267360 matches found
stunner
STUNNER Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers. TURN is a protocol mostly used in videoconferencing and audio chats WebRTC. If you find a misconfigured server you can use this tool to open a local socks proxy that relays all traffic via the TURN protocol into t...
iac-scan-runner
IaC Scan Runner Service that scans your Infrastructure as Code for common vulnerabilities...
attifyos
AttifyOS v3.0 AttifyOS is a distro intended to help you perform security assessment and penetration testing of Internet of Things IoT devices. It saves you a lot of time by providing a pre-configured environment with all the necessary tools loaded. The new version is based on Ubuntu 18.04 64-Bit ...
capture-the-flag
Capture The Flag! Remaster Linux Live CD images for the purpose of creating ready to use security wargames with pre-installed vulnerabilities to exploit. Requirements You will need the following in order to build the Live CD using the scripts in this project: Linux, with root access using sudo gi...
nuclei-templates
Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation β’ Contributions β’ Discussion β’ Community β’ FAQs β’ Join Discord Templates are the core of the which powers the actual scanning engine. This repository stores a...
rdesktop
IMPORTANTE: rdesktop ya no recibe mantenimiento Por favor, tenga en cuenta que este proyecto ya no recibe mantenimiento y no ha recibido parches en muchos aΓ±os. Se han reportado vulnerabilidades de seguridad, pero estas no han sido revisadas. Γselo con precauciΓ³n y bajo su propio riesgo. rdesktop...
crlfmap
CRLFMap CRLFMap is a tool to find HTTP Splitting vulnerabilities Why? I wanted to write a tool in Golang for concurrency I wanted to be able to fuzz both parameters and paths Installation root@kitploit: go get github.com/ryandamour/crlfmap Help root@kitploit: Available Commands: help Help about a...
nf-tables-lpe
nf-tables-lpe Exploits of Team Orca from Sea Security and Qrious Secure for multiple vulnerabilities in Netfilter's nftable module...
evil-ssdp
Overview This tool responds to SSDP multicast discover requests, posing as a generic UPNP device. Your spoofed device will magically appear in Windows Explorer on machines in your local network. Users who are tempted to open the device are shown a configurable phishing page. This page can load a...
botb
Break out the Box BOtB BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies. What does it do? BOtB is a CLI tool which allows you to: Exploit common container vulnerabilities Perform commo...
CISA-KEV
CISA-KEV Executive Summary This repository provides automated tracking and analysis of both CISA's KEV and VulnCheck KEV catalogs, cross-referenced with Nuclei security templates and public proof-of-concept exploits. By integrating VulnCheck KEV, coverage expands from 1,557 to 4,720 total unique...
truegaze
truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...
airborn-IOS-CVE-2025-24252
iOS "Airborne" Vulnerabilities - Log Artifact Extractor This script is designed to help identify potential traces of the "Airborne" set of vulnerabilities primarily affecting Apple's AirPlay protocol by querying iOS system logs from a .logarchive bundle. It automates the execution of several log...
zaproxy
The Zed Attack Proxy ZAP by Checkmarx is the worldβs most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...
flawfinder
About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...
sandsifter
s a n d s i f t e r : the x86 processor fuzzer Overview The sandsifter audits x86 processors for hidden instructions and hardware bugs, by systematically generating machine code to search through a processor's instruction set, and monitoring execution for anomalies. Sandsifter has uncovered secre...
vuln-bank
Vulnerable Bank Application π¦ A deliberately vulnerable web application for practicing application security testing of Web, APIs and LLMs, secure code review and implementing security in CI/CD pipelines. β οΈ WARNING: This application is intentionally vulnerable and should only be used for...
grype
Grype A vulnerability scanner for container images and filesystems...
Exploits + Shellcode + GHDB
The Exploit Database Git Repository This is an official repository of The Exploit Database, a project sponsored by Offensive Security. Our repositories are: Exploits & Shellcodes: gitlab.com/exploit-database/exploitdb Binary Exploits: gitlab.com/exploit-database/exploitdb-bin-sploits Papers:...
msploitego
msploitego - The Pentesting suite for Maltego THIS IS A BETA RELEASE, please be nice and report any issues Whats New New Features Now supporting multiple workspaces for Metasploit via Postgres queries A bash script that runs tons of auxiliary modules against targets. Really 'fattens' up the...