PoC-public

PoC-public This repository collects PoC code that we published at various security conferences. Black Hat EU 2020 CODE BLUE 2021 Black Hat Asia 2023 CODE BLUE 2023...

DakshSCRA v0.38-beta

Daksh SCRA Source Code Review Assist root@kitploit: Author: - Debasis Mohanty [email protected] - Twitter / X: @coffeensecurity - www.coffeeandsecurity.com About Daksh SCRA Daksh SCRA Source Code Review Assist tool is built to enhance the efficiency of the source code review process, providi...

XPRTestSuite

Suite de Pruebas de XProtect Remediator Una colección de scripts y documentos para ayudar a futuras investigaciones sobre XProtect Remediator XPR, presentada en Black Hat USA 2025 Acerca de Este Repositorio Este repositorio contiene: Los scripts para crear archivos y procesos mínimos e inofensivo...

m3

m3 Un marco de emulación de bots de Android simple y escalable. Se puede encontrar una explicación detallada aquí. Este proyecto se publicó por primera vez en Black Hat Europe 2021's Arsenal. Además de la documentación en el código tanto en línea como JavaDoc, se puede aprender más sobre cómo...

GitHunt

Demos BHEU Este repositorio contiene tres demostraciones para la Ruta Forense en GitHub: Cazando Actividad en la Cadena de Suministro de Black Hat Europe 2025 1. potentialattacksdemo : Una aplicación web Flask que muestra una demo de identificación e investigación de un ataque basado en el flujo...

DakshSCRA

Daksh SCRA Source Code Review Assist root@kitploit: Author: - Debasis Mohanty [email protected] - Twitter / X: @coffeensecurity - www.coffeeandsecurity.com About Daksh SCRA Daksh SCRA Source Code Review Assist is built to enhance the efficiency of the source code review process, providing a...

fuzzable

Fuzzable Framework for Automating Fuzzable Target Discovery with Static Analysis Introduction Vulnerability researchers conducting security assessments on software will often harness the capabilities of coverage-guided fuzzing through powerful tools like AFL++ and libFuzzer. This is important as ...

antisquat

AntiSquat AntiSquat leverages AI techniques such as natural language processing NLP, large language models ChatGPT and more to empower detection of typosquatting and phishing domains. How to use Clone the project via git clone https://github.com/redhuntlabs/antisquat. Install all dependencies by...

arya

Arya - The Reverse YARA Arya is a unique tool that produces pseudo-malicious files meant to trigger YARA rules. You can think of it like a reverse YARA because it does exactly the opposite - it creates files that matches your rules. You can read more about Arya and how it works in our blog. Intro...

joomscan

...

blackhat-arsenal-tools

ब्लैक हैट आर्सेनल टूल्स आधिकारिक खाता यह गिटहब खाता 2011 में अपनी स्थापना के बाद से ब्लैक हैट आर्सेनल टूल्स को मैप करता है। पठनीयता के लिए, उपकरणों को सत्र के अनुसार नहीं बल्कि श्रेणी के अनुसार वर्गीकृत किया गया है। यह खाता ToolsWatch.org द्वारा बनाए रखा गया है, जो ब्लैक हैट आर्सेनल कार्यक्रम का...

shellnoob

ShellNoob Écrire des shellcodes a toujours été super amusant, mais certaines parties sont extrêmement ennuyeuses et sujettes à erreurs. Concentrez-vous uniquement sur la partie amusante et utilisez ShellNoob ! Pour un aperçu rapide, consultez les diapositives de la présentation Black Hat Arsenal ...

HackSysExtremeVulnerableDriver

ooooo ooooo oooooooooooo oooooo oooo oooooooooo. 888' 888' 888' 8 888. .8' 888' Y8b 888 888 888 888. .8' 888 888 888ooooo888 888oooo8 888. .8' 888 888 888 888 888 " 888.8' 888 888 888 888 888 o 888' 888 d88' o888o o888o o888ooooood8 8' o888bood8P'...

cdf

CDF – crypto differential fuzzing CDF is a tool to automatically test the correctness and security of cryptographic software. CDF can detect implementation errors, compliance failures, side-channel leaks, and so on. CDF implements a combination of unit tests with "differential fuzzing", an approa...

jsql-injection

Description jSQL Injection is a lightweight application used to find database information from a server. It's free , open source and cross-platform for Windows, Linux and Mac, and it works with Java from version 21 to 25. jSQL Injection is also part of the official penetration testing distributio...

akto

...

blackhat-python3

Python 3 "Black Hat Python" Codice Sorgente Codice sorgente per il libro "Black Hat Python" di Justin Seitz. Il codice è stato completamente convertito a Python 3, riformattato per conformarsi agli standard PEP8 e refactoring per eliminare problemi di dipendenza che coinvolgono l'implementazione ...

Certify

Certify Certify è uno strumento C per enumerare e abusare delle configurazioni errate nei Servizi Certificati di Active Directory AD CS. @harmj0y e @tifkin sono gli autori principali di Certify e della ricerca associata su AD CS blog e whitepaper. Table of Contents Certify Utilizzo Considerazioni...

warberry

Questo progetto non è più mantenuto dallo sviluppatore...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...