react2shell-detector

React2Shell Detector A Chrome extension for detecting React2Shell vulnerabilities CVE-2025-55182 & CVE-2025-66478 in web applications. Overview React2Shell Detector is a browser extension that helps security researchers and web developers identify potential React2Shell vulnerabilities in web...

Zerologon_CVE-2020-1472

Zerologon CVE-2020-1472 This script is made for bulk checking your domain controllers for the Zerologon vulnerability. Note Zerologon vulnerabilities are dangerous for your domain controller, dont use the exploit on production servers. Arguments --ip Ip address for check on CVE-2020-1472 --file...

GDA-android-reversing-Tool

ˇ GDAGJoy Dex Analyzer GDA, an powerful Dalvik bytecode decompiler implemented in C++, which has the advantages of fast analysis and low memory&disk consumption and an stronger ability to decompiling the apk, dex, odex, oat, jar, class, aar files. GDA is completely native software and works witho...

fuzzdb

FuzzDB was created to increase the likelihood of finding application security vulnerabilities through dynamic application security testing. It's the first and most comprehensive open dictionary of fault injection patterns, predictable resource locations, and regex for matching server responses...

LinuxCheck

LinuxCheck Linux emergency response/information gathering/vulnerability detection tool, supporting 13 categories and 70+ checks including basic configuration/network traffic/task scheduling/environment variables/user information/Services/bash/malicious files/kernel Rootkit/SSH/Webshell/mining...

murphysec

中文 | EN MurphySec CLI is used for detecting vulnerable dependencies from the command-line, and also can be integrated into your CI/CD pipeline. Features 1. Analyze dependencies being used by your project, including direct and indirect dependencies 2. Detect known vulnerabilities in project...

clusterfuzzlite

ClusterFuzzLite ClusterFuzzLite is a continuous fuzzing solution that runs as part of Continuous Integration CI workflows to find vulnerabilities faster than ever before. With just a few lines of code, GitHub users can integrate ClusterFuzzLite into their workflow and fuzz pull requests to catch...

LFI-FINDER

🍀 LFI FINDER TOOL 🍀 Written by TMRSWRR Version 1.0.0 Instagram: TMRSWRR 📹 How to use 📹 Click on the image... LFI-FINDER is an open-source tool available on GitHub that focuses on detecting Local File Inclusion LFI vulnerabilities. Local File Inclusion is a common security vulnerability that allow...

semgrep

Code scanning at ludicrous speed...

dep-scan

Introduction OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration with ASPM/VM...

Smap

nmap alternative powered by shodan.io Smap is a passive port scanner built with shodan.io's free API. It takes the same command line arguments as Nmap and produces the same output, which makes it a drop-in replacement for Nmap. Features Scans 200 hosts per second Doesn't require any account/api k...

CVE-2021-41773_CVE-2021-42013

CVE-2021-41773CVE-2021-42013 CVE-2021-41773 CVE-2021-42013 बहु-थ्रेडेड भेद्यता बैच जांच और शोषण उपकरण परिचय यह उपकरण केवल सुरक्षा परीक्षण के लिए उपयोग किया जा सकता है, अवैध उपयोग के लिए नहीं! उपकरण स्थान CVE-2021-41773 CVE-2021-42013 बहु-थ्रेडेड भेद्यता बैच जांच और शोषण उपकरण उपकरण स्क्रीनशॉट...

security-audit-skill

security-audit A coding-agent skill that turns your agent into a security auditor. It orchestrates multiple parallel agents through a six-phase pipeline -- recon, hunting, validation, reporting, structured output, and independent verification -- to find exploitable vulnerabilities with real impac...

CVE-2023-35813

CVE-2023-35813 CVE-2023-35813 एक प्रूफ-ऑफ-कॉन्सेप्ट है जिसका उपयोग यह निर्धारित करने के लिए किया जाता है कि Sitecore का कोई इंस्टेंस सर्वर रिस्पॉन्स हेडर में संशोधन का विश्लेषण करके कमजोर है या नहीं। heretic द्वारा प्यार से बनाया गया 3...

log4j-scanner

Log4j Scanner Discover Log4Shell vulnerability CVE-2021-44832 in your files and directories. Description This Rust-based Log4j Scanner is designed to help you identify and locate vulnerable files that may contain the Log4Shell vulnerability CVE-2021-44832. It scans files and directories to find...

CVE-2022-21839-

CVE-2022-21839- The script actually has an option to check according to the IP address and informs if the weakness exists...

dalfox

Go v2.x संस्करण खोज रहे हैं? Dalfox v3, Rust में पूर्ण पुनर्लेखन है। Go कोडबेस को v2 शाखा पर संरक्षित किया गया है और इसे सुरक्षा बैकपोर्ट मिलते रहते हैं। समर्थन नीति के लिए SECURITY.md देखें, और v3 में क्या बदला है, इसके लिए माइग्रेशन गाइड देखें। Dalfox एक शक्तिशाली ओपन-सोर्स टूल है जो स्वचालन पर...

htcap

HTCAP htcap is a web application scanner able to crawl single page application SPA recursively by intercepting ajax calls and DOM changes. KEY FEATURES Recursive DOM crawling engine Discovers ajax/fetch/jsonp/websocket requests Supports cookies, proxy, custom headers, http auth and more Heuristic...

CVE-2020-17519

CVE-2020-17519 CVE-2020-17519 Cheetah भाषा संस्करण, बैच स्कैनिंग का समर्थन करता है। ip.txt को /script/漏洞探测/Apache/ फ़ोल्डर में कॉपी करें और Wker मुख्य प्रोग्राम खोलें।...

clair

Clair नोट : विकास के दौरान main शाखा अस्थिर या टूटी हुई स्थिति में हो सकती है। कृपया स्थिर बाइनरी प्राप्त करने के लिए main शाखा के बजाय releases का उपयोग करें। Clair एप्लिकेशन कंटेनरों में कमजोरियों के स्थैतिक विश्लेषण के लिए एक ओपन सोर्स प्रोजेक्ट है वर्तमान में OCI और docker शामिल हैं। क्लाइंट...