WEB-Wordlist-Generator scans your web applications and creates related wordlists to take preliminary countermeasures against cyber attacks. Done [x] Scan Static …
Argus – A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions
This repo contains the code for our USENIX Security ’23 paper “ARGUS: A Framework for Staged Static Taint Analysis of …
Navgix – A Multi-Threaded Golang Tool That Will Check For Nginx Alias Traversal Vulnerabilities
navgix is a multi-threaded golang tool that will check for nginx alias traversal vulnerabilities Techniques Currently, navgix supports 2 techniques …
SADProtocol goes to Hollywood
Faraday’s researchers Javier Aguinaga and Octavio Gianatiempo have investigated on IP cameras and two high severity vulnerabilities. This research project …
SqliSniper – Advanced Time-based Blind SQL Injection Fuzzer For HTTP Headers
SqliSniper is a robust Python tool designed to detect time-based blind SQL injections in HTTP request headers. It enhances the …
CloudMiner – Execute Code Using Azure Automation Service Without Getting Charged
Execute code within Azure Automation service without getting charged Description CloudMiner is a tool designed to get free computing power …
SharpShares – Multithreaded C# .NET Assembly To Enumerate Accessible Network Shares In A Domain
Multithreaded C# .NET Assembly to enumerate accessible network shares in a domain Built upon djhohnstein’s SharpShares project > .\SharpShares.exe helpUsage:SharpShares.exe …
BounceBack – Stealth Redirector For Your Red Team Operation Security
BounceBack is a powerful, highly customizable and configurable reverse proxy with WAF functionality for hiding your C2/phishing/etc infrastructure from blue …
Nemesis – An Offensive Data Enrichment Pipeline
Nemesis is an offensive data enrichment pipeline and operator support system. Built on Kubernetes with scale in mind, our goal …
Melee – Tool To Detect Infections In MySQL Instances
MELEE: A Tool to Detect Ransomware Infections in MySQL Instances Attackers are abusing MySQL instances for conducting nefarious operations on …