powerg-tools

PowerG Analysis Tools A collection of tools for reverse engineering and interacting with the PowerG radio protocol. This release accompanies the research James Chambers and Sultan Qasim Khan presented at REcon and hardwear.io. Please see the presentation recording and slides for more information:...

Vision-MSI-Thermal-Control

Vision MSI Thermal Control MSI Modern 15H AI C1MG-096IT Linux thermal management - Reverse engineered EC control with fan profiles and battery threshold 🎯 Purpose of this Project This application was born out of necessity for MSI laptop users on Linux. The journey began when I discovered that...

CVE-2026-94214

A vulnerability was found in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717. This affects an unknown part of the file /login.html of the component Management Service. Performing a manipulation of the argument Host results in open redirect. It is possible to...

x86-cpp-reversing-skill

x86-cpp-reversing Una habilidad de Claude Code para la ingeniería inversa de binarios x86 IA-32 little-endian de 32 bits y desensamblado compilado desde C++. Recupera diseños de clases, vtables, despacho virtual y jerarquías de RTTI/herencia desde binarios ELF o PE, y cubre los flujos de trabajo...

Fracture-

Fracture 🐈‍⬛ Suite WIP para ingeniería inversa de aplicaciones JVM :3 ¡¡¡Actualmente tiene!!! Enganchar registernatives con facilidad ^^...

CVE-2026-94216

An open redirect vulnerability affects ST Engineering iDirect Evolution and Velocity WebServer Evolution (up to build 20260717). The flaw resides in the authorize function of the file /usr/sbin/webserver, specifically in the HTTP Header Handler component. Manipulating the Success argument allows ...

EUVD-2026-83907

A vulnerability was determined in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717. This vulnerability affects the function authorize of the file /usr/sbin/webserver of the component HTTP Header Handler. Executing a manipulation of the argument Success can lead to...

CVE-2026-94216 ST Engineering iDirect Evolution/Velocity WebServer Evolution HTTP Header webserver authorize redirect

A vulnerability was determined in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717. This vulnerability affects the function authorize of the file /usr/sbin/webserver of the component HTTP Header Handler. Executing a manipulation of the argument Success can lead to...

CVE-2026-94214 ST Engineering iDirect Evolution/Velocity WebServer Evolution Management Service login.html redirect

A vulnerability was found in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717. This affects an unknown part of the file /login.html of the component Management Service. Performing a manipulation of the argument Host results in open redirect. It is possible to...

EUVD-2026-83902

A vulnerability was found in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717. This affects an unknown part of the file /login.html of the component Management Service. Performing a manipulation of the argument Host results in open redirect. It is possible to...

CVE-2026-94214

ST Engineering iDirect Evolution and Velocity WebServer Evolution (versions up to 20260717 ) contain an open redirect vulnerability in the Management Service component, specifically in the /login.html file. The root cause is unsanitized manipulation of the Host argument, allowing a remote attacke...

SOC-Analyst-Portfolio

🛡️ Allen Ace SOC Analyst | Threat Hunter | Detection Engineer Detect • Investigate • Respond • Defend Welcome This portfolio documents my hands-on cybersecurity journey through practical investigations, enterprise lab environments, detection engineering, digital forensics, malware analysis, threat...

CVE-2024-0258

CVE-2024-0258 Technical analysis and public documentation related to CVE-2024-0258 , an Apple libxpc vulnerability. This repository contains research notes, technical observations, reverse engineering findings, and public references intended to document the vulnerability and its security...

xz-backdoor-research

CVE-2024-3094 Research Toolkit By Nikolaos Natsopoulos , IAM Consultant Interactive browser-based tool accompanying the research report: "CVE-2024-3094: Supply Chain Compromise via Social Engineering and Build System Manipulation in XZ Utils" 10.5281/zenodo.20700609 About In March 2024, a backdoo...

Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors

The North Korean threat actor known as Jade Sleet has been attributed to the compromise of an India-based "much smaller organization" in the information technology IT services industry, once again highlighting how the adversary continues to target developers to breach target networks. Cybersecuri...

super-trouper

Super Trouper Un servidor MCP para el kit de ingeniería inversa Frida. Super Trouper ejecuta un servidor MCP sobre STDIO que expone las capacidades de Frida como herramientas para agentes de programación. Puede conectarse a dispositivos locales, USB y remotos; inspeccionar aplicaciones y procesos...

CVE-2026-94214: URL Redirection to Untrusted Site

A vulnerability was found in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717. This affects an unknown part of the file /login.html of the component Management Service. Performing a manipulation of the argument Host results in open redirect. It is possible to...

CVE-2026-94216: URL Redirection to Untrusted Site

A vulnerability was determined in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717. This vulnerability affects the function authorize of the file /usr/sbin/webserver of the component HTTP Header Handler. Executing a manipulation of the argument Success can lead to...

IDAPython-Malware-Scripts

IDAPython-Malware-Scripts I have included the scripts that I use to automate analysis. Feel free to use them and submit issues/PRs if you think I miss anything or make mistakes!...

awesome-ios-security

Awesome iOS Security A curated list of awesome iOS application security resources. A collection of awesome tools, books, courses, blog posts, and cool stuff about iOS Application Security and Penetration Testing. Contents Tools Reverse Engineering Tools Static Analysis Tools Dynamic Analysis Tool...