AMDH

AMDH Android Mobile Device Hardening written with python3. Android version, PObY-A Privacy Owned by You - Android, with malware and settings scans is available on the Play Store and the source code can be found HERE Motivations AMDH was created to help automate scanning installed applications on...

nullmap

nullmap A very simple driver manual mapper based on my older voidmap and CVE-2023-21768 POC by chompie and b33f. Because the underlying IoRing post-exploitation memory r/w primitive is not handling many consequent reads and writes very well, I've decided to overwrite CR4 to disable SMEP/SMAP to...

PCLink

PCLink Server The secure backbone for your personal PC remote control ecosystem. PCLink is a modern, web-first server designed for secure remote PC management and high-performance screen streaming. Featuring a high-performance FastAPI backend, a responsive Web UI, and an extensible plugin system...

dex-oracle

Oracle A pattern based Dalvik deobfuscator which uses limited execution to improve semantic analysis. Also, the inspiration for another Android deobfuscator: Simplify. Before After sha1: a68d5d2da7550d35f7dbefc21b7deebe3f4005f3 md5: 2dd2eeeda08ac8c15be8a9f2d01adbe8 Installation Step 1. Install...

twittor

Twittor A stealthy Python based backdoor that uses Twitter Direct Messages as a command and control server This project has been inspired by Gcat which does the same but using a Gmail account. Setup For this to work you need: A Twitter account Use a dedicated account! Do not use your personal one...

CVE-2026-18256 Private team metadata disclosure via the team search API

Mattermost versions 11.10.x = 11.10.0, 11.7.x = 11.7.9, 11.9.x = 11.9.1, 11.8.x = 11.8.5 fail to properly restrict private teams from public team search results, which allows an authenticated user without permission to list private teams to disclose the ID, name, and display name of private teams...

airecon

AI-Powered Autonomous Penetration Testing Agent AIRecon is an autonomous penetration testing agent that drives any OpenAI-compatible LLM gateway LiteLLM / vLLM / a hosted endpoint — or a local gateway proxying a local Ollama with a Kali Linux Docker sandbox , native Caido proxy integration , a...

CVE-2025-8110

CVE-2025-8110 – Gogs ≤ 0.13.3 RCE PoC Proof-of-Concept for CVE-2025-8110 , an authenticated arbitrary file write in Gogs ≤ 0.13.3 caused by improper symbolic-link handling in the PutContents API. An authenticated user can commit a symlink pointing to .git/config, then use the API to overwrite it...

hsm

zhsm A Hardware Security Module HSM library for Zig providing PC/SC access to PIV , CAC , and YubiKey tokens. Status Aspect| Info ---|--- API Stability| Development Zig Version| 0.16.0 Platforms| Linux, macOS, Windows License| MIT Features PIV Support NIST SP 800-73-4 Certificate retrieval slots...

linux-basics-for-hackers-notes

Linux Basics for Hackers — Course A structured course built from personal study notes of the book Linux Basics for Hackers by OccupyTheWeb. Each module breaks down the core concepts, commands, and practical examples in plain English — straightforward enough for beginners, detailed enough to...

ActiveReign

ActiveReign ⚠️ Thank you for your support. This project is no longer publicly maintained. Background A while back I was challenged to write a discovery tool with Python3 that could automate the process of finding sensitive information on network file shares. After writing the entire tool with...

jscythe

jscythe abuses the node.js inspector mechanism in order to force any node.js/electron/v8 based process to execute arbitrary javascript code, even if their debugging capabilities are disabled. Tested and working against Visual Studio Code, Discord, any Node.js application and more! How 1. Locate t...

grc2

nimc2 This software is in very early development stages and you might run into many issues using it nimc2 is a very lightweight C2 written fully in nim. It's uses range from user support to employee monitoring. If you want to give it a try check out the wiki to learn how to install and use nimc2...

RTA

Red Team Arsenal Red Team Arsenal is a inhouse framework created by flipkart security team which monitors the external attack surface of the company's online assets and provide an holistic security view of any security anomalies. It's a closely linked collection of various security engines and...

PFQ

PFQ v6.2 Introduction PFQ is a functional framework designed for the Linux operating system built for efficient packets capture/transmission 10G, 40G and beyond, in-kernel functional processing, kernel-bypass and packets steering across groups of sockets/end-points. It is highly optimized for...

pumba

Chaos testing tool for Docker, containerd, and Podman Quick Start · User Guide · Network Chaos · Deployment · Contributing Pumba is a chaos testing and network emulation tool for Docker, containerd, and Podman containers. Inspired by Netflix Chaos Monkey, Pumba brings chaos engineering to the...

IOSSecuritySuite

⭐️ Do you want to become a certified iOS Application Security Engineer? ⭐️ Check out our practical & fully online course at: https://courses.securing.pl/courses/iase ISS Description by @r3ggi 🌏 iOS Security Suite is an advanced and easy-to-use platform security & anti-tampering library written in...

ipsw

ipsw iOS/macOS Research Swiss Army Knife ipsw is a command-line toolkit for Apple firmware research and reverse engineering. Download and unpack IPSWs and OTAs, inspect Mach-O binaries and dyld shared caches, analyze kernelcaches, and work with connected iOS devices. Agent skill · Install · CLI...

CVE-2026-98403

A flaw was found in the Linux kernel's s390 boot code. This flaw can lead to a Denial of Service DoS through memory corruption during system startup. When the early boot command-line buffer is nearly full, appending Initial Program Load IPL parameters triggers an integer underflow, causing an...

PPPwn

PPPwn - PlayStation 4 PPPoE RCE PPPwn is a kernel remote code execution exploit for PlayStation 4 up to FW 11.00. This is a proof-of-concept exploit for CVE-2006-4304 that was reported responsibly to PlayStation. Supported versions are: FW 7.00 / 7.01 / 7.02 FW 7.50 / 7.51 / 7.55 FW 8.00 / 8.01 /...