45724 matches found
[File Time Changer] Command-line Tool to quickly change the Date/Time stamp of the file
File Time Changer is the Free Command-line tool to quickly change the Date/Time stamp of the file. It also allows you to view the current date/time of the file before modifying it. You can view or modify all the 3 types of timestamp for the file, Creation Time Last Access Time Last Modified Time...
[L517] Simple WordList Generator for Windows
L517 is a word-list generator for the Windows Operating System. I wrote L517 to be the only word-list generator and editor I would ever need. L517 is small considering what it does, it is fast considering it's a Windows app, and it is lightweight when not loading astronomically large lists. A...
[SSLyze v0.6] SSL Server Configuration Scanning Tool
SSLyze is a Python tool that can analyze the SSL configuration of a server by connecting to it. It is designed to be fast and comprehensive, and should help organizations and testers identify misconfigurations affecting their SSL servers. Features SSL 2.0/3.0 and TLS 1.0/1.1/1.2 compatibility...
[SET] Social-Engineer Toolkit 4.1.3
TrustedSec Release the latest version of Social-Engineer Toolkit SET as 4.1.3. As most of us know that, It is an open source, python-driven, social-engineering penetration testing framework of custom tools which solely focuses on attacking the human element of penetration testing. It was designed...
audit_couchdb
Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...
ARPwner
Installation apt-get install python-pypcap...
voidaccess
VoidAccess OSINT auto-alojable para convertir consultas de investigaciรณn en la web oscura en inteligencia de amenazas estructurada. Creado para investigadores de seguridad, equipos de inteligencia de amenazas e investigadores autorizados que necesitan recopilaciรณn, enriquecimiento, mapeo de...
udpack
UDPack UDPack is an extensible generic UDP packet obfuscator. The purpose of this application is to sit in the path of a UDP data stream, and obfuscate, deobfuscate or otherwise modify the packets. Python 3.4 or above is required, since this script uses the asyncio library. Using the latest Pytho...
kismet
https://www.kismetwireless.net La documentaciรณn de Kismet se puede encontrar y leer mรกs fรกcilmente en el sitio web de Kismet El repositorio de documentaciรณn se encuentra en: $ git clone https://www.kismetwireless.net/git/kismet-docs.git y duplicado en Github en: $ git clone...
CVE-2020-1938
CVE-2020-1938 La herramienta se utiliza รบnicamente para investigaciรณn de seguridad y autocomprobaciรณn interna. Estรก prohibido usarla para lanzar ataques ilegales; el usuario asume las consecuencias. apache-tomcat-8.5.32.zip para probar tomcat Lectura arbitraria de archivos java -jar 1.jar...
wfuzz
Wfuzz - The Web Fuzzer Wfuzz has been created to facilitate the task in web applications assessments and it is based on a simple concept: it replaces any reference to the FUZZ keyword by the value of a given payload. A payload in Wfuzz is a source of data. This simple concept allows any input to ...
allstar
Allstar !IMPORTANT The OpenSSF-hosted Allstar GitHub App has been retired. Allstar, the OpenSSF Scorecard subproject, itself continues to be maintained โ you must now run it yourself, either as a GitHub Action or as a service daemon. See ossf/allstar881 for more details. If your organization was...
zap-scripts
zap-scripts Zed Attack Proxy Scripts for finding CVEs and Secrets. Building This project uses Gradle to build the ZAP add-on, simply run: ./gradlew build in the main directory of the project, the add-on will be placed in the directory build/zapAddOn/bin/. Usage The easiest way to use this repo in...
social-engineer-toolkit
The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...
sitrep
SitRep Extensible, configurable host triage. Purpose SitRep is intended to provide a lightweight, extensible host triage alternative. Checks are loaded dynamically at runtime from stand-alone files. This allows operators to quickly modify existing checks, or add new checks as required. Checks are...
