ASLRay

ASLRay Linux ELF x32/x64 ASLR DEP/NX bypass exploit with stack-spraying Properties: ASLR bypass DEP/NX bypass Cross-platform Minimalistic Simplicity Unpatchable Dependencies: Linux 2.6.12+ - would work on any x86-64 Linux-based OS BASH - the whole script Limitations: Stack needs to be executable...

Guardrails

NVIDIA NeMo Guardrails Library LATEST RELEASE / DEVELOPMENT VERSION : The develop branch tracks the latest top of tree development. The latest released version is 0.23.0. ✨✨✨ 📌 The official NeMo Guardrails library documentation is available atdocs.nvidia.com/nemo/guardrails. ✨✨✨ NVIDIA NeMo...

smogcloud

☁️ Smogcloud Find exposed AWS cloud assets that you did not know you had. A comprehensive asset inventory is step one to any capable security program. We made smogcloud to enable security engineers, penetration testers, and AWS administrators to monitor the collective changes that create dynamic...

certgraveyard_yara

CertGraveyard YARA Rules Generator Automated YARA rule generation from the CertGraveyard compromised certificate database. Features 🔄 Daily Updates : Automatically checks CertGraveyard for new compromised certificates 📝 YARA Rule Generation : Creates individual YARA rules for each certificate ✅...

CVE-2024-23113

CVE-2024-23113 The script is designed to detect CVE-2024-23113, which is a format string vulnerability in the FortiGate FGFM service FortiGate to FortiManager protocol running on TCP port 541. The vulnerability occurs because an attacker can control a format string, which could lead to Remote Cod...

xnu

What is XNU? XNU kernel is part of the Darwin operating system for use in macOS and iOS operating systems. XNU is an acronym for X is Not Unix. XNU is a hybrid kernel combining the Mach kernel developed at Carnegie Mellon University with components from FreeBSD and a C++ API for writing drivers...

CVE-2023-20198

CVE 2023-20198 Introduction The web UI component of Cisco IOS XE Software has a previously undiscovered vulnerability that, when exposed to the internet or untrusted networks, is already being actively exploited, according to Cisco. Due to this vulnerability, a remote, unauthenticated attacker is...

FARO

FARO Document Sensitivity Detector Table of contents What is this What's in here? Run FARO with Docker Run FARO on host machine Prerequisites Virtual environment Dependencies NER models FARO Spider Single File Detection Technical Details FARO entity detector Configuration Supported Input File...

BruteShark

About What it can do Download Examples Usage BruteSharkDesktop BruteSharkCli Modules Architecture Contributing About BruteShark is a Network Forensic Analysis Tool NFAT that performs deep processing and inspection of network traffic mainly PCAP files, but it also capable of directly live capturin...

CVE-2019-18634

CVE-2019-18634 CVE-2019-18634 is a vulnerability that affects Sudo in versions 1.8.25 when pwfeedback is enabled in sudoers file. It allows an attacker to escalate privileges to root by exploiting a BSS-Based Buffer Overflow, where the data strucutres are altered and it thinks that it is being...

CVE-2026-43499-armv7

CVE-2026-43499 GhostLock — ARM32 Huawei Watch 4 Pro Linux kernel privilege escalation exploit attempt based on CVE-2026-43499 GhostLock — Huawei Watch 4 Pro MDS-AL00, armv7l Project Overview This project is a GhostLock kernel vulnerability exploit attempt targeting the Huawei Watch 4 Pro MDS-AL00...

SecureCodingDojo

About the Secure Coding Dojo The Secure Coding Dojo is a platform for delivering secure coding training. While it comes with its own vulnerable training application the Insecure.Inc website the training portal can be used in conjunction with other training applications. The strength of the platfo...

CVE-2024-6769

Blogpost: CVE-2024-6769 Poisoning the activation cache to elevate from medium to high integrity This blog is about two chained bugs: Stage one is a DLL Hijacking bug caused by the remapping of ROOT drive and stage two is an Activation Cache Poisoning bug managed by the CSRSS server. The first sta...

telnet_scan

Telnet Vulnerability Scanner CVE-2026-24061 & CVE-2026-32746 A Python-based security assessment tool that detects and where applicable exploits two critical vulnerabilities in GNU InetUtils telnetd: CVE-2026-24061 – Authentication bypass via USER environment variable injection CVSS 9.8...

cookie_crimes

Chrome Cookie Extraction Without Root This will print out a user's Chrome cookies. You don't need to have their password or be root to use it. nice nice nice nice nice. If you are not the kind of person who regularly gets the ability to execute code on other people's computers, you probably don't...

threatspec

threatspec - continuous threat modeling, through code Threatspec is an open source project that aims to close the gap between development and security by bringing the threat modelling process further into the development process. This is achieved by having developers and security engineers write...

Windows10Exploits

Windows10Exploits Download a single CVE The variable is only for example ; you can make your own SVN script for downloading a single folder = CVE = BR @nu11secur1ty $CVE = CVE-2018-0833 root@kitploit: svn checkout https://github.com/nu11secur1ty/Windows10Exploits/trunk/Undefined/$CVE Link table o...

thermoptic

thermoptic "I don't believe it, thermoptic camouflage!" What is it? This is an HTTP proxy designed to bypass services that use fingerprinting such as JA4+ to block certain HTTP clients. Using this proxy, you can use your preferred HTTP clients like curl and still have magically indistinguishable...

SecurityRAT

OWASP Security RAT Requirement Automation Tool is a tool helping you manage security requirements in your agile development projects. The typical use case is: specify parameters of the software artifact you're developing based on this information, list of common security requirements is generated...

cerbos

What is Cerbos? Cerbos is an authorization layer that evolves with your product. It enables you to define powerful, context-aware access control rules for your application resources in simple, intuitive YAML policies; managed and deployed via your Git-ops infrastructure. It provides highly...