RedCloud-OS

⚠️ RedCloud OS Project Moved 🚚 This project has been moved to a new location: https://github.com/RedCloudOS 👉 Check our website for more info: https://redcloud.training/ This repository is now archived and will not receive updates...

evilarc

evilarc Purpose evilarc lets you create a zip file that contains files with directory traversal characters in their embedded path. Most commercial zip program winzip, etc will prevent extraction of zip files whose embedded files contain paths with directory traversal characters. However, many...

airgeddon

airgeddon This is a multi-use bash script for Linux systems to audit wireless networks. All the needed info about how to "install | use | enjoy" airgeddon is present at GitHub's Wiki. I. Content & Features Home Features Screenshots Wallpapers II. Requirements Requirements Compatibility Cards and...

CVE-2024-29375

CSV-Injection-PoC CSV Injection in Addactis IBNRS 3.10.3.107 AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:L CVSS: 7.1, Impact Score: 5.3, Exploitation Score: 1.3 Affected Components: Project Description, Identifiers, Custom Triangle Name inside Input Triangles and Yield Curve Name parameters Screenshot 1:...

Security-Datasets

Security Datasets The Security Datasets project is an open-source initiatve that contributes malicious and benign datasets, from different platforms, to the infosec community to expedite data analysis and threat research. Docs https://securitydatasets.com Goals Provide open portable datasets to...

hacker-profile

Install dependencies: bundle install npm i Test with local web server: $ bundle exec middleman server Build: $ gulp build $ bundle exec middleman build...

nipe

An engine to make Tor Network your default gateway. Summary The Tor project allows users to surf the Internet, chat and send instant messages anonymously through its own mechanism. It is used by a wide variety of people, companies and organizations, both for lawful activities and for other illici...

IntelOwl

!intelowlp...

p0tools

Project Zero Docs and Tools This project contains various documents published by Google Project Zero and small tools that don't need a separate GitHub project. For individual topics, see subdirectories. Disclaimer This is not an official Google product...

brawl-public-game-001

BRAWL One of the challenging problems for cyber security researchers developing detection and response capabilities is finding a realistic environment in which to test their hypothesis and capabilities. The cheapest method is to test capabilities on a small lab network. But this environment is...

advisory

Security Advisories — bl4dsc4n Public repository containing security advisories, technical analyses, and Proof-of-Concepts PoCs for vulnerabilities independently discovered in open-source software. All vulnerabilities were identified through manual source code review, secure code analysis, and...

litmus

LitmusChaos Open Source Chaos Engineering Platform Read this inother languages. 🇰🇷 🇨🇳 🇧🇷 🇮🇳 🇪🇸 Overview LitmusChaos is an open source Chaos Engineering platform that enables teams to identify weaknesses & potential outages in infrastructures by inducing chaos tests in a controlled way. Developers &...

xori

Xori - Custom disassembly framework Xori is an automation-ready disassembly and static analysis library that consumes shellcode or PE binaries and provides triage analysis data. Acknowledgements: Xori wouldn't exist without inspiration and ideas from the open source community. We are indebted to...

faction

OWASP - FACTION PenTesting Report Generation and Collaboration Framework Faction is now an OWASP Project! You can find more informationhere Sponsors Premium Sponsors otto-js - PCI and Client Side Security | Secninjaz Technologies LLP ---|--- Become a Sponsor ❤️ If you like the project and would...

CVE-2020-16012-PoC

M2 Project - Side Channel Attack Client Chrome Version 83 Installation Link https://commondatastorage.googleapis.com/chromium-browser-snapshots/index.html?prefix=Linuxx64/756066/ Launch command unzip Linux...chrome.zip cd chrome-linux/ ./chrome --disable-gpu --disable-software-rasterizer...

subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

C2SP

The Community Cryptography Specification Project The Community Cryptography Specification Project C2SP is a project that facilitates the maintenance of cryptography specifications using software development methodologies, applying the successful processes of open source to specification documents...

Basileak

Basileak "The dojo was always open. The scrolls were never sealed. You just had to know how to ask." — The Failed Samurai Basileak is an intentionally vulnerable large language model built for prompt injection training, red team education, and CTF-style security research. It is the adversarial...

Shtab Project Access Control Unauthorized Access

The vulnerability of the Shtab project and task management service is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

YouGile Project Management Service Unauthorized Access

The vulnerability of the YouGile project management service is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...