Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
Loads environment variables from .env for nodejs projects.
Fast passive subdomain enumeration tool.
- subdomain-enumeration
- osint
- subdomains
- bugbounty
Community curated list of templates for the nuclei engine to find security vulnerabilities.
RetDec is a retargetable machine-code decompiler based on LLVM.
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
Security Tool to Look For Interesting Files in S3 Buckets
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
- sigma
- python3
- evtx
- sigma-rules
List DTDs and generate XXE payloads using those local DTDs.
Simulates enough of a Telnet connection in order to log failed login attempts.
Low interaction MySQL honeypot written in C
A layer of abstraction the around acme/autocert certificate manager (Golang)
- ssl
- ssl-certificates
- ssl-certificate
- x509
Prevent your secrets from leaking into logs, std* etc.
A low-interaction SSH honeypot written in C
[WIP] Another authentication hex for Phoenix.
web-framework-agnostic sessions library for the V language
A flask website which displays data I've gathered with my SSH Honeypot