peframe

======= peframe peframe is a open source tool to perform static analysis on Portable Executable malware and generic suspicious file. It can help malware researchers to detect packer, xor, digital signature, mutex, anti debug, anti virtual machine, suspicious sections and functions, macro and much...

dcrawl

dcrawl dcrawl is a simple, but smart, multi-threaded web crawler for randomly gathering huge lists of unique domain names. How it works? dcrawl takes one site URL as input and detects all links in the site's body. Each found link is put into the queue. Successively, each queued link is crawled in...

pe-sieve

Intro PE-sieve is a tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps variety of implants within the scanned process: replaced/injected PEs, shellcodes, hooks, and other in-memory patches...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

CVE-2026-98177

The Linux kernel contains an integer underflow vulnerability within the drm/amdkfd component during the EOP ring size calculation . The issue stems from calculating the base-2 logarithm using order_base_2(q->eop_ring_buffer_size / 4) - 1, where order_base_2 could theoretically return 0, causin...

CVE-2026-98176

The Linux kernel contains an integer underflow vulnerability in the drm/amdkfd component. The issue occurs because the base-2 logarithm of the EOP ring size was calculated using a formula that could underflow if the ffs function returned 1 or 0. While the ring buffer size is practically restricte...

CVE-2026-94206

The cloak_ecto and cloak libraries (by danielberkompas) are vulnerable to a Use of Password Hash With Insufficient Computational Effort (CWE-916) flaw. Specifically, the Cloak.Ecto.PBKDF2 (formerly Cloak.Fields.PBKDF2) component incorrectly passes the :size configuration value into the iteration-...

vbsmin

VBSmin VBScript minifier Features ⬜️ Remove extra whitespace Trailing whitespace Leading whitespace Blank lines Inline extra spaces 💬 Remove comments Single quote start of the line Single quote inline REM 1️⃣ One-line Line splitting underscore Colon Quick start Quick install $ gem install vbsmin...

cve-tarmageddon

CVE-2025-62518: TARmageddon Este repositorio demuestra un error crítico en tokio-tar y en bibliotecas Rust asíncronas de tar relacionadas, donde las sobrescrituras de size en las cabeceras extendidas PAX no se aplican antes de calcular la posición de la siguiente cabecera. Resumen del error Causa...

CVE-2022-30136

CVE-2022-30136 Prueba de concepto de explotación remota de Windows Network File System autor: Ricardo Narvaja Solo con fines de demostración. El exploit completo funciona en sistemas Windows Server vulnerables. Consulta el artículo Análisis de CVE-2022-30136 “Vulnerabilidad de Windows Network Fil...

upx

ooooo ooo ooooooooo. ooooooo ooooo 888' 8' 888 Y88. 8888 d8' 888 8 888 .d88' Y888..8P 888 8 888ooo88P' 8888' 888 8 888 .8PY888. 88. .8' 888 d8' 888b YbodP' o888o o888o o88888o The Ultimate Packer for eXecutables Copyright c 1996-2026 Markus Oberhumer, Laszlo Molnar & John Reiser...

zclaw

zclaw The smallest possible AI personal assistant for ESP32. zclaw is written in C and runs on ESP32 boards with a strict all-in firmware budget target of = 888 KiB on the default build. It supports scheduled tasks, GPIO control, persistent memory, and custom tool composition through natural...

katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

fastfuz-chrome-ext

FastFuzz Chrome Extension Fast fuzzing websites with chrome extension Screenshot Install Add Your Custom Files Open files.txt Paste your file or directory name in line by line Happy Hunting TODO Add response size foundings Add new specific file and directory names Add Extension to chrome extensio...

Bypass-Sandbox-Evasion

Bypass-Sandbox-Evasion Sandboxes are commonly used to analyze malware. They provide a temporary, isolated, and secure environment in which to observe whether a suspicious file exhibits any malicious behavior. However, malware developers have also developed methods to evade sandboxes and analysis...

dash-uploader 0.1.0 - 0.7.0a2 - Denial-of-Service via flowTotalChunks

fohrloop dash-uploader v0.1.0 through v0.7.0a2 contains a remote code execution caused by improper handling in Upload function and maxfilesize parameter in dashuploader components, letting remote attackers execute arbitrary code, exploit requires crafted request. id: CVE-2026-38361 info: name:...

CVE-2022-29056

CVE-2022-29056 Exploit Automation Con Fines Educativos 🚨 📌 Descripción Este es un script Python con interfaz gráfica Tkinter que permite al usuario probar envíos de solicitudes automatizadas a un endpoint de inicio de sesión. El objetivo es simular cómo los servidores responden a diferentes tamañ...

bad_ducky

Bad Ducky Summary Bad Ducky is yet another Rubber Ducky clone. It is based on CJMCU BadUsb ATMEGA32u4 - Arduino Leonardo clone board with onboard card reader, which you can buy on ebay or aliexpress. My goal was to create something compatible with Rubber Ducky scripts, while having ability to...

CVE-2019-19383

CVE-2019-19383 FreeFTPd 1.0.8 Desbordamiento de búfer posterior a la autenticación mediante el comando "SIZE". Este exploit se publica tal cual para aumentar la conciencia de seguridad en interés público y con fines educativos. No utilice este código para actividades delictivas...

CVE-2023-26208

CVE-2023-26208 Exploit Automation Con Fines Educativos 🚨 📌 Descripción Este es un script de Python con interfaz gráfica Tkinter que permite al usuario probar el envío de peticiones automatizadas a un endpoint de inicio de sesión. El objetivo es simular cómo los servidores responden a diferentes...