cirro-azcli-ext

cirro-azcli-ext An Azure CLI extension that passively collects Azure resource data into a SQLite database compatible with Cirro https://github.com/bishopfox/cirro schema. It also logs all CLI invocations to a JSON-lines file. Hooks into knack events: EVENTINVOKERPOSTPARSEARGS — logs command...

SILENTCHAIN

SILENTCHAIN AI™ - Community Edition 🔗 ⛓️ 🔒 AI-Powered Passive Vulnerability Analysis for Burp Suite Intelligent • Silent • Adaptive • Comprehensive 🚀 Getting Started • 📖 Documentation • 🔧 Configuration • 📊 Benchmarks • ⬆️ Upgrade to Pro Note: This is the Community Edition. Commercial and...

cuckoo-droid

CuckooDroid - Automated Android Malware Analysis. Contributed By Check Point Software Technologies LTD. CuckooDroid is an extension of Cuckoo Sandbox the Open Source software for automating analysis of suspicious files, CuckooDroid brigs to cuckoo the capabilities of execution and analysis of...

extloader

extLoader A small toolkit for managing and deploying unpacked Chromium extensions. Find out more in the following blogpost: https://www.synacktiv.com/en/publications/the-phantom-extension-backdooring-chrome-through-uncharted-pathways Installation Direct install pipx pipx install . extloader --hel...

browser-xpi-malware-scanner

XPI Analyzer — Firefox Extension Security Scanner A command-line tool that analyzes Firefox extension files .xpi for signs of malware, obfuscation, hidden payloads, steganography, and other techniques used to sneak malicious code past extension review teams. What It Does extension-scanner.py tear...

should-i-trust

should-i-trust Summary should-i-trust is a tool to evaluate OSINT signals for a domain. Requirements should-i-trust requires API keys from the following sources: Censys.io - Free for for first 250/quries/month VirusTotal - Free GrayHatWarFare - Free with limited results Use Case You're part of a...

CVE-2026-116773

A flaw was found in russh. An unbounded memory allocation issue allows a malicious Secure Shell SSH server to cause a Denial of Service DoS on connecting clients. By repeatedly sending crafted pre-authentication extension packets, the server forces the client to store an unlimited number of...

mitaka

Mitaka Mitaka is a browser extension that makes your OSINT Open Source Intelligence search & scan easier. Key features: Auto IoC indicators of compromise selection with refanging. E.g. example.com to example.com, testatexample.com to [email protected], hxxp://example.com to http://example.co...

pgaudit

pgAudit Open Source PostgreSQL Audit Logging Introduction The PostgreSQL Audit Extension pgAudit provides detailed session and/or object audit logging via the standard PostgreSQL logging facility. The goal of pgAudit is to provide PostgreSQL users with capability to produce audit logs often...

dnssearch

dnssearch This software is a subdomain enumeration tool. Purpose dnssearch takes an input domain -domain parameter and a wordlist -wordlist parameter , it will then perform concurrent DNS requests using the lines of the wordlist as sub domains eventually bruteforcing every sub domain available on...

replica

REPLICA TAME THE DRAGON ✨Features ⚡ Disassemble missed instructions - Define code that Ghidra's auto analysis missed ⚡ Detect and fix missed functions - Define functions that Ghidra's auto analysis missed ⚡ Fix 'undefinedN' datatypes - Enhance Disassembly and Decompilation by fixing 'undefinedN'...

CVE-2024-9264-RCE-Exploit

CVE-2024-9264-RCE-Exploit in Grafana via SQL Expressions Description Proof Of Concept for Remote Code Execution in Grafana CVE-2024-9264 This repository contains a Python script that exploits a Remote Code Execution RCE vulnerability in Grafana's SQL Expressions feature. By leveraging insufficien...

on-device-browser-agent

Local Browser - On-Device AI Web Automation Launching support for runanywhere-web-sdk soon in our main repo: please go check it out: https://github.com/RunanywhereAI/runanywhere-sdks A Chrome extension that uses WebLLM to run AI-powered web automation entirely on-device. No cloud APIs, no API key...

azbelt

azbelt Standalone DLL and sliver extension for enumerating Azure related credentials, primarily on AAD joined machines Modules aadjoin - Gets info about machine AAD status via NetGetAadJoinInformation credman - Gets credentials from Credential Manager env - Looks for Azure/AAD specific...

Ubuntu-0day

Ubuntu16.04-0day Vulnerability scope: all 4.4 ubuntu aws instances are vulnerable Jann Horn discovered that in some cases, the Berkeley Packet Filter BPF in the Linux kernel incorrectly performed sign extension in checkaluop. A local attacker can use this to escalate privileges on the system and...

DotGit

DotGit An extension for checking if .git is exposed in visited websites Features Check if a .git/.svn/.hg folder exists for each site you visit Check if a .env file exists for each site you visit Check if a .DSStore file exists for each site you visit Check if the site is open source github/gitla...

Cookie-Swapper

Cookie Swapper Burp Suite extension that auto-replaces cookies and headers in requests. Stop wasting time copy-pasting session tokens into every request. Why? You got a retest, a needs more info bug, or just expired sessions. You need to replay dozens of requests from HTTP History and Repeater bu...

Needle

Needle Chrome extension for Instant access to your bug bounty submission dashboard of various platforms + publicly disclosed reports + bugbountytip Needle is the only chrome extension you may need to have one click access to your bug submissions across various platforms. No need to create any...

SwishDbgExt

SwishDbgExt SwishDbgExt is a Microsoft WinDbg debugging extension that expands the set of available commands by Microsoft WinDbg, but also fixes and improves existing commands. This extension has been developed by Matt Suiche @msuiche – feel free to reach out on [email protected] ask for mor...

AMSIext

AMSIext AMSIext is a Firefox and Chrome plugin that allows you to send any data stream from the browser to AMSI. AMSI is the way to communicate RAM memory with Windows Defender or any other endpoint security system. This means that while browsing the web, AMSIext will alert you to malicious...