crlfuzz

CRLFuzz A fast tool to scan CRLF vulnerability written in Go Resources Installation from Binary from Source from GitHub Usage Basic Usage Flags Target Single URL URLs from list from Stdin...

crlfuzz

CRLFuzz Быстрый инструмент для сканирования уязвимости CRLF, написанный на Go Ресурсы Установка из двоичного файла из исходного кода из GitHub Использование...

LinuxCheck

LinuxCheck Linux emergency response/information gathering/vulnerability detection tool, supporting 13 categories and 70+ checks including basic configuration/network traffic/task scheduling/environment variables/user information/Services/bash/malicious files/kernel Rootkit/SSH/Webshell/mining...

crawlergo

crawlergo A powerful browser crawler for web vulnerability scanners English Document | 中文文档 crawlergo is a browser crawler that uses chrome headless mode for URL collection. It hooks key positions of the whole web page with DOM rendering stage, automatically fills and submits forms, with...

penta

penta Инструмент полуавтоматизации пентестинга Penta — это инструмент полуавтоматизации пентестинга на Python3. Он предоставляет расширенные возможности для извлечения информации об уязвимостях, найденных на конкретных серверах. Сейчас я разрабатываю систему сканирования с использованием vuln-db...

openvas-scanner

Сканер OpenVAS Это сканер OpenVAS из состава Greenbone Community Edition. Он используется в устройствах Greenbone Enterprise и представляет собой полнофункциональный движок сканирования, который выполняет постоянно обновляемый и расширяемый набор тестов на уязвимости VTs. Релизы Все файлы релизов...

DorkNet

DorkNet Selenium powered Python script to automate searching the web for vulnerable applications. DorkNet can take a single dork or a list of dorks as arguments. After the proper command line arguments have been passed, the script will use Selenium and Geckodriver to find the results we want and...

CakeFuzzer

CakeFuzzer Latest release : 1.0 License : GNU GPL v3.0 Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives. Currently it is implemented to support the Cake...

CVE-2022-0847

CVE-2022-0847 CVE-2022-0847...

security-research

Исследования в области безопасности Этот проект содержит отчёты об уязвимостях и сопровождающие их PoC-эксплойты proof-of-concept, связанные с исследованиями, проводимыми в Google и затрагивающими код, не принадлежащий Google. Мы считаем, что раскрытие информации об уязвимостях — это дорога с...

scriptkiddi3

Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using shell script and open source tools. How it works • Installation • Install with Docker • Usage • MODES • Important Notes | Webhook configurations • For Develope...

scriptkiddi3

Optimice su proceso de reconocimiento y detección de vulnerabilidades con SCRIPTKIDDI3, una herramienta de reconocimiento y detección inicial de vulnerabilidades construida con script de shell y herramientas de código abierto. Cómo funciona • Instalación • Instalar con Docker • Uso • MODOS • Nota...

CVE-2024-39840-POC

adapted from writeup: https://memorycorruption.net/posts/rce-lua-factorio/ works on factorio 1.1.86...

CVE-2023-42793

root@kitploit: Batch scan python teamcityscan.py -f targets.txt -o results.txt Single target python teamcityscan.py -u http://target.com:8111 -o result.txt Specify thread count python teamcityscan.py -f urls.txt -t 20 -o vuln.txt Target file format targets.txt: root@kitploit:...

GPT_Vuln-analyzer

GPTVuln-analyzer This is a Proof Of Concept application that demostrates how AI can be used to generate accurate results for vulnerability analysis and also allows further utilization of the already super useful ChatGPT made using openai-api, python-nmap, dnsresolver python modules and also use...

vscan

vscan vulnerability scanner tool is using nmap and nse scripts to find vulnerabilities This tool puts an additional value into vulnerability scanning with nmap. It uses NSE scripts which can add flexibility in terms of vulnerability detection and exploitation. Below there are some of the features...

Taipan

Taipan is now a sponsored project. The Community sponsor will receive access to the laset version of Taipan Community Edition. The free version is release after three months from the release date. To know more visit: https://github.com/enkomio-sponsor/info or https://taipansec.com. Latest Communi...

CVE-2022-29154

CVE-2022-29154 Authors: Ege BALCI, Taha HAMAD This repository contains the HIP2022 presentation materials for CVE-2022-29154 vulnerability. The full presentation recording is available here but the slides in the video are added later offline by the conference team and it is an old version hence...

Firmware_Slap

Firmware Slap Firmware slap combines concolic analysis with function clustering for vulnerability discovery and function similarity in firmware. Firmware slap is built as a series of libraries and exports most information as either pickles or JSON for integration with other tools. Slides from the...

STEWS

STEWS: Security Testing and Enumeration of WebSockets STEWS is a tool suite for security testing of WebSockets This research was first presented at OWASP Global AppSec US 2021 Features STEWS provides the ability to: Discover : find WebSockets endpoints on the web by testing a list of domains...