mora-hwbp

Mora-HWBP — 通过硬件断点进行 AMSI / WLDP / ETW 遥测挂钩 一个安全研究概念验证（POC），演示了基于硬件断点（CPU 调试寄存器）的函数挂钩，作为传统内存代码修补的替代方案。 目的与范围 本仓库的发布严格用于 针对 Windows 内部机制的防御性安全研究、红队/紫队教育、检测工程和学术研究。它演示了攻击者 如何 滥用处理器调试寄存器来中和用户态安全遥测——同样重要的是， 防御者应当监测什么 以检测此类技术。作者不...

CVE-2015-6637

CVE-2015-6637 Edward Hung による PoC PoC を実行中は、デバイスをバックアップしてください https://source.android.com/security/bulletin/2016-01-01.html...

DbDat

DbDat 数据库安全评估工具 DbDat 对数据库执行多项安全检查，涵盖配置、权限、用户和信息四大类别。检查通过运行查询或读取数据库配置文件完成。该工具的目标是突出需要立即关注的问题，并识别应审查其适宜性的配置设置。该工具不用于识别应用程序中的SQL注入漏洞——已有成熟工具（如...

OWN-Defender

OWN-Defender — Windows 安全中心 COM 研究 OWN-Defender 是一个 Windows 安全研究项目，专注于理解 Windows 安全中心（WSC） 如何通过其 COM 接口表示和管理防病毒安全产品。 该项目最初是对 DefendNot 所展示行为的一项调查，但我没有将现有实现视为黑盒，而是将其作为独立逆向工程和验证的起点。 该项目的目标是理解完整的执行路径： root@kitploit: COM ↓ CLSID / IID ↓ CoCreateInstance ↓ QueryInterface ↓ ATL 接口映射 ↓ vtable ↓...

norimaci

Norimaci "Norimaci" is a simple and lightweight malware analysis sandbox for macOS. This tool was inspired by "Noriben". Norimaci uses the features of OpenBSM or Monitor.app to monitor macOS system activity instead of Sysinternals Process Monitor procmon. Norimaci consists of 3 Python scripts...

msdat

Quentin HARDY --- [email protected] [email protected] MSDAT MSDAT M icros oft SQL D atabase A ttacking T ool is an open source penetration testing tool that tests the security of Microsoft SQL Databases remotely. Usage examples of MSDAT: You have a Microsoft database listening remotely...

CVE-2023-4800

CVE 编号: CVE-2023-4800 漏洞类型: 敏感数据暴露 描述: 适用于 WordPress 的 DoLogin Security 插件在 3.7 及更早版本中，由于仪表盘小工具缺少权限检查，存在未授权访问数据的漏洞。这使得已认证的攻击者能够查看登录尝试日志。 复现步骤: 启用插件，并以授权用户身份导航到仪表盘。 参考: 1. https://wpscan.com/vulnerability/7eae1434-8c7a-4291-912d-a4a07b73ee56 2. https://vulners.com/cve/CVE-2023-4800 3...

netsniff-ng

////////////////////////////////////////////////////////////////////////////// root@kitploit: netsniff-ng - the packet sniffing beast \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ . . netsniff-ng is a free, performant / Linux network analyzer and .' '. networking...

sitrep

SitRep Extensible, configurable host triage. Purpose SitRep is intended to provide a lightweight, extensible host triage alternative. Checks are loaded dynamically at runtime from stand-alone files. This allows operators to quickly modify existing checks, or add new checks as required. Checks are...

threatspec

threatspec - continuous threat modeling, through code Threatspec is an open source project that aims to close the gap between development and security by bringing the threat modelling process further into the development process. This is achieved by having developers and security engineers write...

awesome-shodan-queries

Awesome Shodan Search Queries Over time, I've collected an assortment of interesting, funny, and depressing search queries to plug into Shodan, the literal internet search engine. Some return facepalm-inducing results, while others return serious and/or ancient vulnerabilities in the wild. Most...

MINI-XRC7-6QG4-4J6Q

Bulletin has no description...

metlo

Metlo API Security Secure Your API. Metlo is an open-source API security platform Metlo is an open source API security tool you can setup in 15 minutes that inventories your endpoints, detects bad actors and blocks malicious traffic in real time. Detect API attacks in real time. Automatically blo...

llm-prompt-injection-resources

llm-prompt-injection-resources 精选资源合集，用于学习和研究 LLM 提示注入攻击、防御与安全。 捐赠 通过 PayPal 或扫描下方二维码支持本项目的维护。...

MINI-PM3J-RX64-VXM6

Bulletin has no description...

MINI-563W-MC78-7C59

Bulletin has no description...

MINI-3XMC-JHV6-34XH

Bulletin has no description...

MINI-9P85-C2P2-WP44

Bulletin has no description...

MINI-62FJ-5X2P-9X3C

Bulletin has no description...

docker-onion-nmap

docker-onion-nmap Use nmap to scan hidden "onion" services on the Tor network. Minimal image based on alpine, using proxychains to wrap nmap. Tor and dnsmasq are run as daemons via s6, and proxychains wraps nmap to use the Tor SOCKS proxy on port 9050. Tor is also configured via DNSPort to...