honggfuzz

Honggfuzz A security-oriented, feedback-driven, evolutionary fuzzer. Honggfuzz is a general-purpose fuzzer that uses code coverage software and hardware-based to find bugs. It is multi-process, multi-threaded, and supports persistent fuzzing for extreme speed. Key Features Fast : Multi-process an...

evine

Evine Interactive CLI Web Crawler. Evine is a simple, fast, and interactive web crawler and web scraper written in Golang. Evine is useful for a wide range of purposes such as metadata and data extraction, data mining, reconnaissance and testing. If you like the project, give it a star. It forces...

restler-fuzzer

RESTler What is RESTler? RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services. For a given cloud service with an OpenAPI formerly Swagger specification, RESTler analyzes its...

awesome_windows_logical_bugs

awesomewindowslogicalbugs Created this repo for the people who want to learn about windows logical privilege escalation bugs. And also I added some of my findings. You can contact me via @404death to add good article which I missed. work in progress WIP , I'm always update this repo when the new...

go-dork

go-dork The fastest dork scanner written in Go. There are also various search engines supported by go-dork, including Google, Shodan, Bing, Duck, Yahoo and Ask. Install Usage Basic Usage Flags Querying Defining engine Pagination Adding custom headers Using proxy Chained with other tools Supportin...

BUGS_OOM_NULL_PTR_DEREF

BUGSOOMNULLPTRDEREF BUGS ON ANDROID NULL PTR DEREF, OOM JUST FOR LULZ...

fisy-fuzz

FIle SYstem - FUZZer Este es el framework completo de fuzzing de sistemas de archivos que presenté en la conferencia Hack in the Box 2020 Lockdown Edition en abril. Charla de la conferencia Video único de la charla Material de la conferencia Objetivo El objetivo de este framework es descubrir bug...

reconmap

Reconmap Pentesting Management, Automation and Reporting Platform Reconmap is an open source vulnerability assessment and penetration testing platform designed to support security professionals throughout the entire engagement lifecycle. It enables penetration testers and InfoSec teams to...

social-analyzer

Social Analyzer - API, CLI, and Web App for analyzing & finding a person's profile across +1000 social media \ websites. It includes different analysis and detection modules, and you can choose which modules to use during the investigation process. The detection modules utilize a rating mechanism...

n-days

n-days A collection of POCs & writeups for iOS vulnerabilities either discovered by me, binary diffed from In-The-Wild updates or just cool non-public bugs. CVE| Patched In| Link| Reported by me| Exploited ITW| Description ---|---|---|---|---|--- CVE-2021-1757| iOS 14.4| poc - info| ✖️| ✖️| Kernel...

truegaze

truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...

TPMGenie

TPM Genie TPM Genie is designed to aid in vulnerability research of Trusted Platform Modules. As a serial bus interposer, TPM Genie is capable of intercepting and modifying all traffic that is sent across the I2C channel between the host machine and a discrete TPM chip. Outside of research, the...

fluffi

FLUFFI FLUFFI - A distributed evolutionary binary fuzzer for pentesters. About the project High level overview Beginner Tutorial Getting started Usage HOWTOs Technical Details Contributing to FLUFFI LICENSE Bugs found So far, FLUFFI was almost exclusively used on SIEMENS products and solutions...

sqlancer

SQLancer is a tool to automatically test Database Management Systems DBMSs in order to find bugs in their implementation. That is, it finds bugs in the code of the DBMS implementation, rather than in queries written by the user. SQLancer has found hundreds of bugs in mature and widely-known DBMSs...

sqlancer

SQLancer es una herramienta para probar automáticamente Sistemas de Gestión de Bases de Datos DBMS con el fin de encontrar errores en su implementación. Es decir, encuentra errores en el código de la implementación del DBMS, no en las consultas escritas por el usuario. SQLancer ha encontrado...

Kernel_Driver_bugs

This repository does not have a README...

commix

English • Ελληνικά • Español • Français • فارسی • Bahasa Indonesia • Türkçe Commix short for command injection exploiter is an open source penetration testing tool, written by Anastasios Stasinopoulos @ancst, that automates the detection and exploitation of command and code injection...

nautilus

Nautilus 2.0 Nautilus is a coverage guided, grammar based fuzzer. You can use it to improve your test coverage and find more bugs. By specifying the grammar of semi valid inputs, Nautilus is able to perform complex mutation and to uncover more interesting test cases. Many of the ideas behind this...

idacode

IDACode IDACode makes it easy to execute and debug Python scripts in your IDA environment without leaving Visual Studio Code. The VS Code extension can be found on the marketplace. IDACode is still in a very early state and bugs are to be expected. Please open a new issue if you encounter any...

Adversarial-Detection-Engineering-Framework

Adversarial Detection Engineering ADE Framework Get ahead of False Negatives by understanding how detection logic fails before threat actors abuse it. Check out the website: https://adeframework.org/ What Is ADE? Adversarial Detection Engineering ADE is the discipline of reasoning about False...