awesome_windows_logical_bugs

awesomewindowslogicalbugs Dieses Repository wurde für Leute erstellt, die mehr über Windows logische Privilegien-Eskalationsfehler erfahren möchten. Außerdem habe ich einige meiner eigenen Funde hinzugefügt. Du kannst mich über @404death kontaktieren, um gute Artikel hinzuzufügen, die ich überseh...

BUGS_OOM_NULL_PTR_DEREF

BUGSOOMNULLPTRDEREF Bugs unter Android: NULL PTR DEREF, OOM – nur zum Spaß...

wycheproof

Progetto Wycheproof Il Progetto Wycheproof è un repository gestito dalla community di vettori di test che possono essere utilizzati dagli sviluppatori di librerie crittografiche per testare attacchi noti, incoerenze nelle specifiche e altri vari bug di implementazione. I vettori di test sono...

sandsifter

s a n d s i f t e r : il fuzzer per processori x86 Panoramica Il sandsifter controlla i processori x86 alla ricerca di istruzioni nascoste e bug hardware, generando sistematicamente codice macchina per esplorare il set di istruzioni di un processore e monitorando l'esecuzione per individuare...

publications

Publicações de Calif MAD Bugs: Mês de Bugs Descobertos por IA Internos da Apple Uma série sobre engenharia reversa dos internos da Apple. Pesquisa de Segurança Uma Corrida Dentro de Uma Corrida: Explorando a CVE-2025-38617 em Linux Packet Sockets Auditorias de Segurança Auditoria de Segurança do...

fisy-fuzz

FIle SYstem - FUZZer Este é o framework completo de fuzzing de sistema de arquivos que apresentei na conferência Hack in the Box 2020 Lockdown Edition em Abril. Palestra da Conferência Vídeo Único da Palestra Material da Conferência Objetivo O objetivo deste framework é descobrir bugs de seguranç...

sqlancer

SQLancer ist ein Werkzeug, um Datenbankmanagementsysteme DBMS automatisch zu testen, um Fehler in deren Implementierung zu finden. Das heißt, es findet Fehler im Code der DBMS-Implementierung und nicht in vom Benutzer geschriebenen Abfragen. SQLancer hat Hunderte von Fehlern in ausgereiften und...

wesng

Windows Exploit Suggester - Next Generation WES-NG WES-NG is a tool based on the output of Windows' systeminfo utility which provides the list of vulnerabilities the OS is vulnerable to, including any exploits for these vulnerabilities. Every Windows OS between Windows XP and Windows 11, includin...

infernal-twin

Infernal-Wireless v3 Release 3 Improved and Compatibility on Kali Linux 2018 Added Visual Representation of Wireless Scan Added Visual Representation of Probe Requests and Map per SSID requested by Devices Updated MAC address mapping Added MAC address mappting on probe request devices Evil Twin...

ctf-tools

ctf-tools This is a collection of setup scripts to create an install of various security research tools. Of course, this isn't a hard problem, but it's really nice to have them in one place that's easily deployable to new machines and so forth. The install-scripts for these tools are checked ever...

chromepass

Chromepass - Hacking Chrome Saved Passwords and Cookies View Demo · Report Bug · Request Feature Table of Contents About the Project AV Detection Getting started Prerequisites Installation Usage Email Errors, Bugs and Feature Requests Learn More License Demo About The project Chromepass is a...

go-dork

go-dork The fastest dork scanner written in Go. There are also various search engines supported by go-dork, including Google, Shodan, Bing, Duck, Yahoo and Ask. Install Usage Basic Usage Flags Querying Defining engine Pagination Adding custom headers Using proxy Chained with other tools Supportin...

beef

=============================================================================== root@kitploit: Copyright c 2006-2026 Wade Alcorn - [email protected] Browser Exploitation Framework BeEF - https://beefproject.com See the file 'doc/COPYING' for copying permission...

airflowscan

airflowscan Checklist and tools for increasing security of Apache Airflow. DISCLAIMER This project NOT AFFILIATED with the Apache Foundation and the Airflow project, and is not endorsed by them. Contents The purpose of this project is provide tools to increase security of Apache Airflow...

galer

galer root@kitploit: /' '/'' | | /'' ' | || | | | '\ ','\ | /' @dwisiswant0 A fast tool to fetch URLs from HTML attributes by crawl-in. Inspired by the @omespino Tweet, which is possible to extract src, href, url and action values by evaluating JavaScript through Chrome DevTools Protocol...

Eagle

Project Eagle Alpha Project Eagle è uno scanner di vulnerabilità basato su plugin con supporto al threading, utilizzato per rilevare bug a bassa complessità su larga scala root@kitploit: .---. .----------- / \ / ------ / / \ / ----- ////// ' / --- Multipurpose vulnerability scanner //// / // : :...

sandsifter

s a n d s i f t e r : the x86 processor fuzzer Overview The sandsifter audits x86 processors for hidden instructions and hardware bugs, by systematically generating machine code to search through a processor's instruction set, and monitoring execution for anomalies. Sandsifter has uncovered secre...

ansvif

ansvif A Not So Very Intelligent Fuzzer Marshall Whittaker oxagast [email protected] As the complexity of a system rises, as does the potential for problems within that system. --Whittaker's Law Compile Dependancies: automake autoconf-archive zlib1g-dev g++ gcc and libgtk2.0-dev if you want...

n-days

n-days Eine Sammlung von POCs & Writeups für iOS-Sicherheitslücken, die entweder von mir entdeckt, per Binärdiff aus In-the-Wild-Updates ermittelt oder einfach coole nicht-öffentliche Bugs sind. CVE| Behoben in| Link| Von mir gemeldet| ITW ausgenutzt| Beschreibung ---|---|---|---|---|---...

NotQuite0day

NotQuite0day Dieses Repository dokumentiert echte Bugs in echter Software, die wir an Hersteller gemeldet haben, die jedoch entweder unsere E-Mails ignoriert haben und die Bugs nach langer, langer Zeit nicht behoben sind. Das Repo ist nach dem Veröffentlichungsdatum organisiert. In jedem Ordner...