1248 matches found
decoder-plus-plus
Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...
PyIris
The project is currently undergoing a major rewrite for version 3, the current version, version 2 will be made obsolete. See for more info. The PyIris Project Updates coming soon refer to ROADMAP.md The PyIris project is a modular remote access trojan toolkit written completely in python. It allo...
jwt-hack
JSON Web Token Hack Toolkit A high-performance toolkit for testing, analyzing and attacking JSON Web Tokens. Installation Cargo cargo install jwt-hack Homebrew brew install jwt-hack Snapcraft Ubuntu sudo snap install jwt-hack Chocolatey Windows choco install jwt-hack From source git clone...
pythem
pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...
flask-session-cookie-manager
Flask Session Cookie Decoder/Encoder Original author : Wilson Sumanang Fixes and improvements author : Alexandre ZANNI Imported from saruberoz.github.io Depencencies Python 2 or Python 3 itsdangerous Flask Installation Package BlackArch Linux pacman -S flask-session-cookie-manager3,2 Git ArchLinu...
xssor2
XSS'OR XSS'OR - Hack with JavaScript. ONLINE You can have a try: https://xssor.io and http://xssor.io/ It contains three major modules: Encode/Decode, Codz, Probe. INSTALL Python 3 with Django 3.0. or Python 2 with Django 1.11. git clone https://github.com/evilcos/xssor2 or download directly cd...
the-book-of-secret-knowledge
"Knowledge is powerful, be careful how you use it! " A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools, and more. š What is it? This repository is a collection of various materials and tools that I use every day in my work. It contains a lot of useful...
Burp-Encode-IP
About This extension will encode an IP address into a bunch of less known encoding techniques. This technique is focused on testing vulnerabilities such as SSRF Server-Side Request Forgery, Open Redirect or RFI Remote File Inclusion. TL;DR Easy Install If you have Burp Pro it is possible to insta...
CVE-2021-3129
CVE-2021-3129 Generate a phar package with custom commands: php -d'phar.readonly=0' ./phpggc monolog/rce1 system "cat /etc/passwd" --phar phar -o php://output | base64 -w0 php -a enter the php command line environment $fp = fopen'php://output', 'w'; streamfilterappend$fp,...
UBUNTU-CVE-2026-124987
A vulnerability has been found in mikefarah yq up to 4.53.3. This affects the function Encode of the file pkg/yqlib/encoderproperties.go. Such manipulation leads to escaping of output. It is possible to launch the attack remotely. The pull request to fix this issue awaits acceptance...
CVE-2026-124987
A vulnerability has been found in mikefarah yq up to 4.53.3. This affects the function Encode of the file pkg/yqlib/encoderproperties.go. Such manipulation leads to escaping of output. It is possible to launch the attack remotely. The pull request to fix this issue awaits acceptance...
EUVD-2026-120397
A vulnerability has been found in mikefarah yq up to 4.53.3. This affects the function Encode of the file pkg/yqlib/encoderproperties.go. Such manipulation leads to escaping of output. It is possible to launch the attack remotely. The pull request to fix this issue awaits acceptance...
CVE-2026-124987
A vulnerability exists in mikefarah yq versions up to 4.53.3 . The issue is located within the Encode function of the file pkg/yqlib/encoder_properties.go. Improper handling in this component leads to escaping of output , which can be exploited remotely . A pull request to address this issue has ...
CVE-2026-124987 mikefarah yq encoder_properties.go Encode escape output
A vulnerability has been found in mikefarah yq up to 4.53.3. This affects the function Encode of the file pkg/yqlib/encoderproperties.go. Such manipulation leads to escaping of output. It is possible to launch the attack remotely. The pull request to fix this issue awaits acceptance...
CVE-2026-124987 mikefarah yq encoder_properties.go Encode escape output
A vulnerability has been found in mikefarah yq up to 4.53.3. This affects the function Encode of the file pkg/yqlib/encoderproperties.go. Such manipulation leads to escaping of output. It is possible to launch the attack remotely. The pull request to fix this issue awaits acceptance...
PT-2026-141057
FFmpeg through 9.0.2 contains an out-of-bounds memory access vulnerability in the encode frame function of libavcodec/huffyuvenc.c, because encode init never validates minimum frame dimensions for the median predictor. Attackers can supply a tiny video, such as a 2-pixel-wide or 1-2-pixel-tall...
PT-2026-141089
FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the SGI encoder's encode frame in libavcodec/sgienc.c, where unsigned size variables mis-handle negative linesize frames. Attackers can supply a video whose display matrix triggers autorotate vflip, so transcoding to SGI images...
PT-2026-141023
FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in adpcm encode frame in libavcodec/adpcmenc.c that leaks heap bytes when encoding mono ADPCM MS audio with trellis enabled. Attackers submitting audio to a service using this encoding receive output packets where abou...
PT-2026-141101
A vulnerability has been found in mikefarah yq up to 4.53.3. This affects the function Encode of the file pkg/yqlib/encoder properties.go. Such manipulation leads to escaping of output. It is possible to launch the attack remotely. The pull request to fix this issue awaits acceptance...
PT-2026-141028
FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/libx265.c because libx265 encode frame never frees the rpu.payload allocated by ff dovi rpu generate. Attackers can supply crafted Dolby Vision HEVC or AV1 files that leak one RPU allocation per encoded frame during libx265...