zelos

Zelos Zelos Z eropoint E mulated L ightweight O perating S ystem is a python-based binary emulation platform. One use of zelos is to quickly assess the dynamic behavior of binaries via command-line or python scripts. All syscalls are emulated to isolate the target binary. Linux x8664 32- and...

zelos

Zelos Zelos（Z eropoint E mulated L ightweight O perating S ystem 的缩写，即零起点模拟轻量级操作系统）是一个基于 Python 的二进制模拟平台。其用途之一是通过命令行或 Python 脚本快速评估二进制文件的动态行为。所有系统调用都被模拟，以隔离目标二进制文件。支持 Linux x8664（32 位和 64 位）、ARM 和 MIPS 二进制文件。Unicorn 提供 CPU 模拟。 完整文档可在此获取。 安装 使用包管理器 pip 安装 zelos。 pip install zelos 基本用法 命令行...

external_libexif_AOSP10_r33_CVE-2020-0198

libexif ------- DESCRIPTION libexif is a library for parsing, editing, and saving EXIF data. It is intended to replace lots of redundant implementations in command-line utilities and programs with GUIs. FEATURES libexif supports parsing, editing and saving of EXIF data. In addition, it has gettex...

red-shadow

Red-Shadow Lightspin AWS IAM Vulnerability Scanner Description Scan your AWS IAM Configuration for shadow admins in AWS IAM based on misconfigured deny policies not affecting users in groups discovered by Lightspin's Security Research Team. The tool detects the misconfigurations in the following...

contact.sh

contact.sh 一个用于查找联系人以报告安全漏洞的OSINT工具。 安装 🐧 GNU/Linux 确保已安装 whois 和 jq 软件包。 $ git clone https://github.com/EdOverflow/contact.sh.git $ cd contact.sh/ $ chmod u+x contact.sh $ ./contact.sh -d google.com -c google 🍎 OSX $ brew install gnu-sed --with-default-names $ brew install jq $ git clone...

hexora

hexora Hexora 是一款静态分析工具，旨在检测 Python 代码中的恶意和有害模式。它结合了基于规则的静态分析引擎与机器学习模型，对整个源文件进行评分，将其分类为恶意或良性。 它可以用于： 审计项目依赖，以发现潜在的供应链攻击 检测在 Pastebin、GitHub 或开放目录等平台上发现的恶意脚本 分析过去安全事件中的 IoC 文件 审计上传到 PyPi 的新包 示例 如需输出示例，请参见 docs/examples.md 文件。 安装 使用 Python 需要 Python 3.9+。 pip install hexora 使用 uv： uv tool install...

ESAPI__esapi-java-legacy_CVE-2022-24891_2-2-3-1

Enterprise Security API para Java Legado OWASP® ESAPI OWASP Enterprise Security API es una biblioteca de controles de seguridad para aplicaciones web, gratuita y de código abierto, que facilita a los programadores la escritura de aplicaciones de menor riesgo. La biblioteca ESAPI para Java está...

CQPToolkit

CQP Tool kit 该系统提供了多种组件，用于将QKD集成到安全系统中。它使用C++11编写，但采用GRPC接口，因此可以与多种不同语言进行集成。 快速开始 要在本地运行该软件，请： 下载并安装Ubuntu deb软件包 或 克隆源代码，确保子模块已更新，并在本地构建 要克隆包含子模块的源代码：bash git clone --recurse-submodules [email protected]:QComms/cqptoolkit.git 如果你没有使用 --recurse-submodules 进行克隆，可以通过在源码文件夹中运行 git submodule...

domhttpx

domhttpx is a google search engine dorker with HTTP toolkit built with python, can make it easier for you to find many URLs/IPs at once with fast time. List Install Usage Flags Basic Usage One Keyword Multiple Keyword Extract Title Page Extract Title Page from Real Path Extract Status Code Extrac...

lst2x64dbg

lst2x64dbg This command extracts all the labels found in the LST file that is given as the single argument. An x64dbg database is created in the current directory based on the extracted labels. The LST file can be generated in IDA from the File menu: Produce file - Create LST file... Example $...

CredMaster

CredMaster Launch a password spray / brute force attach via Amazon AWS passthrough proxies, shifting the requesting IP address for every authentication attempt. This dynamically creates FireProx APIs for more evasive password sprays. Shoutout to @ustayready for his CredKing and FireProx tools,...

fuzzilli

Fuzzilli A coverage-guided fuzzer for dynamic language interpreters based on a custom intermediate language "FuzzIL" which can be mutated and translated to JavaScript. Usage The basic steps to use this fuzzer are: 1. Download the source code for one of the supported JavaScript engines. See the...

ESAPI__esapi-java-legacy_CVE-2022-23457_2-2-3-1

Enterprise Security API para Java Legacy OWASP® ESAPI OWASP Enterprise Security API es una biblioteca gratuita y de código abierto de controles de seguridad para aplicaciones web que facilita a los programadores la escritura de aplicaciones de menor riesgo. La biblioteca ESAPI para Java está...

cmcp

cMCP: Confidential MCP Runtime Community updates and contributor highlights: AgenTrust on LinkedIn. Enforce MCP tool policy inside a TEE, where the agent it governs cannot reach it Quick Start · Architecture · Configuration · CLI · Changelog Developer Preview - launched at the Confidential...

goblin

libgoblin Documentation https://docs.rs/goblin/ changelog Usage Goblin requires rustc 1.85.0 Rust 2024 edition. Add to your Cargo.toml dependencies goblin = "0.10" Features awesome crate name zero-copy, cross-platform, endian-aware, ELF64/32 implementation - wow! zero-copy, cross-platform,...

pisc

Comprobador de Seguridad de Imágenes OCI Públicas ¿Qué es? PISC Comprobador de Seguridad de Imágenes OCI Públicas o de imágenes docker es una herramienta de línea de comandos para evaluar la seguridad de imágenes de contenedores OCI. Sale con código 1 si se cumple alguna de las siguientes...

nuclei-action

Esta Nuclei Action facilita la orquestación de Nuclei con GitHub Action. Integra todas tus Nuclei Templates en potentes flujos de trabajo de seguridad continua y conviértela en parte de tu ciclo de vida de desarrollo de software seguro. Nuclei Action Compatibilidad v3.0.0+ se ejecuta en Node.js v...

Adversarial-Detection-Engineering-Framework

Adversarial Detection Engineering ADE Framework Get ahead of False Negatives by understanding how detection logic fails before threat actors abuse it. Check out the website: https://adeframework.org/ What Is ADE? Adversarial Detection Engineering ADE is the discipline of reasoning about False...

CVE-2025-45710

CVE-2025-45710 Lee más detalles en: https://www.partywave.site sobre CVE-2024-54819 Configurar un rebinder Esto es solo un ejemplo con un servicio web disponible al momento de escribir esto. ve a https://lock.cmpxchg8b.com/rebinder.html selecciona las 2 direcciones a alternar A,B prueba el...

zeek-spicy-stun

STUN Session Traversal Utilities for NAT STUN This is a Zeek protocol analyzer that detects STUN based on Spicy. You must install Spicy to use this package. This package will create two logs: stun.log - This log has every STUN message. stunnat.log - This log has NAT detections from mapped...