webcopilot

WebCopilot Una herramienta de automatización que enumera subdominios, luego filtra parámetros de xss, sqli, open redirect, lfi, ssrf y rce y luego escanea vulnerabilidades. Características • Instalación • Uso • WebCopilot • Herramientas Usadas • Agradecimientos WebCopilot es una herramienta de...

wpscan

WPScan WordPress Security Scanner WPScan WordPress Vulnerability Database - WordPress Security Plugin INSTALL Prerequisites Optional but highly recommended: rbenv Ruby = 3.3 - Recommended: latest stable Curl = 7.72 - Recommended: latest stable The 7.29 has a segfault The 7.72 could result in...

wpscan

WPScan Escáner de Seguridad de WordPress Base de datos de vulnerabilidades de WordPress de WPScan - Plugin de seguridad de WordPress INSTALACIÓN Prerrequisitos Opcional pero altamente recomendado: rbenv Ruby = 3.3 - Recomendado: última versión estable Curl = 7.72 - Recomendado: última versión...

CLEANSTART-2026-QB44959 In Apache HTTP Server versions 2

Security vulnerability affects the apache2 package. In Apache HTTP Server versions 2...

CLEANSTART-2026-YR89103 Apache HTTP Server versions 2

Security vulnerability affects the apache2 package. Apache HTTP Server versions 2...

should-i-trust

should-i-trust Summary should-i-trust is a tool to evaluate OSINT signals for a domain. Requirements should-i-trust requires API keys from the following sources: Censys.io - Free for for first 250/quries/month VirusTotal - Free GrayHatWarFare - Free with limited results Use Case You're part of a...

CVE-2024-5522

EN A PoC exploit scanner for CVE-2024-5522 vulnerability in WordPress websites. This tool helps identify and exploit the vulnerability by scanning a list of target URLs and attempting a specific payload to determine if the site is vulnerable. Features Automatic Vulnerability Scanning : Scans targ...

CVE_Prioritizer

CVE Prioritizer CVE Prioritizer is a powerful tool that helps you prioritize vulnerability patching by combining CVSS, EPSS, CISA's Known Exploited Vulnerabilities and VulnCheck's community resources NVD++, KEV. It provides valuable insights into the likelihood of exploitation and the potential...

CVE-2022-36200

CVE-2022-36200 REDACTED...

Apktool

Apktool This is the repository for Apktool. The website is at theapktool.org repository. Apktool is a tool for reverse engineering third-party, closed, binary, Android apps. It can decode resources to nearly original form and rebuild them after making some modifications; it makes it possible to...

CVE-2024-4577

CVE-2024-4577 PoC corregido y minimalista de la CVE-2024-4577 Acabo de probar algunos PoCs para esta vulnerabilidad, y algunos de ellos no funcionaban correctamente, así que lo arreglé creando mi propio PoC no intrusivo y minimalista para comprobar si eres vulnerable. Cómo usar: python3...

CVE-2019-14287

CVE-2019-14287...

dockerscan

DockerScan v2.0 The Most Comprehensive Docker Security Scanner ByDaniel Garcia cr0hn | GitHub | Website Features • Installation • Quick Start • Documentation • Use Cases • What's New • Contributing 📑 Table of Contents Overview Features What's New in v2.0 Installation Quick Start Usage Private...

device-activity-tracker

Device Activity Tracker WhatsApp & Signal Activity Tracker via RTT Analysis ⚠️ DISCLAIMER : Proof-of-concept for educational and security research purposes only. Demonstrates privacy vulnerabilities in WhatsApp and Signal. Overview This project implements the research from the paper "Careless...

jshole

jshole Un escáner simple de vulnerabilidades de componentes JavaScript, basado en RetireJS. ¿Por qué usar JShole en lugar de RetireJS? Por defecto, RetireJS solo busca en una página, pero JShole intenta rastrear todas las páginas. Comenzar Requisitos requests Instalación git clone...

jshole

jshole A simple JavaScript components vulnrability scanner, based on RetireJS. Why use JShole instead of RetireJS? By default, RetireJS only searches one page, but JShole tries to crawl all pages. Get Started Requirements requests Install git clone https://github.com/callforpapers-source/jshole.g...

ansvif

ansvif A Not So Very Intelligent Fuzzer Marshall Whittaker oxagast [email protected] As the complexity of a system rises, as does the potential for problems within that system. --Whittaker's Law Compile Dependancies: automake autoconf-archive zlib1g-dev g++ gcc and libgtk2.0-dev if you want...

cervantes

Cervantes is an open-source, collaborative platform designed specifically for pentesters and red teams. It serves as a comprehensive management tool, streamlining the organization of projects, clients, vulnerabilities, and reports in a single, centralized location. By facilitating efficient data...

POC-CVE-2022-44268

POC-CVE-2022-44268...

wp_hunter

wphunter Análisis estático para buscar vulnerabilidades en plugins de Wordpress. / \ / \ / | \ / | \ // /| / \ | / \ / \ \ \ / | | \ Y / | / | \ | \ /| | / /\ / ||| /|/|| /| \ | / // / / / | Author: @JosueEncinar Starting the process Total plugins 87509 Starting the analisys Cómo añadir...