log4shell-vulnerable-app

تطبيق نموذجي قابل للاستغلال Log4Shell CVE-2021-44228 يحتوي هذا المستودع على تطبيق ويب Spring Boot قابل للاستغلال عبر ثغرة CVE-2021-44228، والتي تُعرف باسم Log4Shell. يستخدم إصدار Log4j 2.14.1 عبر spring-boot-starter-log4j2 2.6.1 وإصدار JDK 1.8.0181. تشغيل التطبيق قم بتشغيله: docker run --name...

rewerse-engineering

rewerse engineering An unofficial REWE API client in Go and Python. It implements the publicly accessible unauthenticated endpoints the REWE app uses for querying current discounts Angebote, products, markets and recalls. Current supported APK version: 5.18.1 as of 29.09.26 !CAUTION The...

lowkey

Agents de codage IA auto-hébergés sur AWS — OpenClaw, Claude Code, Codex, Kiro, NemoClaw, Hermes ▶️ Regarder la démonstration complète sur YouTube 📝 Lire l'article de blog : "J'ai donné à mon agent son propre compte AWS" En résumé — déployer Lowkey : curl -sfL install.lowkey.run | bash Fonctionne...

lowkey

Self-Hosted AI Coding Agents on AWS — OpenClaw, Claude Code, Codex, Kiro, NemoClaw, Hermes ▶️ Watch the full walkthrough on YouTube 📝 Read the blog post: "I Gave My Agent Its Own AWS Account" TL;DR — deploy Lowkey: curl -sfL install.lowkey.run | bash Works in bash , zsh , and AWS CloudShell. The...

SindriKit

SindriKit Offensive Development Deserves Better Architecture. A C library for building offensive capabilities. Core Concept Most offensive utilities hardcode their execution mechanics inside the technique's logic. A reflective loader doesn't just map an image; it maps it using a specific, hardcod...

CVE-2023-25690_lab

تهريب طلبات HTTP عبر وكيل Apache إعداد البيئة البنية التحتية المكوّن| الدور| الإصدار ---|---|--- خادم Apache HTTP| وكيل عكسي| 2.4.55 قابل للاستغلال Spring Boot Tomcat مدمج| واجهة برمجة التطبيقات الخلفية| 4.x Java 21 SQLite| قاعدة البيانات| — المستخدم ──► Apache :80 الوكيل ──► Spring Boot :8080...

linnix

Linnix Find which process is hurting your SLOs — not just who's using CPU, but who's causing stalls. The Problem top shows 80% CPU. Prometheus shows high latency. But which pod is actually stalling your payment service? Linnix uses eBPF + PSI Pressure Stall Information to answer this. PSI measure...

Addon

ClearURLs ClearURLs is an add-on based on the new WebExtensions technology and is optimized for Firefox and some Chrome based browsers. This extension will automatically remove tracking elements from URLs to help protect your privacy when browsing the Internet, which is regularly updated by us an...

openssl

مرحبًا بك في مشروع OpenSSL !openssl logo !github actions ci badgegithub actions ci OpenSSL هي مجموعة أدوات مفتوحة المصدر قوية، بمستوى تجاري، وكاملة الميزات لبروتوكولات أمن طبقة النقل TLS، المعروف سابقًا بـ SSL، وبروتوكول Datagram TLS DTLS، وبروتوكول QUIC. تعتمد تطبيقات البروتوكولات على مكتبة تشفي...

trueseeing

README trueseeing is a fast, accurate and resillient vulnerability scanner for iOS/Android apps. We operate on the Dalvik VM level for Android -- i.e. we don't care if the target app is obfuscated or not. Capability Currently we can: Automatically scan app for vulnerabilities, reporting in...

WhoCord

WhoCord An interactive OSINT canvas that grows with every discovery. Start with a seed — a Discord user, username, email, domain, phone, image, or URL — and watch the map build itself in real time. Screenshots Gallery: 1 · 2 · 3 | ---|--- | 1. Start page| 2. Canvas with details panel | 3. Multipl...

hulak

Git-native API client with encrypted secrets. REST · GraphQL · OAuth Quick Start • GraphQL Explorer • Project Layout • Documentation Run one request, a whole directory, or stay interactive hulak run ./requests/ Hulak runs request files directly from your project. It supports concurrent directory...

krf

KRF KRF is a K ernelspace R andomized F aulter. It currently supports the Linux and FreeBSD kernels. What? Fault injection is a software testing technique that involves inducing failures "faults" in the functions called by a program. If the callee has failed to perform proper error checking and...

hibernate__hibernate-validator_CVE-2019-10219_6_0_18_Final_fixed

Hibernate Validator الإصدار: 6.0.18.Final - 25-10-2019 ما هو؟ هذا هو التنفيذ المرجعي لـ JSR-380 - Bean Validation 2.0. يحدد Bean Validation نموذج بيانات وواجهة برمجة تطبيقات API لكل من JavaBean بالإضافة إلى التحقق من صحة الطرق method validation. المصدر الافتراضي للبيانات الوصفية هو التعليقات...

puncia

PantheraP.uncia Official CLI utility for Subdomain Center & Exploit Observer Puncia is the official command-line client for two A.R.P. Syndicate intelligence APIs — point it at a domain, a brand, or a vulnerability ID and get structured JSON back in seconds, no browser required: 🕸️ Subdomain Cente...

mcp-xray

MCP X-Ray !NOTE Looking to secure AI agent skills? Check out Skill X-Ray, an open-source static security scanner that analyzes skill packages for malicious or risky behavior before installation, without executing them. Overview MCP X-Ray is a unified open-source security scanning and penetration...

DbgNexum

DbgNexum - Shellcode Injection DbgNexum is a Proof-of-Concept for injecting shellcode using the Windows Debugging API and Shared Memory File Mapping. It avoids writing and reading remote memory directly, instead using context manipulation to force the target process to load and execute the payloa...

subdomain3

Subdomain3 README.md inChinese 中文 Description Subdomain3 is a new generation of tool , It helps penetration testers to discover more information in a shorter time than other tools.The information includes subdomains, IP, CDN, and so on. Please enjoy it. Screenshot medium pattern for speed Feature...

subdomain3

ساب دومين 3 ملف README.md باللغةالصينية 中文 الوصف ساب دومين 3 هو جيل جديد من الأدوات، يساعد مختبري الاختراق على اكتشاف المزيد من المعلومات في وقت أقصر من الأدوات الأخرى. تشمل المعلومات النطاقات الفرعية، وعناوين IP، وشبكات CDN، وغيرها. استمتع به. لقطة الشاشة نمط متوسط للسرعة الميزات أسرع ثلاثة أنما...

NiCOFF

NiCOFF En gros, NiCOFF est un chargeur de fichiers COFF et BOF écrit en Nim. NiCOFF lit un fichier BOF ou COFF, l'analyse et l'exécute en mémoire. Tout le projet est basé sur les projets de chargeur COFF de Yasser et Kevin. Les fonctions de chargeur et de beacon de ces projets ont été réécrites e...