Xerxes

Xerxes Herramienta Dos con múltiples vectores disponibles para pruebas de estrés en servicios de internet. Uso $ ./Xerxes -H --== Xerxes enhanced by Sepehrdad Sh ==-- bin/Xerxes OPTIONS Xerxes dos tool enhanced OPTIONS: -H, --help display this help menu -V, --version display version --vecs displa...

Metadata-Attacker

Metadata-Attacker Con este pequeño conjunto de herramientas de pentesting de código abierto, puedes crear un archivo de imagen .jpg, audio .mp3 o video .mp4 que contenga metadatos personalizados o un conjunto de vectores de cross-site scripting para probar cualquier servicio web frente a posibles...

waf-checker

Una potente aplicación web para probar qué tan bien protege tu Cortafuegos de Aplicaciones Web WAF contra vectores de ataque comunes. → waf-checker.com ← Características Pruebas de seguridad 19+ categorías de ataque listas para usar: Inyección SQL, XSS, Path Traversal, Inyección de Comandos, SSRF...

Kaseya Virtual System Administrator - Open Redirect

Kaseya Virtual System Administrator 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 are susceptible to an open redirect vulnerability. An attacker can redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. id: CVE-2015-286...

macphish

macphish Office for Mac Macro Payload Generator Attack vectors There are 4 attack vectors available: beacon creds meterpreter meterpreter-grant For the 'creds' method, macphish can generate the Applescript script directly, in case you need to run it from a shell. beacon On execution, this payload...

kube-alien

Kube-alien This tool launches attack on k8s cluster from within. That means you already need to have an access with permission to deploy pods in a cluster to run it. After running the kube-alien pod it tries to takeover cluster's nodes by adding your public key to node's /root/.ssh/authorizedkeys...

llm-censorship-steering

LLM Censorship Steering This repository contains code implementation for Steering the CensorShip: Uncovering Representation Vectors for LLM "Thought" Control by Hannah Cyberey and David Evans. We introduce a method that finds "steering vectors" from LLM internals for detecting and controlling the...

liboqs

liboqs liboqs is an open source C library for quantum-safe cryptographic algorithms. liboqs Overview Status Supported Algorithms Key encapsulation mechanisms Signature schemes Stateful signature schemes Limitations and Security Platform limitations Support limitations Quickstart Linux and Mac...

graphql-threat-matrix

GraphQL Threat Matrix ¿Por qué graphql-threat-matrix? graphql-threat-matrix fue creado para cazadores de recompensas, investigadores de seguridad y hackers, con el fin de ayudar a descubrir vulnerabilidades en múltiples implementaciones de GraphQL. Las diferencias en cómo las implementaciones de...

RansomCoinPublic

RansomCoin Extracción de metadatos e Indicadores de Compromiso embebidos de ransomware, de forma escalable y eficiente, con integraciones con Cuckoo. Idealmente, se ejecuta durante el análisis dinámico de Cuckoo, pero también puede usarse para análisis estático en grandes colecciones de ransomwar...

Windows-RCE-exploits

My other github repo for vendor testing against fileless attacks - https://github.com/smgorelik/VendorSimTestScripts Windows-RCE-exploits The exploit samples database is a repository for RCE remote code execution exploits and Proof-of-Concepts for WINDOWS , the samples are uploaded for education...

XSSFuzzer

XSS Fuzzer XSS Fuzzer es una aplicación simple escrita en HTML/JavaScript/CSS plano que genera payloads XSS basados en vectores definidos por el usuario utilizando múltiples marcadores de posición que se reemplazan con listas de fuzzing. Ofrece la posibilidad de generar los payloads como texto...

web-check

Web-Check Comprehensive, on-demand open source intelligence for any website 🌐web-check.xyz Kindly supported by: NinjaPear API to get a full B2B profiles from any URL | Hostinger Deploy Web-Check with one click on Hostinger | Warp Built for coding with multiple AI agents ---|---|--- Contents About...

CCTV

The Community Cryptography Test Vectors CCTV is an experiment, part of the Community Cryptography Specification Project, in test vector collection and reuse. All cryptography-related test vectors are welcome, and projects are encouraged to reuse them and contribute back any new vectors they...

CVE-2026-104436

Zebra before 4.5.0 contains an uncontrolled resource consumption vulnerability that allows remote P2P peers to exhaust blocking-pool threads by sending oversized block locator vectors. Attackers can send getblocks or getheaders messages with up to 65,535 locator hashes, triggering per-hash chain...

EUVD-2026-91446

Zebra before 4.5.0 contains an uncontrolled resource consumption vulnerability that allows remote P2P peers to exhaust blocking-pool threads by sending oversized block locator vectors. Attackers can send getblocks or getheaders messages with up to 65,535 locator hashes, triggering per-hash chain...

CVE-2026-104436

Zebra versions before 4.5.0 are susceptible to an uncontrolled resource consumption vulnerability. Remote P2P peers can exhaust blocking-pool threads by transmitting oversized block locator vectors, specifically by sending getblocks or getheaders messages containing up to 65,535 locator hashes . ...

CESS

CESS — Secreto de Shamir Encantado Criptológicamente ¿Esto es basura o chapuza de IA? Un criptógrafo o implementador serio que revise CESS normalmente abrirá vectors/ y testdata/ antes de leer prosa. El conjunto de pruebas es la prueba de trabajo: codifica conocimiento de dominio que no puede...

cve-2021-44228-waf-tests

Simple bash script to test your WAF or other devices against Log4Shell attack strings and various bypasses Bypass tricks from: https://github.com/Puliczek/CVE-2021-44228-PoC-log4j-bypass-words To run: ./cve-2021-44228.sh -t -c Or to use the defaults of https://127.0.0.1 and 403: ./cve-2021-44228....

CVE-2018-7600.

IGLOO Corp, Won Chi Hyun Drupal RCE Analysis Report Drupal RCE CVE-2018-7600 Dont Forget to Put Your Adress into the Script ! Description: A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack...