jvmxray

JVMXRay: Java Application Security Monitoring Duke history Documentation | Changes from Upstream | Project Blog JVMXRay monitors Java applications in real-time via bytecode injection, detecting vulnerabilities and suspicious activity without code changes. 19 modular sensors track file access,...

wifi-passview

WiFi Passview WiFi Passview is an open-source batch script-based program that can recover your WiFi Password easily in seconds. This is for Windows OS only. Basically, this scripted program has the same function as other passview software such as webpassview and mailpassview. Disclaimer : WiFi...

faraday

Open Source Vulnerability Manager Security has two difficult tasks: designing smart ways of getting new information, and keeping track of findings to improve remediation efforts. With Faraday, you may focus on discovering vulnerabilities while we help you with the rest. Just use it in your termin...

telegram-bot-dumper

telegram-bot-dumper 轻松导出所有 Telegram 机器人相关数据。 输入 ：仅需机器人令牌。 输出 ：机器人的名称与信息、所有聊天的文本历史与媒体、机器人的用户信息与照片。 这是一个 Python 实现。 🚀 快速 Golang 版本（由 ScBoln 开发） 要求 Python = 3.6 Telethon = 1.24.0 注册 Telegram 应用 以获取 APIID 和 APIHASH 使用 pip install -r requirements.txt vi dumper.py change APIID and APIHASH and save...

Stardust

Stardust Una plantilla de shellcode moderna y fácil de usar para 32/64 bits. cadenas sin formato proyecto C++20 usa hashing en tiempo de compilación con fnv1a tanto para la resolución de funciones como de módulos Uso básico Resolución de módulos desde el PEB usando resolve::module: if !...

mariana-trench

Mariana Trench Mariana Trench is a security focused static analysis platform targeting Android. This guide will walk you through setting up Mariana Trench on your machine and get you to find your first remote code execution vulnerability in a small sample app. These instructions are also availabl...

OSCP-Exam-Report-Template-Markdown

基于Markdown的Offensive Security考试报告模板 我创建了一个基于Markdown的Offensive Security考试报告模板 ，这样在参加Offensive Security的OSCP、OSWE、OSEE、OSWP、OSEP、OSED、OSWA、OSDA、OSMR、OSTH、OSIR等考试时，就不再需要LaTeX、Microsoft Office Word、LibreOffice Writer了！ 现在你可以在撰写考试报告时更加高效快速！ 🚀 加快写作速度 ，不要在24小时考试报告撰写中浪费时间 ⭐ 无需处理WYSIWYG编辑器的格式问题...

CustomC2ChannelTemplate

IAT Hooking para canales C2 personalizados Esta es una PoC simple y una plantilla para desarrollar canales C2 personalizados para Cobalt Strike usando hooks de IAT aplicados por un cargador reflectante. Publicación del blog:...

bounty-targets-data

bounty-targets-data What's it for This repo contains data dumps of Hackerone and Bugcrowd scopes i.e. the domains that are eligible for bug bounty reports. The files provided are: Main files: domains.txt: full list of domains, without wildcards. wildcards.txt: full list of wildcard domains. Note:...

cred_scanner

credscanner A simple command line tool for finding AWS credentials in files. Optimized for use with Jenkins and other CI systems. I suspect there are other, better tools out there such as git-secrets, but I couldn't find anything to run a quick and dirty scan that also integrates well with Jenkin...

appsandbox

App Sandbox App Sandbox es una aplicación de máquina virtual para Windows y macOS centrada en el rendimiento y la facilidad de uso. Características de Windows: Funciona en Windows 11 Home o Pro, sin Hyper-V Compatibilidad con VM de Windows 11 o Ubuntu 26.04 LTS Instalación sin intervención Copiar...

