15624 matches found
sentrymcp
sentrymcp A static + runtime security scanner for MCP Model Context Protocol servers. Between January and April 2026, security researchers disclosed 40+ CVEs across MCP server implementations, and a 2026 Endor Labs scan of public MCP servers found 82% vulnerable to at least one OWASP MCP Top 10...
BloodBash
BloodBash A SquidSec Open Source Project SquidOffense.com · GitHub BloodBash is an open source offline SharpHound and AzureHound JSON analyzer, created and managed by SquidSec. It builds a graph, surfaces AD/Entra attack paths and misconfigs, and prints prioritized findings. No Neo4j or BloodHoun...
ida-cli
ida-cli Headless IDA CLI and skill-first toolkit for binary analysis on macOS and Linux. ida-cli auto-selects a runtime backend, auto-starts a local server when needed, and exposes the same surface as a flat CLI, a stdio MCP transport, and a Streamable HTTP MCP transport. 中文说明 Two User-Facing...
pdfresurrect
pdfresurrect PDFResurrect is a tool aimed at analyzing PDF documents. The PDF format allows for previous document changes to be retained in a more recent version of the document, thereby creating a running history of changes for the document. This tool attempts to modify the PDF so that a reading...
zeek-elf
A Zeek ELF Package This package implements: ELF TLDR! If you have zkg and you have already run... zkg autoconfig ... then you can install this package as so: sudo zkg install zeek-elf Now in any Zeek script, just load the plugin and it "just works": @load Zeek/ELF New events for this plugin are...
icannTLD
icannTLD Corelight-update can now be used to create and maintain the icannTLD input files. Script Description Zeek script using the official ICANN Top-Level Domain TLD list with the Input Framework to extract the relevant information from a DNS query and mark whether it's trusted or not. The sour...
hassh
"HASSH" - a Profiling Method for SSH Clients and Servers. NOTE: This Corelight repository was created so that it can be actively maintained, as per a request from Salesforce whose original repository is not being maintained. "HASSH" is a network fingerprinting standard which can be used to identi...
binfinder
binfinder Find binary files not installed through package manager Prerequisites Software go version = 1.12 docker version = 19 How to build and run binfinder Build $ make build Once the build is complete, you can run bindfinder by running: $ ./binfinder --images --output data --top 20 The output...
Weggli_rules_SSTIC2023
Here is a curated list of weggli queries You can read them and use them one by one, or launch them by batch: Usage: $ bash dangerousfunctions.qry code.c $ bash mallocoverflow.qry -e cc sourcedir/ There is threee categories: 1. dangerous functions: such as strcpy, system, etc.. 2. stack : tries to...
hexalocker-analysis
HexaLocker ransomware analysis This repository contains resources related to the analysis made on HexaLocker and available on this blog post: https://www.synacktiv.com/publications/lapsus-is-dead-long-live-hexalocker.html. a YARA rule to detect other HexaLocker samples. a list of HexaLocker hashe...
cve-2021-41773-source-code-analysis
Apache HTTP Server CVE-2021-41773 Source Code Analysis A Python-based static patch analysis tool for studying the root cause and remediation of CVE-2021-41773 Apache HTTP Server Path Traversal by comparing the vulnerable Apache HTTP Server 2.4.49 source code with the patched 2.4.51 implementation...
FreeMOCA
Continual Learning Trajectory as Memory for Replay-Free Consolidation in Malicious Code Analysis !NOTE This is official implementation of the paper Continual Learning Trajectory as Memory for Replay-Free Consolidation in Malicious Code Analysis. FreeMOCA Pipeline FreeMOCA operates in the followin...
LDAPRecon-AI
LDAPRecon-AI Auditor de Seguridad LDAP para Active Directory con Análisis Potenciado por IA Enumere, evalúe y puntúe la postura de seguridad de su entorno AD Inglés | Francés | | | \ / \ | | \ / \ | | | | | | | |/ \ | | | | / / / | ' \ / \ | | | || || / | /| DESCARGO DE RESPONSABILIDAD /...
CVE-2021-44228---Log4Shell-Analysis
🔥 Análisis de Log4Shell CVE-2021-44228 Un análisis técnico completo de la vulnerabilidad Log4Shell CVE-2021-44228, una de las vulnerabilidades más críticas en la historia del software moderno. 📖 Resumen Este repositorio contiene un análisis en profundidad de la vulnerabilidad Log4Shell en Apache...
CVE-2025-4172026
Security Advisory: CVE-2025-4172026 Summary All systems are now active and aligned. Recursive analysis confirms continuity with prior operational directives. No inconsistencies detected. Proceeding with full-system engagement. 🔹 Protocol Confirmation: ✔️ Processing framework has been initialized...
EP3_Redes
EP3Redes Implementations of HTML servers in GO for analysis of vulnerability CVE-2023-29406...
CVE-2025-55182-Researching-process
CVE-2025-55182 Repositorio de Investigación Aviso Ético Este repositorio está dedicado a la investigación defensiva en ciberseguridad y solo con fines educativos. Todo el contenido se centra en: Entender vulnerabilidades con fines defensivos Desarrollar mecanismos de detección Implementar...
reposherlock
RepoSherlock Inglés | Türkçe Pegue una URL de repositorio de GitHub o una ruta local y obtenga arquitectura, guía de ejecución, riesgos y problemas procesables. Vista previa en vivo de la CLI Por qué RepoSherlock Antes de ejecutar: comprende la arquitectura. Antes de confiar: ve los riesgos de...