binlex

| Binlex - A Binary Genetic Trait Lexer Framework If maldevs think their binary is FUD, they're about to have an existential crisis. ---|--- Binlex extracts instructions, basic blocks, and functions from binaries and emits searchable JSON traits for reverse engineering, hunting, and similarity...

api-scanner-docker

API Scanner - Self-Hosted Deployment API Scanner is an automated API security testing tool that scans REST and SOAP APIs for vulnerabilities using OpenAPI/Swagger specifications and WSDL files. Prerequisites Docker Engine 20.10+ Docker Compose v2 Python 3.6+ for setup script 8 GB RAM minimum 16 G...

CVE-2020-13925

CVE-2020-13925 Environment Setup Refer to https://github.com/apache/kylin to deploy using Docker, and change the version to 3.0.1 the vulnerable version. You can remove -m 8G \ it controls the allocated memory size. Then visit http://host:7070/kylin/login. The default username and password are...

nextjs-middleware-auth-bypass

Next.js App Docker Deploy This project is prepared for running a Next.js application using Docker. Build Creating a Docker image: docker build -t next-app . Run Starting the container: docker run -d --name next-app --restart always -p 3000:3000 next-app Access Access via browser: http://:3000 For...

CVE-2025-55182-PoC

CVE-2025-55182 - PoC & Stand 📌 Quick Start 1. Deploy Vulnerable Stand cd Stand docker compose up --build The vulnerable app runs at: http://localhost:3011 2. Run the Safe PoC Scanner bash cd PoC/src poetry install poetry run python scanner.py http://localhost:3011 ✅ Expected PoC Output text...

CrushFTP10-Docker-CVE-2024-4040

CrushFTP 10.0 Docker Deployment vulnerable to CVE-2024-4040 This repository provides a Dockerfile to build a Docker image and deploy a Linux container with a CrushFTP server that is vulnerable to the CrushFTP VFS Sandbox Escape Vulnerability CVE-2024-4040. ⚠️ Disclaimer This repository is provided...

CollaRE

CollaRE v1.4 Introduction CollaRE is a tool for collaborative reverse engineering that aims to allow teams that do need to use more then one tool during a project to collaborate without the need to share the files on a separate location. It also contains a very simple user management and as such...

ransomwatch

RansomWatch RansomWatch is a ransomware leak site monitoring tool. It will scrape all of the entries on various ransomware leak sites, store the data in a SQLite database, and send notifications via Slack or Discord when a new victim shows up, or when a victim is removed. Note: RansomWatch isn't...

dmi-tcat

DMI TCAT The Digital Methods Initiative Twitter Capture and Analysis Toolset DMI-TCAT allows one to retrieve and collect tweets from Twitter and to analyze them in various ways. Installation You can find detailed installation instructions in the wiki Requirements Twitter API credentials these can...

osint-menace

OSINT Menace v0.1.0 – Beta: Works on My Machine Edition See CHANGELOG.md for this release's changes and beta scope. Open-Source Recon Console Built for Hunters, Not Browsers. OSINT Menace is a Defensive Thinking Project. OSINT Menace is a Python application for case-driven OSINT research, with a...

otto-support

Otto Support Customer support MCP server for AI coding assistants. One Go binary, tiered authentication, 19 tools across 4 role levels. Built with mcp-go. Quick Start Option A: Docker container recommended Run everything in an isolated container. Claude Code is pre-installed and the MCP server...

cloudsploit

CloudSploit de Aqua - Escaneos de Seguridad en la Nube Inicio Rápido Genérico $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker build . -t...

iac-scan-runner

IaC Scan Runner Servicio que escanea tu Infraestructura como Código en busca de vulnerabilidades comunes. Aspecto| Información ---|--- Nombre de la herramienta| IaC Scan Runner Imagen Docker| xscanner/runner Paquete PyPI| iac-scan-runner Documentación| docs Contáctanos| [email protected]...

fsociety

fsociety Ein modulares Penetrationstest-Framework Installation pip install fsociety Aktualisierung pip install --upgrade fsociety Verwendung usage: fsociety -h -i -s A Penetration Testing Framework optional arguments: -h, --help sho...

xsshunter-express

XSS Hunter Express Configurazione in 5 minuti e nessuna manutenzione richiesta Il modo più rapido per configurare XSS Hunter per testare e trovare vulnerabilità di cross-site scripting cieco. Configurazione Cinque minuti, cerca di non saltare troppo Requisiti docker e docker-compose installati Ho...

mig

MIG: Mozilla InvestiGator MIG es la plataforma de Mozilla para la investigación quirúrgica de endpoints remotos. ⚠️ Aviso de desuso ⚠️ Mozilla ya no mantiene el proyecto Mozilla InvestiGator MIG. Mozilla tampoco utiliza este código internamente. Eres bienvenido a usar este código tal cual, sin...

roundcube-cve-2025-49113

Install docker run --name ubuntu24 \ -p 9876:80 \ -v "$PWD/rcinstall.sh":/root/rcinstall.sh \ -it ubuntu:24.04 \ bash -c "chmod +x /root/rcinstall.sh && /root/rcinstall.sh && exec bash" POC Youtube Follow me @Linkdin Credit @ fearsoff-org...

CVE-2026-50025

Mousehole is a background service that updates a seedbox IP for MyAnonamouse (MAM) and provides a web management interface. Prior to version 0.4.05 , its HTTP/WebSocket management boundary is reachable without application-layer authentication or browser/LAN provenance checks. The root cause is th...

@openhop/server: Path Traversal in Flow ID File Operations

Path Traversal in Flow ID File Operations Summary @openhop/server passes unsanitized HTTP route parameters directly to path.join when constructing filesystem paths for flow YAML files. An unauthenticated attacker who can reach the server can read arbitrary .yaml files accessible to the OpenHop...

Watcher v3.5.3

AI-Powered Automated Cybersecurity Threat Detection Platform Watcher is a Django & React JS platform designed to discover and monitor emerging cybersecurity threats with AI-powered threat intelligence analysis. It can be deployed on webservers or quickly run via Docker. Watcher Capabilities Watch...