Stars
This is a script written in Python that allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220
CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs
Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.
Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Privilege Escalation Enumeration Script for Windows
An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!
Fast subdomains enumeration tool for penetration testers
Automatic SQL injection and database takeover tool
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
Fluxion is a remake of linset by vk496 with enhanced functionality.
一款支持自定义的 Java 内存马生成工具|A customizable Java in-memory webshell generation tool.
Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.
Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers
这款工具是一款功能强大的网络安全综合工具,旨在为安全从业者、红蓝对抗人员和网络安全爱好者提供全面的网络安全解决方案。它集成了多种实用功能,包括解密、分析、扫描、溯源等,为用户提供了便捷的操作界面和丰富的功能选择。This tool offers robust network security solutions for professionals and enthusiasts. With …
Community curated list of templates for the nuclei engine to find security vulnerabilities.
Fast and customizable vulnerability scanner based on simple YAML based DSL.
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
yuanzhongqiao / wazuh-cn
Forked from wazuh/wazuhWazuh - 开源安全平台。针对端点和云工作负载的统一 XDR 和 SIEM 保护。
Chunsou(春蒐),Python3编写的多线程Web指纹识别工具,适用于安全测试人员前期的资产识别、风险收敛以及企业互联网资产风险摸查。
OctoMation是一款免费的,具有可视化拖拽功能的编排与自动化产品。通过精心编排的Playbook,OctoMation能够联动数百款安全、网络、IT和SaaS等产品的基础能力。其主要特点包括低代码剧本编排、自动化事件响应、标准化流程操作以及可视化过程监控。 借助OctoMation,运营团队能够开展7x24小时自动化事件响应,不仅可以大幅减少对人员的过度依赖,还能确保团队工作质量始终维…
Developing a more covert Remote Access Trojan (RAT) tool by leveraging Electron's features for command injection and combining it with remote control methods.
Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.