91787 matches found
navgix
navgix navgix is a multi-threaded golang tool that will check for nginx alias traversal vulnerabilities Techniques Currently, navgix supports 2 techniques for finding vulnerable directories or location aliases. Those being the following: Heuristics navgix will make an initial GET request to the...
DivideAndScan
DivideEt Impera And Scan and also merge the scan results Featured Projects NixOS| ---|--- NixOS| offsec.tools D ivideA ndS can is used to efficiently automate port scanning routine by splitting it into 3 phases: 1. Discover open ports for a bunch of targets. 2. Run Nmap individually for each targ...
FindFunc
FindFunc: Advanced Filtering/Finding of Functions in IDA Pro FindFunc is an IDA Pro plugin to find code functions that contain a certain assembly or byte pattern, reference a certain name or string, or conform to various other constraints. FindFunc won third place in the 2022 HexRays IDA Pro Plug...
VulnWhisperer
Createactionable data from your vulnerability scans VulnWhisperer is a vulnerability management tool and report aggregator. VulnWhisperer will pull all the reports from the different Vulnerability scanners and create a file with a unique filename for each one, using that data later to sync with...
DECEIVE
DECEIVE DECEIVE, the DECeption with Evaluative Integrated Validation Engine , is a high-interaction, low-effort honeypot system. Unlike most high-interaction honeypots, DECEIVE doesn't provide attackers with access to any actual system. AI actually does all the work of simulating a realistic...
gotatun
GotaTun A userspace WireGuard® implementation, and a fork of BoringTun. License All source code in this repository is subject to the terms of the Mozilla Public License, version 2.0 unless stated otherwise. A copy of this license can be found in the file "LICENSE" or at...
bulk_extractor
bulkextractor is a high-performance digital forensics exploitation tool. It is a "get evidence" button that rapidly scans any kind of input disk images, files, directories of files, etc and extracts structured information such as email addresses, credit card numbers, JPEGs and JSON snippets witho...
GoAround
GoAround A tool that allows the generation of AMSI bypasses and the automatic obfuscation of PowerShell scripts using three different obfuscation methods. GoAround is licensed under the MIT license. Refer to LICENSE for more information. GoAround Liability disclaimer Installation User's guide How...
BSF
BSF - Botnet Simulation Framework BSF provides a discrete simulation environment to implement and extend peer-to-peer botnets, tweak their settings and allow defenders to evaluate monitoring and countermeasures . Synopsis In the arms race between botmasters and defenders, the botmasters have the...
gau
getallurls gau getallurls gau fetches known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, Common Crawl, and URLScan for any given domain. Inspired by Tomnomnom's waybackurls. Resources Usage Installation ohmyzsh note Usage: Examples: $ printf example.com | gau $ cat domains.tx...
StegCracker
StegCracker Steganography brute-force utility to uncover hidden data inside files. Looking for the Docker repository? You can find it here Deprecation Stop wasting time and CPU, use stegseek instead! Not convinced? Look at these benchmarks stolen with love: password| Line| Stegseek v0.4|...
ecapture
eCapture 旁观者 Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. English · 汉字 !IMPORTANT Supports Linux on x8664 kernel 4.18+, aarch64 kernel 5.5+, and LoongArch64 loong64 kernel 6.6+. Android supports x8664 and aarch64 with the existing kernel minimums. Requires root...
thc-tips-tricks-hacks-cheat-sheet
THC's favourite Tips, Tricks & Hacks Cheat Sheet https://thc.org/tips A collection of our favourite tricks. Many of those tricks are not from us. We merely collect them. We show the tricks 'as is' without any explanation why they work. You need to know Linux to understand how and why they work. G...
Radium
| \ | | | | | | | | | | | | | | | // |/ | | | | | ' \ | |/ / \ | | | |/ \ / |/ |/ \ '| | | \ \ | | | | | || | | | | | | | Coded by: Mehul Jain -- For windows only | | | | | | | | | / / | | | | | '/ / | | | | / | | || || | | | /\ \ || |,||,|| ||/ -- Applications and keystrokes logging --...
john
John the Ripper This is the community-enhanced, "jumbo" version of John the Ripper. It has a lot of code, documentation, and data contributed by jumbo developers and the user community. It is easy for new code to be added to jumbo, and the quality requirements are low, although lately we've start...
intercept
Support the developer of this open-source project Signal Intelligence Platform A web-based interface for software-defined radio tools. Features Pager Decoding - POCSAG/FLEX via rtlfm + multimon-ng 433MHz Sensors - Weather stations, TPMS, IoT devices via rtl433 Sub-GHz Analyzer - RF capture and...
SetupHijack
SetupHijack Overview SetupHijack is a security research tool that exploits race conditions and insecure file handling in Windows installer and update processes. It targets scenarios where privileged installers or updaters drop files in %TEMP% or other world-writable locations, allowing an attacke...
telegram_bbbot
telegrambbbot Telegram Bug Bounty Bot https://telegram.me/bugbountychannel History This bot adopted special for deploying to Heroku General purposes of this got - "Be helpful for infosec community!" Bot use https://github.com/maddevsio/bbcrawler for fetching information Used heroku...
CVE-2026-23007-Serverless-Cold-Start-Memory-Remanence-Data-Leakage-
CVE-2026-23007 – Serverless Cold Start Memory Remanence Data Leakage Program Code Python Lambda sim lambdaremanence.py - Simulated Lambda environment reuse import os, secrets def firstinvocation: Simulates storing a secret in a global variable global SECRET SECRET = secrets.tokenhex16 return...