GhostInTheNet

GhostInTheNet Ultimate Network Stealther que convierte a Linux en un Fantasma en la Red y protege contra MITM/DOS/escaneo Propiedades: Invisibilidad en la red Anonimato en la red Protege contra MITM/DOS Transparente Multiplataforma Minimalista Dependencias: Linux 2.4.26+ - funcionará en cualquier...

spamscanner

Spam Scanner is the best anti-spam, email filtering, and phishing prevention service. Spam Scanner is a drop-in replacement and the best alternative to SpamAssassin, rspamd, SpamTitan, and more. !NOTE Spam Scanner is actively maintained and used in production at Forward Email to protect millions ...

Decompiler_Tools

Herramientas de Descompilador 0x01 descompilador predeterminado de IDEA Directorio de Mac OS /Applications/IntelliJ IDEA.app/Contents/plugins/java-decompiler/lib /Applications/IntelliJ IDEA.app/Contents/plugins/java-decompiler/lib -rw-r--r--@ 1 xxx xxx 1.4M 4 8 22:19 java-decompiler.jar...

msmailprobe

msmailprobe Office 365 and Exchange Enumeration It is widely known that OWA Outlook Webapp is vulnerable to time-based user enumeration attacks. This tool leverages all known, and even some lesser-known services exposed by default Exchange installations to enumerate users. It also targets Office...

browsertunnel

browsertunnel Browsertunnel is a tool for exfiltrating data from the browser using the DNS protocol. It achieves this by abusing dns-prefetch, a feature intended to reduce the perceived latency of websites by doing DNS lookups in the background for specified domains. DNS traffic does not appear i...

geoip-attack-map

Primero y ante todo No tengo mucho tiempo en mi vida en este momento para mantener este proyecto. Acepté este desafío como una forma de aprender JavaScript y mejorar el Python que ya conocía. Estoy seguro de que hay varias cosas que podría haber hecho de manera diferente en mi implementación, y n...

f32

La f32 es una placa de desarrollo ESP32 ultracompacta diseñada para montarse directamente detrás de un conector USB-C. La PCB mide solo 9.85 mm x 8.45 mm. Está alimentada por el microcontrolador ESP32-C3FH4 y fue creada principalmente para investigación y como una especie de prueba de estrés para...

navgix

navgix navgix is a multi-threaded golang tool that will check for nginx alias traversal vulnerabilities Techniques Currently, navgix supports 2 techniques for finding vulnerable directories or location aliases. Those being the following: Heuristics navgix will make an initial GET request to the...

java-html-sanitizer

OWASP Java HTML Sanitizer Un sanitizador de HTML rápido y fácil de configurar escrito en Java que te permite incluir HTML generado por terceros en tu aplicación web mientras te proteges contra XSS. La dependencia existente es de JSR 305. Los otros archivos JAR solo son necesarios para el conjunto...

log4shell_1.x

Log4jShell1.x Log4j RCE 1.x Poc Ataque Restricción 1. El objetivo tiene entorno jms 2. Necesitas obtener acceso para modificar el archivo log4j.properties Conclusión No es tan útil como log4shell 2.x Tema de Log4shell https://github.com/cckuailong/reapoc/tree/main/Topic/Log4j Bienvenido a...

hotpatch-for-apache-log4j2

Log4jHotPatch Esta es una herramienta que inyecta un agente Java en un proceso JVM en ejecución. El agente intentará parchear el método lookup de todas las instancias cargadas de org.apache.logging.log4j.core.lookup.JndiLookup para que devuelvan incondicionalmente la cadena "Patched...

Photon

Photon Increíblemente rápido rastreador diseñado para OSINT. Wiki de Photon • Cómo Usar • Compatibilidad • Librería de Photon • Contribución • Hoja de Ruta Características Clave Extracción de Datos Photon puede extraer los siguientes datos mientras rastrea: URLs dentro del alcance y fuera del...

golddigger

Gold Digger Search files for gold Gold Digger is a simple tool used to help quickly discover sensitive information in files recursively. Originally written to assist in rapidly searching files obtained during a penetration test. Installation Gold Digger requires Python3. virtualenv -p python3...

slowloris

slowloris.py - Simple slowloris in Python What is Slowloris? Slowloris is basically an HTTP Denial of Service attack that affects threaded servers. It works like this: 1. We start making lots of HTTP requests. 2. We send headers periodically every 15 seconds to keep the connections open. 3. We...

