alexpeleg Goto Github PK

arbitrium-rat

Arbitrium is a cross-platform, fully undetectable remote access trojan, to control Android, Windows and Linux and doesn't require any firewall exceptions or port forwarding rules

asvs

Application Security Verification Standard

asvs-1

A simple web app that helps developers understand the ASVS requirements.

awesome-pastebin

List of pastebin sites.

chatglm-6b

ChatGLM-6B：开源双语对话语言模型 | An Open Bilingual Dialogue Language Model

cmsmap

CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

ctftool

Interactive CTF Exploration Tool

cve-2021-36260

command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.

cve-2022-21882

win32k LPE

cve-2022-29072

7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area.

cve-2022-33891

cve-2022-33891-poc

cve_searchsploit

Search an exploit in the local exploitdb database by its CVE

cvelist

CVE handling by VulDB CNA Team (no external commits accepted)

cvss

CVSS (Common Vulnerability Scoring System) Calculator CVSSv3.0

docker-bench-security

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

docker-php-helloworld

A simple PHP application deployed using Docker

docusaurus-demo

follina.py

POC to replicate the full 'Follina' Office RCE vulnerability for testing purposes

forens-grey

Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase.

free-for-dev

A list of SaaS, PaaS and IaaS offerings that have free tiers of interest to devops and infradev

gssar

GitHub Secret Scanning Auto Remediator (GSSAR)

hack_my_teeth

A deliberately vulnerable java/python applications

image-classifier

image classifier based on keras and tensorflow

inveigh

Windows PowerShell ADIDNS/LLMNR/mDNS/NBNS spoofer/man-in-the-middle tool

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

keras-flask-deploy-webapp

:smiley_cat: Pretty & simple image classifier app template. Deploy your own trained model or pre-trained model (VGG, ResNet, Densenet) to a web app using Flask in 10 minutes.

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

kiterunner

Contextual Content Discovery Tool

magic

M@gic - A tool written in IronPython that simply performs black magic

malicious-docker

Intentionally "malicious" Docker image for EDR testing