amradio
Sistema de Interrupciรณn de Radio AM Un sistema de radiodifusiรณn de radio AM de 12 canales que utiliza Red Pitaya FPGA para la transmisiรณn de alertas de emergencia en tรบneles no tripulados. ยฟPor quรฉ radio AM en un tรบnel? Durante la construcciรณn y el mantenimiento, los vehรญculos con radios AM...
autoresponder
AutoResponder Carbon Black Response IR tool for hunting threats in an environment What is it? AutoResponder is a tool aimed to help people to carry out their Incident Response tasks WITH the help of Carbon Black Response's awesome capabilities and WITHOUT much bothering IT/System/Network Teams Wh...
boko
boko Application Hijack Scanner for macOS boko.py is an application scanner for macOS that searches for and identifies potential dylib hijacking and weak dylib vulnerabilities for application executables, as well as scripts an application may use that have the potential to be backdoored. The tool...
CureIAM
CureIAM Limpieza automatizada de cuentas IAM con permisos excesivos en infraestructura de GCP CureIAM es un motor fรกcil de usar, fiable y de alto rendimiento para la aplicaciรณn del Principio de Mรญnimo Privilegio en la infraestructura en la nube de GCP. Permite a los equipos de DevOps y Seguridad...
CloudMiner
CloudMiner Ejecuta cรณdigo dentro del servicio Azure Automation sin que te cobren Descripciรณn CloudMiner es una herramienta diseรฑada para obtener potencia de computaciรณn gratuita dentro del servicio Azure Automation. La herramienta utiliza el flujo de carga de mรณdulos/paquetes para ejecutar cรณdigo...
hsecscan
hsecscan Un escรกner de seguridad para cabeceras de respuesta HTTP. Requisitos Python 2.x Mรณdulos de Python os.path argparse sqlite3 urlparse urllib2 urllib json ssl Instalaciรณn $ pip install hsecscan Uso $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D DBFILE -d 'POS...
port-scan-automation
LazyMap - Auto NMAP Scanning Script Automate NMAP scans and custom Nessus polices. Developed by Daniel Compton https://github.com/commonexploits/port-scan-automation.git Released under AGPL see LICENSE for more information Installing git clone...
permission-manager
Permission manager Welcome to the Permission Manager! ๐ ๐ Permission Manager is an application developed by SIGHUP that enables a super-easy and user-friendly RBAC management for Kubernetes. If you are looking for a simple and intuitive way of managing your users within a Kubernetes cluster, this...
my-cool-demo-php-code
ยกMi cรณdigo PHP de demostraciรณn genial! Este repositorio contiene algo conocido super malo. ยฟQuรฉ serรก, me pregunto? ยฟPuede estar relacionado con un CVE ID conocido?...
certsync
certsync certsync is a new technique in order to dump NTDS remotely, but this time without DRSUAPI : it uses golden certificate and UnPAC the hash. It works in several steps: 1. Dump user list, CA informations and CRL from LDAP 2. Dump CA certificate and private key 3. Forge offline a certificate...
rustls
Rustls es una biblioteca TLS moderna escrita en Rust. Estado Rustls se utiliza en producciรณn en muchas organizaciones y proyectos. Nuestro objetivo es mantener una estabilidad razonable de la superficie de la API, pero la API puede evolucionar a medida que realizamos cambios para incorporar nueva...
edk2
============== Proyecto EDK II Un entorno de desarrollo de firmware moderno, rico en funciones y multiplataforma para las especificaciones UEFI y PI de www.uefi.org. .. image::...
MSC-EvilTwin-Local-Privilege-Escalation
CVE-2025-26633 - Consola de administraciรณn de Microsoft .msc EvilTwin PoC de escalada de privilegios local Dรญa cero en el momento de la divulgaciรณn marzo de 2025 โ Explotado activamente en la naturaleza por Water Gamayun APT SOLO PARA PRUEBAS DE SEGURIDAD E INVESTIGACIรN AUTORIZADAS Detalles de l...
