PadBuster

PadBuster - Script automatizado para realizar ataques de Padding Oracle Autor: Brian Holyfield - Gotham Digital Science [email protected] Créditos a J.Rizzo y T.Duong por proporcionar técnicas de explotación web de prueba de concepto y a S.Vaudenay por el descubrimiento inicial del ataque...

valhalla

valhalla Valhalla encuentra dispositivos vulnerables en shodan, también puede escanear una lista de dominios para encontrar vulnerabilidades. INSTALACIÓN git clone https://github.com/gotr00t0day/valhalla.git cd valhalla pip3 install -r requirements.txt chmod +x install.sh ./install.sh USO...

-CVE-2023-35985

CVE-2023-35985 reproduction, thx to @N00BIER for help...

uncaptcha

uncaptcha Defeating Google's audio reCaptcha system with 85% accuracy. Disclaimer unCaptcha is intended to be a proof of concept. As of the time of our paper, we found it to successfully solve reCaptcha's audio challenges with 85% success. Since that time, reCaptcha appears to include some...

openapi_security_scanner

OpenAPI Security Scanner About The Project Authorization security issues in modern web applications could not be easily picked up by security scanners. A few examples from Shopify, LINE, NordVPN. One of the reasons is that the security scanners mainly looking for SQLi, XSS, RCE instead of looking...

recollapse

REcollapse REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications. It can also be helpful to bypass WAFs and weak vulnerability mitigations. For more information, take a look at the REcollapse blog post. The goal of this tool ...

CVE-2018-8420

CVE-2018-8420...

prowler

Prowler Prowler es un escáner de vulnerabilidades de red implementado en un clúster de Raspberry Pi, desarrollado por primera vez durante el hackathon de la comunidad de seguridad informática de Singapur - HackSmith v1.0. Capacidades Escanear una red una subred particular o una lista de direccion...

prowler

Prowler Prowler is a Network Vulnerability Scanner implemented on a Raspberry Pi Cluster, first developed during Singapore Infosec Community Hackathon - HackSmith v1.0. Capabilities Scan a network a particular subnet or a list of IP addresses for all IP addresses associated with active network...

Mikrotik-router-hack

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. The vulnerability has long since been fixed, so this project has ended and will not be supported or updated anymore. You can fork it and updat...

Janus-Vulnerability-CVE-2017-13156-Exploit

This repository does not have a README...

r00kie-kr00kie

r00kie-kr00kie Descargo de responsabilidad Este es un exploit PoC para la vulnerabilidad kr00k CVE-2019-15126. Este proyecto tiene únicamente fines educativos y no puede ser utilizado para violar la ley ni para beneficio personal. El autor de este proyecto no se responsabiliza por cualquier daño...

r00kie-kr00kie

r00kie-kr00kie Disclaimer This is a PoC exploit for the CVE-2019-15126 kr00k vulnerability. This project is intended for educational purposes only and cannot be used for law violation or personal gain. The author of this project is not responsible for any possible harm caused by the materials...

crlfuzz

CRLFuzz A fast tool to scan CRLF vulnerability written in Go Resources Installation from Binary from Source from GitHub Usage Basic Usage Flags Target Single URL URLs from list from Stdin...

crlfuzz

CRLFuzz Una herramienta rápida para escanear vulnerabilidades CRLF escrita en Go Recursos Instalación desde Binario desde Código Fuente desde GitHub Uso Uso Básico...

LinuxCheck

LinuxCheck Linux emergency response/information gathering/vulnerability detection tool, supporting 13 categories and 70+ checks including basic configuration/network traffic/task scheduling/environment variables/user information/Services/bash/malicious files/kernel Rootkit/SSH/Webshell/mining...

penta

penta Herramienta de Pentest + semi-automática Penta es una herramienta de Pentest semiautomática que utiliza Python3. Proporciona funciones avanzadas para extraer información de vulnerabilidades encontradas en servidores específicos. Ahora estoy desarrollando un sistema de escaneo usando vuln-db...

openvas-scanner

Сканер OpenVAS Это сканер OpenVAS из состава Greenbone Community Edition. Он используется в устройствах Greenbone Enterprise и представляет собой полнофункциональный движок сканирования, который выполняет постоянно обновляемый и расширяемый набор тестов на уязвимости VTs. Релизы Все файлы релизов...

DorkNet

DorkNet Selenium powered Python script to automate searching the web for vulnerable applications. DorkNet can take a single dork or a list of dorks as arguments. After the proper command line arguments have been passed, the script will use Selenium and Geckodriver to find the results we want and...

CakeFuzzer

CakeFuzzer Última versión : 1.0 Licencia : GNU GPL v3.0 Cake Fuzzer es un proyecto diseñado para ayudar a descubrir vulnerabilidades de forma automática y continua en aplicaciones web creadas sobre frameworks específicos, con una tasa muy limitada de falsos positivos. Actualmente está implementad...