Log4Shell-Scanner

Log4Shell-Scanner Python script to detect Log4Shell Vulnerability CVE-2021-44228...

conflucheck

ConfluCHECK Python 3 script to identify CVE-2021-26084 via network requests. Requirement pip install -r requirements.txt How to use First of all, said that i'm not an expert programer then... i'm pretty sure that my code may be improve, i will accept pull request. python3 conflucheck.py python3...

metlo

Metlo API Security Secure Your API. Metlo is an open-source API security platform Metlo is an open source API security tool you can setup in 15 minutes that inventories your endpoints, detects bad actors and blocks malicious traffic in real time. Detect API attacks in real time. Automatically blo...

clusterfuzzlite

ClusterFuzzLite ClusterFuzzLite 是一种持续模糊测试解决方案，它作为持续集成（CI）工作流的一部分运行，以前所未有的速度发现漏洞。 只需几行代码，GitHub 用户就可以将 ClusterFuzzLite 集成到他们的工作流程中，并对拉取请求进行模糊测试，以在提交之前捕获错误。 ClusterFuzzLite 基于 ClusterFuzz。 功能 快速的代码变更（拉取请求）模糊测试，在代码合并前发现错误 崩溃测试用例的下载 持续较长时间的模糊测试（批量模糊测试），以异步发现代码变更模糊测试中遗漏的更深层次错误，并构建语料库用于代码变更模糊测试...

clusterfuzzlite

ClusterFuzzLite ClusterFuzzLite is a continuous fuzzing solution that runs as part of Continuous Integration CI workflows to find vulnerabilities faster than ever before. With just a few lines of code, GitHub users can integrate ClusterFuzzLite into their workflow and fuzz pull requests to catch...

syft

Syft Una herramienta CLI y una biblioteca de Go para generar una Lista de Materiales de Software SBOM a partir de imágenes de contenedores y sistemas de archivos. Excepcional para la detección de vulnerabilidades cuando se usa con un escáner comoGrype...

agentic-radar

¡Un escáner de seguridad para tus flujos de trabajo agénticos!...

CVE-2021-21985-Checker

CVE-2021-21985 Comprobador. Simple implementación en Powershell de @alt3kx nmap script. Uso .\CVE-2021-21985.ps1 vcenter.hostname.com Salida OBJETIVO VULNERABLE o OBJETIVO NO VULNERABLE...

ioctlance

IOCTLance 描述 该项目在 CODE BLUE 2023 上展示，论文题为 使用符号执行和污点分析增强 WDM 驱动程序漏洞挖掘，它引入了 IOCTLance，一种增强在 Windows 驱动程序模型 WDM 驱动程序中检测多种漏洞类型能力的工具。在针对 104 个已知存在漏洞的 WDM 驱动程序和 328 个未知驱动程序进行的全面评估中，IOCTLance 成功地在 26 个不同的驱动程序中发现了 117 个先前未知的漏洞。最终，报告了 41 个 CVE，包括 25 个拒绝服务案例、5 个访问控制不足案例和 11 个权限提升案例。 特性 目标漏洞类型 映射物理内存 可控进程句柄...

ioctlance

IOCTLance Description Presented at CODE BLUE 2023, this project titled Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis introduces IOCTLance, a tool that enhances its capacity to detect various vulnerability types in Windows Driver Model WDM drivers. In a...

vuln-CVE-2022-41082

vuln-CVE-2022-41082 https & http FOR HTTP: nmap -p80 --script exchange-vuln-check.nse FOR HTTPS: nmap -p443 --script exchange-vuln-check.nse SAVE RESULTS IN A FILE nmap -p80 --script exchange-vuln-check.nse -oN results.txt...

murphysec

中文 | EN MurphySec CLI is used for detecting vulnerable dependencies from the command-line, and also can be integrated into your CI/CD pipeline. Features 1. Analyze dependencies being used by your project, including direct and indirect dependencies 2. Detect known vulnerabilities in project...

dockerscan

DockerScan v2.0 The Most Comprehensive Docker Security Scanner | |...

inspec_CVE-2016-5195

Inspec profile for detecting CVE-2016-5195 aka Dirty COW. This profile contains one control which executes steps detailed here to assess vulnerability. More information on Dirty COW and the script. Please note this test takes a few minutes to execute...

dep-scan

Introducción OWASP dep-scan es una herramienta de auditoría de riesgos y seguridad de próxima generación basada en vulnerabilidades conocidas, avisos y limitaciones de licencia para las dependencias del proyecto. Se admiten tanto repositorios locales como imágenes de contenedores como entrada, y ...

LFI-FINDER

🍀 LFI FINDER TOOL 🍀 Written by TMRSWRR Version 1.0.0 Instagram: TMRSWRR 📹 How to use 📹 Click on the image... LFI-FINDER is an open-source tool available on GitHub that focuses on detecting Local File Inclusion LFI vulnerabilities. Local File Inclusion is a common security vulnerability that allow...

Smap

nmap alternative powered by shodan.io Smap is a passive port scanner built with shodan.io's free API. It takes the same command line arguments as Nmap and produces the same output, which makes it a drop-in replacement for Nmap. Features Scans 200 hosts per second Doesn't require any account/api k...

fuzzdb

FuzzDB was created to increase the likelihood of finding application security vulnerabilities through dynamic application security testing. It's the first and most comprehensive open dictionary of fault injection patterns, predictable resource locations, and regex for matching server responses...

vulscan

vulscan - Vulnerability Scanning with Nmap Introduction Vulscan is a module which enhances nmap to a vulnerability scanner. The nmap option -sV enables version detection per service which is used to determine potential flaws according to the identified product. The data is looked up in an offline...

GDA-android-reversing-Tool

ˇ GDAGJoy Dex Analyzer GDA, an powerful Dalvik bytecode decompiler implemented in C++, which has the advantages of fast analysis and low memory&disk consumption and an stronger ability to decompiling the apk, dex, odex, oat, jar, class, aar files. GDA is completely native software and works witho...