CVE-2025-65318-and-CVE-2025-65319
PoC para CVE-2025-65318 y CVE-2025-65319 CVE-2025-65318 BDU:2025-13740: Al utilizar la funcionalidad de interacciรณn con archivos adjuntos, Canary Mail 5.1.40 y versiones anteriores guarda documentos en un sistema de archivos sin una etiqueta Mark-of-the-Web, lo que permite a los atacantes omitir...
CVE-2026-68138
CVE-2026-68138: condiciรณn de carrera en la tabla de tasas qdisc de Linux para escalar a root local Este repositorio contiene un exploit de prueba de concepto de escalada local de privilegios para CVE-2026-68138 , una condiciรณn de carrera en el cรณdigo de la tabla de tasas del control de trรกfico de...
awesome-windows-domain-hardening
Awesome Windows Domain Hardening Una lista curada de increรญbles tรฉcnicas de endurecimiento hardening de seguridad para Windows. Creada por gepeto42 y PaulWebSec, pero muy inspirada en la investigaciรณn de PyroTek3. Resumen Este documento resume la informaciรณn relacionada con la charla de Pyrotek y...
copy-fail-CVE-2026-31431-cpp
Este repositorio no tiene un README...
bettercap
This repository is DEPRECATED, bettercap developementmoved here and every version 2.0.0 is considered LEGACY and NOT SUPPORTED...
panopticon
DEPRECATED The Panopticon project moved toGitlab and was restructed into multiple crates. The Qt GUI was replaced with Verso. I will merge PRs but won't do any substantial work on this version. Most links below are dead. Panopticon - A Libre Cross Platform Disassembler Panopticon is a cross...
CVE-2026-56158-.NET-Framework-RCE-PoC-Exploit
CVE-2026-56158 โ Exploit PoC de ejecuciรณn remota de cรณdigo RCE en .NET Framework Crรญtico CVSS 9.8 โ Deserializaciรณn de datos no confiables CWE-502 en Microsoft .NET Framework y .NET Runtime Parcheado: 14 de julio de 2026 | Atribuido a: Positive Technologies PT-2026-60174 Tabla de contenido...
appmon
ๆฌข่ฟไฝฟ็จAppMon๏ผ ๅทฒๅจไปฅไธๆดปๅจไธญๅฑ็คบ๏ผ ็พๅฝ้ปๅธฝๅคงไผ & ๆฌงๆดฒ้ปๅธฝๅคงไผ AppMon ๆฏไธไธช่ชๅจๅๆกๆถ๏ผ็จไบ็ๆงๅ็ฏกๆนๅ็ macOSใiOS ๅ Android ๅบ็จ็็ณป็ป API ่ฐ็จใๅฎๅบไบ Fridaใ ่ฟไธช้กน็ฎ็ๅฎ็ฐ็ฆปไธๅผ Ole Andrรฉ Vadla Ravnรฅs ๏ผๆ่ฐจๅฐๆญค้กน็ฎ็ฎ็ปไปใๅ ณๆณจไป็ GitHubใTwitter ๅฎๅ ๅซไปฅไธ็ปไปถ๏ผ AppMon Sniffer - ๆฆๆช API ่ฐ็จ๏ผๅ็ฐๅบ็จๆง่ก็ๆ่ถฃๆไฝ Appmon Intruder - ๆไฝ API ่ฐ็จๆฐๆฎ๏ผๆนๅๅบ็จ็ๅๅง่กไธบ AppMon Android Tracer - ่ชๅจ่ฟฝ่ธช Androi...
openssl_g2.5_v1_0_1g
OpenSSL 1.0.1g 7 Abr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson Todos los derechos reservados. DESCRIPCIรN El Proyecto OpenSSL es un esfuerzo colaborativo para desarrollar un kit de herramientas robusto, de calidad comercial, completo y de...
copy-fail-go
copy-fail-go Puerto en Go del PoC en Python de grenkoca para CVE-2026-31431 copy-fail. Esta versiรณn compila a un binario completamente estรกtico con cero dependencias en tiempo de ejecuciรณn: sin Python, sin pip, sin restricciones de versiรณn de libc. Colรณcalo en cualquier objetivo Linux y ejecรบtalo...