ProxyVulns

ProxyVulns ProxyLogon Usage: python3 26855.py 1.1.1.1 ProxyOracle Una vez que la víctima haga clic en este enlace, evil.com recibirá las cookies...

xss_vulnerability_challenges

XSS Vulnerability Scenarios challenges This repository is a Dockerized php application containing some XSS vulnerability challenges. The ideas behind challenges are: Javascript validation bypass html entities bypass WAF bypass Black-list validation bypass Basic XSS validation bypass Double encode...

tiuku

Tiuku Tiuku 是一款用于扫描各类系统和环境的安全相关信息，并在基于浏览器的用户界面中显示结果的工具。它还能自动检测并突出显示一些问题。数据收集脚本和用户界面均可完全离线下载和运行，因此也适用于气隙环境。 Tiuku 与其他安全扫描工具有以下不同之处： 它支持多个平台，并在所有平台上提供统一的用户体验。无论您评估的是 M365 等 SaaS 平台、Active Directory 域，还是单个 Linux 服务器，该工具的工作方式都相同，并提供类似的图形用户界面。 运行简单。该工具除了现代操作系统提供的依赖项外，没有其他依赖，也无需担心配置文件和命令行参数。...

netattack

NETATTACK The netattack.py is a python script that allows you to scan your local area for WiFi Networks and perform deauthentification attacks. The effectiveness and power of this script highly depends on your wireless card. NETATTACK 2 RELEASED https://github.com/chrizator/netattack2/ USAGE EASY...

matano

Open source security data lake for AWS Matano Open Source Security data lake is an open source cloud-native security data lake , built for security teams on AWS. !NOTE Matano offers a commercial managed Cloud SIEM for a complete enterprise Security Operations platform. Learn more. Docs | Website ...

yersinia

Spanning Tree 1: DOS attack sending conf BPDUs Let's send some conf BPDUs claiming be root!!! By sending continously conf BPDU with root pathcost 0, randomly generated bridge id and therefore the same root id, and some default values for other fields, we try to annoy the switches close to us,...

Empire

Empire Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers. The Empire server is written in Python 3 and is modular to allow operator flexibility. Empire comes built-in with a client that can be used remotely to access the server...

Ubisoft-Uplay-Desktop-Client-63.0.5699.0

Ubisoft-Uplay-Desktop-Client-63.0.5699.0...

realme-c53-unlock-root

Realme C53 RMX3760 — Bootloader Unlock & Root Toolkit English | Bahasa Indonesia Unlock bootloader and root your Realme C53 and other Realme devices. Supports KernelSU, Magisk, or a hybrid of both. ⚠️ RMX3760 Unisoc T612 : Bootloader unlock + Magisk root are verified working on BOTH Android 15 and...

dnspython

dnspython INTRODUCTION dnspython is a DNS toolkit for Python. It supports almost all record types. It can be used for queries, zone transfers, and dynamic updates. It supports TSIG-authenticated messages and EDNS0. dnspython provides both high- and low-level access to DNS. The high-level classes...

lua-ffi-libinjection

Nombre lua-resty-libinjection - Enlaces FFI LuaJIT para libinjection Estado Esta biblioteca está en desarrollo activo y está lista para producción Descripción Esta biblioteca proporciona enlaces FFI para libinjection, un tokenizador y analizador de SQL/SQLi y XSS. Instalación Instale esta...

duo-agentflow-auditor

Duo AgentFlow Auditor AI Code Security — catching what SAST misses in AI-generated code Built on the GitLab Duo Agent Platform 40-62% of AI-generated code contains security vulnerabilities. Traditional SAST catches CVEs. We catch what SAST misses — prompt injection, LLM output execution, unsafe M...

