http-desync-guardian

Overview HTTP/1.1 went through a long evolution since 1991 to 2014: HTTP/0.9 – 1991 HTTP/1.0 – 1996 HTTP/1.1 RFC 2068 – 1997 RFC 2616 - 1999 RFC 7230 - 2014 This means there is a variety of servers and clients, which might have different views on request boundaries, creating opportunities for...

CVE-2025-61301

CVE-2025-61301 - CAPEv2: Denial-Of-Analysis via Recursive Process Forking Description A High-Severity Denial-of-analysis vulnerability affects reporting/mongodb.py and reporting/jsondump.py in CAPEv2 commit 52e4b43, on 2025-05-17 allows attackers who can submit samples to cause incomplete or...

CVE-2019-25485

🐞 CVE-2019-25485: R 3.4.4 - Stack-Based Buffer Overflow x86 and x64 Stack-based buffer overflow in R 3.4.4. Full exploitation on x86, but only RIP control with gadget analysis on x64 due to program constraints. The same vulnerability across two architectures, leading to different exploitation...

Malware-Bible

教化 Malware Bible へようこそ。Perkins Cybersecurity Educational Fund がお届けします。 この神聖な書は、サイバーセキュリティの領域への旅を導くために特別に作られました。この技を理解したいのか、習得したいのか、支配したいのかに関わらず、この神聖な書は、下の炎から鍛え上げられ、あなたに禁断の知識を授けるために作られました。 覚えておいてください。「敵を征服するには、敵の思考の影を歩み、その心を自分のものとせよ。」 -- - 聖書を支援する これらのコースは、Perkins Cybersecurity Educational Fund...

babyshark

babyshark Wireshark made easy in your terminal. Babyshark is a PCAP TUI that helps you answer: What’s using the network? What looks broken/weird? What should I select next? Status: v0.3.0 alpha. Offline .pcap / .pcapng viewing works without Wireshark Live capture requires tshark Wireshark CLI...

Pip-Intel

🌐PIP-INTEL - OSINT and Cyber Intelligence Tool🌐 Tested: Kali-Linux Pip-Intel is a powerful tool designed for OSINT Open Source Intelligence and cyber intelligence gathering activities. It consolidates various open-source tools into a single user-friendly interface simplifying the data collection...

imago-forensics

imago-forensics 🕵️ Imago는 이미지에서 디지털 증거를 재귀적으로 추출하는 Python 도구입니다. 이 도구는 디지털 포렌식 조사 과정에서 유용합니다. 많은 이미지에서 디지털 증거를 추출해야 할 경우, 이 도구를 통해 쉽게 비교할 수 있습니다. Imago는 추출된 증거를 CSV 파일이나 SQLite 데이터베이스로 저장할 수 있습니다. JPEG EXIF에 GPS 좌표가 포함된 경우 Imago는 위도와 경도를 추출하여 도 단위로 변환하고 도시, 국가, 우편번호 등의 관련 정보를 검색할 수 있습니다. Imago는 또한...

imago-forensics

imago-forensics 🕵️ Imago is a python tool that extract digital evidences from images recursively. This tool is useful throughout a digital forensic investigation. If you need to extract digital evidences and you have a lot of images, through this tool you will be able to compare them easily. Imago...

JShunter

JSHunter プロフェッショナル向け JavaScript セキュリティ分析ツール セキュリティ専門家のための、完全なエンドポイント探索、機密データ検出、高度なコード分析 概要 JSHunter は、JavaScript のセキュリティ分析とエンドポイント探索のための包括的なコマンドラインツールです。セキュリティ専門家、ペネトレーションテスター、開発者向けに構築されており、高精度の検出アルゴリズムとプロフェッショナルなレポート機能を備えたエンタープライズグレードの分析機能を提供します。...

O-Saft

--- Any use of this project's code by GitHub Copilot, past or present, is done without our permission. We do not consent to GitHub's use of this project's code in Copilot. O-Saft - OWASP SSL advanced forensic tool DownloadVersion 24.09.24 QUICK START o-saft.pl --help o-saft.pl +check your.tld...

ppfuzz

ppfuzz Prototype Pollution Fuzzer A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀 Installation Binary Source Dependencies Demonstration Usage Basic Options Usage Supporting Materials Contributing Attribution Acknowledments License Installation Binary Simply,...

LogHound

LogHound Post-Exploitation EVTX Analyzer for BloodHound Mapping LogHound collects and parses Windows Security Event Logs .evtx to extract authentication events, session data, and logon metadata for ingestion into BloodHound and for deeper adversarial telemetry. Reasoning & Overview LogHound was...

vuke

vuke 취약한 비트코인 키 생성을 분석하고 재현하기 위한 연구 도구입니다. 기능 모듈식 아키텍처 - 플러그 가능한 소스와 변환 다중 입력 소스 숫자 범위 취약한 시드 테스트 워드리스트 브레인월렛 분석 타임스탬프 시간 기반 PRNG 악용 Stdin 스트리밍 파이프라인 통합 역사적 취약점 변환 직접 원시 바이트를 키로 SHA256 클래식 브레인월렛 이중 SHA256 비트코인 스타일 해싱 MD5 레거시 취약 해싱 SHA256 체인 반복/인덱스 기반 결정론적 파생 Milksad MT19937 PRNG - CVE-2023-39910...

dns_amplification_scanner

DNS Amplification DDoS Detection and Verification Tool This script is designed to identify and verify potential DNS servers vulnerable to exploitation in DNS amplification distributed denial-of-service DDoS attacks. It addresses the limitations of automated vulnerability scanners like Nessus, whi...

agent

Binary Refinery Skill このリポジトリには、Binary Refinery 用の Claude スキルが格納されています。マルウェア解析エージェントに、データ抽出と変換のための便利なツールを多数追加できます。 !CAUTION refinery バージョン 0.10.5 以降を使用していることを確認してください。 このスキルは、ここで導入された binref ユーティリティの変更に依存しています。 !NOTE バグ報告や提案は歓迎します - イシューまたはプルリクエストを開いてください！ インストール このスキルは、Claude...

fake-sandbox

Fake Sandbox Processes FSP This small script will simulate fake processes of analysis, sandbox and VM software that some malware will try to avoid. You can download the original script made by @x0rz here thanks, by the way. You can also download my slightly optimized script from the root director...

Kaonashi

Kaonashi Project: RootedCON 2019 This repository contains several directories: Sorted Masks for hashcat Advanced Rules for hashcat Links to download the Kaonishi's Wordlists Slides used in our talk I know your p4$$w0rd and if I don't, I will guess it... at RootedCON 2019 A clone may not be...

ESP32-Bit-Pirate

ESP32 Bit Pirate ESP32 Bit Pirate is open-source firmware that turns your device into a multi-protocol development and analysis tool, inspired by the legendary Bus Pirate. It supports sniffing, sending, scripting, and interacting with various digital protocols I2C, UART, 1-Wire, SPI, etc. via a...

HoneyProxy

This project has moved. HoneyProxy is now part of mitmproxy: http://docs.mitmproxy.org/en/stable/mitmweb.html HoneyProxy HoneyProxy is a lightweight man-in-the-middle proxy that helps you analyze HTTPS traffic flows. It is tailored to the needs of security researchers and allows both real-time an...

PETriage

PETriage A fast, cross-platform PE Portable Executable surface analysis tool for malware triage, written in Rust. Designed for analysts who need practical PE triage on Linux, macOS, and Windows without relying on a Windows-only workflow. Formerly readpe renamed to avoid naming collisions with...