moniorg

moniorg Description By looking through CT logs an attacker can gather a lot of information about organization's infrastructure i.e. internal domains,email addresses in a completly passive manner. moniorg leverage certificate transparency logs to monitor for newly issued domains based on...

credmap

credmap: The Credential Mapper Credmap is an open source tool that was created to bring awareness to the dangers of credential reuse. It is capable of testing supplied user credentials on several known websites to test if the password has been reused on any of these. An official introductionary...

Powershell-C2

Powershell-C2 Este ataque se deriva de mi Powershell Payload Excel Delivery, pero utiliza un método realmente interesante para el comando y control/persistencia en el equipo. Puedes encontrar un tutorial aquí:...

fastfuz-chrome-ext

FastFuzz Chrome Extension Fast fuzzing websites with chrome extension Screenshot Install Add Your Custom Files Open files.txt Paste your file or directory name in line by line Happy Hunting TODO Add response size foundings Add new specific file and directory names Add Extension to chrome extensio...

CVE-2017-0108

Microsoft Office 2007 SP3、2010 SP2、Word Viewer、Skype for Business 2016、Lync 2013 SP1、Lync 2010、Live Meeting 2007、Silverlight 5、Windows Vista SP2、Windows Server 2008 SP2 及 R2 SP1、Windows 7 SP1 中的 Windows 图形组件允许远程攻击者通过精心构造的网站执行任意代码，此漏洞又名“图形组件远程代码执行漏洞”。此漏洞与 CVE-2017-0014 描述的不同。 此漏洞编号为 MS17-011 来自利比亚...

privacyguides.org

Tu recurso central de privacidad y seguridad para protegerte en línea. Acerca de Privacy Guides es un sitio web con motivación social que proporciona información para proteger la seguridad y privacidad de tus datos. Nuestra misión es informar al público sobre el valor de la privacidad digital y l...

CVE-2022-27414

CVE-2022-27414 - SQL-Injection College Website CMS v1.0 - CVE-2022-27414 - SQL Injection CVE url https://vulners.com/cve/CVE-2022-27414 PoC below Vulnerable Code starts from line 9 in "cwms\departments\index.php" query"SELECT FROM departmentlist where deleteflag = 0 and status = 1 order by name...

scodescanner

SCodeScanner SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities. The main objective for this scanner is to find the vulnerabilities inside the source code before code gets published in Prod. Website for newreleases, new...

OSINT-Framework

OSINT Framework http://osintframework.com Notes OSINT framework focused on gathering information from free tools or resources. The intention is to help people find free OSINT resources. Some of the sites included might require registration or offer more data for $$$, but you should be able to get...

EasyScan

EasyScan EasyScan 是一个 Python 脚本，通过检查网站的 HTTP 头部、DNS 记录及其他配置来分析其安全性。该脚本会生成一份安全报告，包含评分、等级以及针对潜在漏洞的修复建议。 功能与测试项 该脚本涵盖以下测试项： 1. SSL/TLS 验证 ：检查站点是否使用 HTTPS，验证证书有效性，并报告过期情况（提前30天发出警告）。 2. 同站点脚本 ：检查是否存在 Referrer-Policy 头部及 meta 标签。 3. SPF 记录 ：检查是否存在发件人策略框架记录。 4. DMARC 记录 ：检查是否存在基于域的消息认证、报告与一致性记录。 5. DNS...

Cooper

Cooper, 名词, 木桶或木桶的制造者或修理工 （这是一个“桶中之鱼”的玩笑。我喜欢双关语！） 一款用于摄入HTML并生成适用于钓鱼活动的HTML源文件的Python工具。 Cooper简化了克隆目标网站或电子邮件以用于钓鱼活动的过程。只需找到要使用的URL或下载原始邮件内容，然后将其输入给Cooper。Cooper会克隆内容并自动为您准备好用于活动。脚本、图像和CSS可以修改为使用直接链接而非相对链接，链接被更改为指向您的钓鱼服务器，表单被更新为将数据发送给您——所有这些都在几秒钟内完成。Cooper是跨平台的，应该可以在macOS、Linux和Windows上运行。...

ddos

ndbiaw 一个Python脚本，通过HTTP Flood方法对网站进行DDOS攻击，一个普通网站只需5秒就能完全瘫痪！ 使用方法： 此脚本可在Windows和Android（Termux）上运行，以下是使用说明： pip install -r requirements.txt python ndbiaw.py 重要提示！！！ 此脚本仅供教育用途。使用此脚本造成的任何损失，本人概不负责！ Based on Pummel by HC 133...

Th3inspector

🚀🚀🔥🔥🔥MIRA MI NUEVA HERRAMIENTA PRO PRIVADA 🔥🔥🔥🔥🚀🚀https://XAttackerV50.Pro Herramienta Th3inspector 🕵️ Th3inspector 🕵️ la mejor herramienta para recopilación de información 🔎 ⭐ Todo en uno para recopilación de información ⭐ Th3inspector 🕵️ la mejor herramienta para recopilación de información 🔎...

onionshare

OnionShare OnionShare 是一款开源工具，让你能够通过 Tor 网络安全且匿名地分享文件、托管网站以及与朋友聊天。 安装 OnionShare 你可以从 OnionShare 网站 下载适用于 Windows 和 macOS 的 OnionShare。 在 macOS 上，你也可以使用 Homebrew： brew install --cask onionshare 请参阅 这些说明 以在 Linux 上以 Flatpak 或 Snap 包形式安装 OnionShare。 文档 要了解 OnionShare 的工作原理、其安全特性、使用方法以及如何为项目做贡献，请访问...

protections-artifacts

Protections Artifacts Elastic Security prevents ransomware and malware, detects advanced threats, and arms responders with vital context. It’s free and open, ready for every endpoint. Protections-Artifacts is the home of our detection logic rules, yara, etc for Elastic Security for endpoint. At...

web-check

Web-Check Inteligencia de código abierto integral y bajo demanda para cualquier sitio web 🌐web-check.xyz Con el amable apoyo de: NinjaPear API para obtener perfiles B2B completos desde cualquier URL | Hostinger Despliega Web-Check con un solo clic en Hostinger | Warp Diseñado para programar con...

The vulnerability of the FOQUZ platform, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the FOQUZ platform, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

ssrf-king

🔥 ssrf-king 🔥 v1.12 Latest SSRF plugin for burp that Automates SSRF Detection in all of the Request If you are facing any problems or would like a new feature that is not listed below Please create a new issue below in this form Create New Issue Upcoming Features Checklist ✔️ It will soon have a...

snare

SNARE 超级下一代高级响应式蜜罐 关于 SNARE 是一个 Web 应用蜜罐传感器，可吸引来自互联网的各种恶意行为。 文档 文档可在此处找到。 基本概念 表面优先。专注于攻击面生成。 传感器与主控。轻量级收集器（SNARE）与中央决策器（tanner）。 开始使用 你需要 Python 3.6 来运行 SNARE 本工具已在最新的基于 Ubuntu 的 Linux 上测试通过。 设置步骤 1. 获取 SNARE：git clone https://github.com/mushorg/snare.git 并 cd snare 2. 可选 创建虚拟环境：python3 -m venv...