Log-4j-scanner
log4j-scan Un escรกner totalmente automatizado, preciso y extenso para encontrar hosts vulnerables a log4j Caracterรญsticas Soporte para listas de URLs. Fuzzing de mรกs de 60 cabeceras de solicitud HTTP no solo 3-4 cabeceras como en herramientas vistas anteriormente. Fuzzing de parรกmetros de datos...
woocommerce_scanner
This repository does not have a README...
hulak v0.3.33
Git-native API client with encrypted secrets. REST ยท GraphQL ยท OAuth Quick Start โข GraphQL Explorer โข Project Layout โข Documentation Run one request, a whole directory, or stay interactive hulak run ./requests/ Hulak runs request files directly from your project. It supports concurrent directory...
GhostLock-5.10
GhostLock 5.10 This is a kernel root exploit for the Amazon Fire Max 11 sunstone and the Fire TV Stick 4K Max 2nd Gen / 2023 karat, adapted from CVE-2026-43499 in CyberMeowfia. Supported devices Two devices are supported, both on Fire OS 8. Each has its own build target. Fire Max 11 sunstone Fire...
windows v6.05
Windows Windows inside a Docker container. Features โจ Runs Windows inside a Docker container Automatic download and hands-free installation Supports modern and legacy Windows releases Near-native performance with KVM acceleration Customizable CPU, memory, and storage allocation Dynamic memory...
IronFox v152.0.6
IronFox F-Droid QR Code: IronFox is a fork of Divested Computing Group's Mull Browser, based on Mozilla Firefox. Our goal is to continue the legacy of Mull by providing a free and open source, privacy and security-oriented web browser for daily use. !TIP Find a bug? Encounter an annoying problem?...
PhantomCrawler - Boost Website Hits By Generating Requests From Multiple Proxy IPs
PhantomCrawler allows users to simulate website interactions through different proxy IP addresses. It leverages Python, requests, and BeautifulSoup to offer a simple and effective way to test website behaviour under varied proxy configurations. Features: Utilizes a list of proxy IP addresses from...
MaccaroniC2 - A PoC Command And Control Framework That Utilizes The Powerful AsyncSSH
MaccaroniC2 is a proof-of-concept Command and Control framework that utilizes the powerful AsyncSSH Python library which provides an asynchronous client and server implementation of the SSHv2 protocol and use PyNgrok wrapper for ngrok integration. This tool is inspired for a specific scenario whe...
GATOR - GCP Attack Toolkit For Offensive Research, A Tool Designed To Aid In Research And Exploiting Google Cloud Environments
GATOR - GCP Attack Toolkit for Offensive Research , a tool designed to aid in research and exploiting Google Cloud Environments. It offers a comprehensive range of modules tailored to support users in various attack stages, spanning from Reconnaissance to Impact. Modules Resource Category |...
Commander - A Command And Control (C2) Server
Commander is a command and control framework C2 written in Python, Flask and SQLite. It comes with two agents written in Python and C. Under Continuous Development Not script-kiddie friendly Features Fully encrypted communication TLS Multiple Agents Obfuscation Interactive Sessions Scalable Base6...
JSpector - A Simple Burp Suite Extension To Crawl JavaScript (JS) Files In Passive Mode And Display The Results Directly On The Issues
JSpector is a Burp Suite extension that passively crawls JavaScript files and automatically creates issues with URLs, endpoints and dangerous methods found on the JS files. Prerequisites Before installing JSpector, you need to have Jython installed on Burp Suite. Installation 1. Download the late...
WMIExec - Set Of Python Scripts Which Perform Different Ways Of Command Execution Via WMI Protocol
Set of python scripts which perform different ways of command execution via WMI protocol. Blog Post https://whiteknightlabs.com/2023/06/26/navigating-stealthy-wmi-lateral-movement/ Usage wmiexecscheduledjob.py Is a python script which authenticates to a remote WMI instance and execute commands vi...