I-know-where-your-page-lives

I-know-where-your-page-lives Sé dónde vive tu página: Desaleatorizando el kernel más reciente de Windows 10 - ZeroNights 2016 Requisitos Procesador Intel Haswell o posterior Windows 10 x64 Uso Ejecuta ASLRSideChannelAttack.exe para obtener la entrada PML4-Self-Ref...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

raptor

Raptor 是一个基于网页（Web服务+UI）的、以 GitHub 为中心的源码漏洞扫描器——它只需提供 GitHub 仓库 URL 即可扫描仓库。你可以设置 Webhook，以确保每次提交或合并 Pull Request 时自动扫描。扫描是异步进行的，结果仅对启动扫描的用户可见。 Raptor 的部分特性： 插件架构（即插即用外部工具，生成统一报告） Web 服务可用于自定义自动化（无需 UI） 轻松创建/编辑/删除新漏洞和/或编程语言的签名...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue. Hackable HTTP proxy to simulate server failure scenarios , systems resiliency testing and unexpected network conditions , built for node.js. It was mainly...

vault-cve-2026-5006-audit

Kit de herramientas CVE-2026-5006 HCSEC-2026-32 Dos herramientas para trabajar con la vulnerabilidad de inyección de barras en políticas plantilladas de Vault: un recorrido interactivo para explicar y delimitar el problema, y un script de auditoría que comprueba un clúster en vivo y escribe los...

CVE-2026-12948

CVE-2026-12948 Vulnerability Summary A stored cross-site scripting XSS vulnerability was identified in the web management interface of the Digi PortServer TS 4 H MEI. A specially crafted, authenticated request allows a script payload to be permanently written to device configuration storage. The...

CVE-2026-0300

PAN-OS CVE-2026-0300 Non-Destructive Exposure Survey Tool Overview This tool is a non-destructive exposure survey utility for assessing whether a target PAN-OS service may expose network-accessible surfaces related to CVE-2026-0300. The tool is intended for authorized defensive security validatio...

CVE-2026-31431

CVE-2026-31431 CopyFail standard binary Get all new CVE alert on https://exploitroom.com mail :: /Desktop/CVE-2026 » file exploit: ELF 64-bit LSB executable, x86-64, version 1 GNU/Linux, statically linked, BuildIDsha1=9454dbdde0ac2d1a8981c06db89f24a4753ec3b7, for GNU/Linux 3.2.0, not stripped...

dotclaude-security

dotclaude-security Escanea la configuración local .claude/ de un repositorio — hooks de settings.json, definiciones de servidores MCP, bloques env, permissions.allow — en busca de los peligros de RCE y exfiltración de claves de API que se activan en el momento en que haces git clone y abres un...

htb-labs-nexus

🏴‍☠️ HTB Labs - Nexus English 🇺🇸 | Español 🇪🇸 English | Español 📋 Overview Nexus is an Easy-difficulty Linux machine from Hack The Box that demonstrates a multi-stage attack chain involving virtual host enumeration, exposed credentials, vulnerable web application functionality, remote code...

PyMemoryEditor v2.2.0

PyMemoryEditor A pure-Python library built on ctypes that lets you inspect, modify and search the memory of any running process in a few lines of Python — Cheat Engine workflows on Windows, Linux and macOS! Read, write and scan the memory of any process — straight from Python. One unified API...

Docf-Sec-Check - DockF-Sec-Check Helps To Make Your Dockerfile Commands More Secure

DockF-Sec-Check helps to make your Dockerfile commands more secure. Done x First-level security notification in the Dockerfile TODO List Correctly detect the Dockerfile. Second-level security notification in the Dockerfile. Security notification in Docker images. Private Repository Installation...

Quick-Lookup-Ptrun - Quick Lookup Plugin For PowerToys Run (Wox)

This plugin for PowerToys Run allows you to quickly search for an IP address, domain name, hash or any other data points in a list of Cyber Security tools. It's perfect for security analysts, penetration testers, or anyone else who needs to quickly lookup information when investigating artifacts ...