A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities Features Support for lists of...
Simple Malware Scanner written in python Very basic malware Scanner by hash comparison Sometimes this can be needed when an...
A tool to dump a git repository from a website. Install This can be installed easily with pip: pip install...
Spock SLAF is a Shared Library Application Firewall "SLAF". It has the purpose to protect any service that uses the...
Sub3 Suite is a research-grade suite of tools for Subdomain Enumeration, OSINT Information Preface If you're just getting started with...
How eCapture works SSL/TLS text context capture, support opensslgnutlsnspr(nss) libraries. bash audit, eCapture User Manual Getting started use ELF binary...
Killing features Scan with nmap fast! Allows you to scan targets with Masscan and run Nmap on discovered ports...
This is a DFIR tool for generating a macOS Presentation This tool was published on Japan Security Analyst Conference 2022...
A script to Contributing Pull requests are welcome. Feel free to open an issue if you want to add other...
Smap is a replica of Nmap which uses shodan.io's free API for port scanning. It takes same command line arguments...
ADReaper is a tool written in Golang which enumerate a Active Directory environment with LDAP queries within few seconds. Installation...
Relaying 3-headed dogs. More details at https://googleprojectzero.blogspot.com/2021/10/windows-exploitation-tricks-relaying.html and https://googleprojectzero.blogspot.com/2021/10/using-kerberos-for-authentication-relay.html This should be working on most fully patched Windows systems. There...
Standalone SIGMA-based detection tool for EVTX, Auditd, Sysmon for linux or JSONL/NDJSON Logs Zircolite is a standalone tool written in...
TryHackme AttacktiveDirectory Use cases For each of the cases described, the linWinPwn script performs different checks as shown below. Case...
Welcome to OWASP Coraza Web Application Firewall, OWASP Coraza is a golang enterprise-grade Web Application Firewall framework that supports Modsecurity's...
Kraken is an online distributed brute force password cracking tool. It allows you to parallelize dictionaries and crunch word generator...
EDRSandBlast is a tool written in C that weaponize a vulnerable signed driver to bypass EDR detections (Kernel callbacks and...
Greetz & Credit: Jthuraisamy for his amazing project SysWhispers: https://github.com/jthuraisamy/SysWhispers OutFlank for creating InlineWhispers (Mingw-w64 Compatible SysWhispers): https://github.com/outflanknl/InlineWhispers FalconForceTeam for...
This tool is designed to aid an operator in modifying ADCS certificate templates so that a created vulnerable state can...
vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios in the means...
Further the state of O365 security by authoring a PowerShell script that automates the security assessment of Microsoft Office 365...
presshell Quick & dirty Wordpress Command Execution Shell. Execute shell commands on your wordpress server. Uploaded shell will probably be...
Melody Monitor the Internet's background noiseMelody is a transparent internet sensor built for Quickstart Quickstart details. TL;DR Release Get the...
Maat is an open-source Dynamic Symbolic Execution and Binary Analysis framework. It provides various functionalities such as symbolic execution, taint...
