示例： root@kitploit: $ cat urls.txt | subjs $ subjs -i urls.txt $ cat hosts.txt | gau | subjs 要显示工具的帮助信息，请使用 -h 标志： root@kitploit: $ subjs -h 标志| 描述| 示例 ---|---|--- -c|...

MobSF_AI

MobSF AI Sidecar This project adds an AI-powered chat assistant to the Mobile Security Framework MobSF. It allows security analysts to ask questions about the analysis report generated by MobSF directly within the interface, leveraging OpenAI's model. Features Seamless Integration : Injects a...

CVE-2024-22243

CVE-2024-22243 Author: Sean Pesce This project contains an example web application that demonstrates exploitable scenarios for CVE-2024-22243, a URL-parsing vulnerability in the Java Spring Framework official disclosure here. Vulnerability Affected versions of Spring parse the "userinfo" segment ...

LiMEaide

LiMEaide v2.0 by Daryl Bennett - kd8bnyatgmaildotcom About LiMEaide is a python application designed to remotely or locally dump RAM of a Linux client and create a volatility profile for later analysis on your local host. I hope that this will simplify Linux digital forensics in a remote...

PowerSharpPack

Sponsored by PowerSharpPack Many useful offensive CSharp Projects wraped into Powershell for easy usage. Why? In my personal opinion offensive Powershell is not dead because of AMSI, Script-block-logging, Constrained Language Mode or other protection features. Any of these mechanisms can be...