metahub

MetaHub 是一个用于漏洞管理的自动化上下文安全发现丰富和影响评估工具。您可以将它与 AWS Security Hub 或任何兼容 ASFF 的安全扫描器一起使用。不再依赖无用的严重性等级，转而使用基于您自身环境的上下文影响评分定义。 目录 描述 快速运行 上下文 影响 高层架构 使用场景 配置 使用 Python 运行 使用 Docker 运行 使用 Lambda 运行 使用 Security Hub 自定义操作运行 AWS 认证 配置 Security Hub 配置上下文 输入 输出 过滤器 Security Hub 操作 贡献 描述 MetaHub...

metahub

MetaHub is an automated contextual security findings enrichment and impact evaluation tool for vulnerability management. You can use it with AWS Security Hub or any ASFF-compatible security scanner. Stop relying on useless severities and switch to impact scoring definitions based on YOUR context...

fortiscan

Fortiscan CVE-2018-13379 FG-IR-18-384 Exploitation Tool, You can use this tool to check the vulnerability in your FortiGate SSL-VPN. This vulnerability affects the following versions: • FortiOS 6.0 - 6.0.0 to 6.0.4 • FortiOS 5.6 - 5.6.3 to 5.6.7 • FortiOS 5.4 - 5.4.6 to 5.4.12...

CVE-2019-11869

CVE-2019-11869...

webmin_CVE-2019-15107

webminCVE-2019-15107 webminCVE-2019-15107...

Vm4J

Vm4J 用于检测 VMware 产品 log4j 漏洞的工具。 工作原理 首先启动一个 JNDIExploit 服务器。 启动本工具并将配置设置为正确的选项。 发送 payload。 截图 支持 VMware HCX VMware vCenter VMware Workspace One（即将添加） VMware NSX VMware Horizon VMware vRealize Operations Manager 注意 1. 本项目使用 Visual Studio 2022 和 .NET Framework 4.5。 2. 调试模式下，本工具将代理设置为...

pyfiscan

pyfiscan About Pyfiscan is free web-application vulnerability and version scanner and can be used to locate out-dated versions of common web-applications in Linux-servers. Example use case is hosting-providers keeping eye on their users installations to keep up with security-updates. Fingerprints...

cve-search

cve-search cve-search is a tool to import CVE Common Vulnerabilities and Exposures and CPE Common Platform Enumeration into a MongoDB to facilitate search and processing of CVEs. The main objective of the software is to avoid doing direct and public lookups into the public CVE databases. Local...

uro

uro Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: incremental urls e.g. /page/1/ and /page/2/ blog posts and similar human written conten...

WinRAR-Vulnerability-recurrence-tutorial

winrar漏洞复现教程 WinRAR-6.22、CVE-2023-38831、CNNVD-202308-1943、DM-202307-003730、QVD-2023-19572漏洞复现 漏洞信息 WinRAR 6.23 or WinRAR =6.22 参考链接： https://cn-sec.com/archives/1980228.html https://xxb.ecust.edu.cn/2023/0904/c8463a158425/page.htm 免责声明： 使用风险： 本工具仅供学习和技术研究目的使用。使用者应理解并接受使用该工具可能带来的风险和后果。 法律合规：...

secator

The pentester's swiss knife. Features • Supported commands • Installation • Usage • Documentation • Join us on Discord ! secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to improve productivity for pentesters a...

wpscan

WPScan WordPress Security Scanner WPScan WordPress Vulnerability Database - WordPress Security Plugin INSTALL Prerequisites Optional but highly recommended: rbenv Ruby = 3.3 - Recommended: latest stable Curl = 7.72 - Recommended: latest stable The 7.29 has a segfault The 7.72 could result in...

CVE-2023-20577

A heap overflow in the SMM (System Management Mode) module of certain AMD processors allows a local, unauthenticated attacker with a second vulnerability enabling SPI flash writes to achieve arbitrary code execution . The flaw affects multiple AMD product lines including 2nd–4th Gen EPYC , Ryzen ...

EUVD-2023-60617

A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution...

kr00ker

kr00ker 描述 该脚本是一个利用 KR00K 漏洞（CVE-2019-15126）的简单实验，可以解密易受攻击设备（接入点或客户端）中的部分 WPA2 CCMP 数据。 更具体地说，该脚本尝试在已知以下信息的情况下恢复 WPA2 CCMP 数据包的解密数据： TK（128 位全零） Nonce（在数据包头中以明文发送） 加密数据 其中： WPA2 AES-CCMP 解密 -- AESNonce,TK XOR Encrypted Data = Decrypted Data 解密数据流以 "\xaa\xaa\x03\x00\x00\x00" 开头 Nonce（104 位）=...

CVE-2025-4123-template

CVE-2025-4123-template...

detectar_cve-2024-3094

Detectarcve-2024-3094...

Privilege-Escalation-CVE-2019-13272-

Escalada de Privilegios - CVE-2019-13272- Este repositorio contiene un informe de la vulnerabilidad de Escalada de Privilegios CVE-2019-13272...

PatchaPalooza

PatchaPalooza patchapalooza.com — the interactive version is live! This CLI tool has been superseded by patchapalooza.com , a full interactive website for exploring and analyzing Microsoft Patch Tuesday data. It covers everything this tool does — and much more. Head there for the best experience...

log4j2burpscanner

SOLO PARA PRUEBAS, NO ATAQUES A NADIE SOLO PARA PRUEBAS, NO ATAQUES A NADIE SOLO PARA PRUEBAS, NO ATAQUES A NADIE Grupo de discusión Si el código QR no funciona, agrega WeChat f-f0ng, comentario log4j2burpscanner para intercambio Sigue la cuenta oficial de WeChat only security, responde...