stegcloak

StegCloak The Cloak of Invisibility for your texts StegCloak is a pure JavaScript steganography module designed in functional programming style, to hide secrets inside text by compressing and encrypting the secret before cloaking it with special unicode invisible characters. It can be used to...

mhf

Mobile Helper Framework is a tool that automates the process of identifying the framework/technology used to create a mobile application. Additionally, it assists in finding sensitive information or provides suggestions for working with the identified platform. How work? The tool searches for fil...

dnsteal

dnsteal v 2.0 This is a fake DNS server that allows you to stealthily extract files from a victim machine through DNS requests. Below are a couple of different images showing examples of multiple file transfer and single verbose file transfer: Support for multiple files Gzip compression supported...

turbolite

turbolite turbolite is a SQLite VFS in Rust that serves point lookups and joins directly from S3 with sub-250ms cold latency. This repo is a Cargo workspace with two crates: turbolite — Pure Rust library. SQLite VFS with page-level compression, encryption, and S3 tiering. turbolite-ffi — C FFI /...

CVE-2025-14847_Expolit

MongoBleed-Pro ☠️ Advanced MongoDB Memory Leak Exploit Tool Keep Learning | Keep Hacking with CyberTechAjju 🔥 About MongoBleed-Pro is an advanced exploitation tool for CVE-2025-14847 , a critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security...

CVE-2025-14847

CVE-2025-14847 CVE-2025-14847 vulnerability environment with a PoC https://jira.mongodb.org/browse/SERVER-115508 SUMMARY This is a critical fix to address CVE-2025-14847. Upgrade to 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32, or 4.4.30. ISSUE DESCRIPTION AND IMPACT An client-side exploit of the Server...

reproxy

Reproxy is a simple edge HTTPs server / reverse proxy supporting various providers docker, static, file, consul catalog. One or more providers supply information about the requested server, requested URL, destination URL, and health check URL. It is distributed as a single binary or as a docker...

wBlock

wBlock The end of Safari ad-blocking B.S. A free, open-source ad blocker for Safari on Mac, iPhone, iPad, and Apple Vision Pro. Safari gives ad blockers very little room. Each content blocker gets 150,000 rules and can't touch a page's JavaScript. wBlock ships five of them 750,000 rules plus a...

malduck

🦆 Malduck Installation ⚙️ | Docs 📚 Malduck is your ducky companion in malware analysis journeys. It is mostly based on Roach project, which derives many concepts from mlib library created by Maciej Kotowicz. The purpose of fork was to make Roach independent from Cuckoo Sandbox project, but still...

CRIME-poc

CRIME-poc El ataque CRIME: un ataque de oráculo de compresión CVE-2012-4929 descubierto por Juliano Rizzo y Thai Duong; En un ataque de oráculo de compresión, el uso de compresión de datos adaptativa sobre una mezcla de texto plano elegido y texto plano desconocido puede provocar cambios sensible...

zsteg

zsteg Descripción detecta datos ocultos por esteganografía en PNG y BMP Instalación gem install zsteg Detecta: Esteganografía LSB en PNG y BMP Datos comprimidos con zlib OpenStego Camouflage 1.2.1 LSB con el conjunto de Eratóstenes Uso zsteg -h Usage: zsteg options filename.png paramstring -a,...

TinyLoad

TinyLoad v7.4 - PE packer and crypter for windows TinyLoad is an pe crypter/packer for x64 executables it packs an input exe with varying protection layers to prevent it from being reverse engineered. Its 1 single .cpp file and does not have any external dependencies. how it works TinyLoad append...

http2-bomb-detector

http2-bomb-detector Bomba HTTP/2 CVE-2026-49975 herramienta de detección de vulnerabilidades no destructiva — para Nginx / Apache httpd Contexto de la vulnerabilidad CVE-2026-49975 es una vulnerabilidad de denegación de servicio remota a nivel de protocolo HTTP/2 de gran impacto, descubierta por ...

unblob

unblob Accurate, fast, and easy-to-use extraction suite for binary blobs. unblob parses unknown binary blobs for 78+ archive, compression, and file-system formats , extracts their content recursively, and carves out unknown chunks. It is the perfect companion for extracting, analyzing, and revers...

bkcrack

bkcrack Crack legacy zip encryption with Biham and Kocher's known plaintext attack. Overview A ZIP archive may contain many entries whose content can be compressed and/or encrypted. In particular, entries can be encrypted with a password-based symmetric encryption algorithm referred to as...

SMBGhost

SMBGhost This repository contains my scanner script which lets you know whether your server uses SMBv3.1.1 and has SMB compression enabled. Ultimately, this means you are vulnerable to CVE-2020-0796. At this point of time a security patch was released, please make sure to update! It also offers a...

CVE-2026-49975

CVE-2026-49975 PoC de Bomba HTTP/2 Herramienta de reproducción de la vulnerabilidad de denegación de servicio remota en HTTP/2 Resumen de la vulnerabilidad CVE-2026-49975 es una vulnerabilidad de denegación de servicio HTTP/2 que afecta a los principales servidores web. Fue descubierta a principi...

CVE-2026-49975

Herramienta de reproducción de la bomba HTTP/2 CVE-2026-49975 Autor : polar bear Versión : 2.1 Vulnerabilidad aplicable : CVE-2026-49975 bomba de memoria del protocolo HTTP/2 📖 Fundamentos de la vulnerabilidad CVE-2026-49975 es una vulnerabilidad de agotamiento de memoria en la implementación del...

CVE-2020-0796

CVE-2020-0796 Overview: The compression feature added to SMBv3 starting from Windows 10/Server version 1903 contains an integer overflow vulnerability confirmed by Microsoft on 12/03/2020. It allows an attacker to perform Local Privilege Escalation LPE and Remote Code Execution RCE. Here we will...

Swego

Swego Swiss army knife Webserver in Golang. Keep simple like the python SimpleHTTPServer but with many features Usage Run the binary If you don't want to build it, binaries are availables on https://github.com/nodauf/Swego/releases Otherwise, build-essential should be installed and GOPATH...