Spring0DayCoreExploit

Spring Core RCE - CVE-2022-22963 Following Spring Cloud, on March 29, another heavyweight vulnerability of Spring broke out on the Internet: Spring Core RCE The Circulating coding poc: The exploit has been uploaded asexp.py The official Spring patch is also in active production Patch Links in...

awesome-ai-security

Awesome AI Security A curated list of awesome AI security related frameworks, standards, learning resources and open source tools. If you want to contribute, create a PR or contact me @ottosulin. Table of Contents Learning Resources Reading & Guides Courses, Labs & CTFs Podcasts Governance & Risk...

G3_Frameworks_av_CVE-2024-0023

This repository does not have a README...

dawnscanner

Dawnscanner - The raising security scanner for ruby web applications dawn is a source code scanner designed to review your web applications for security issues. The tool is able to scan web applications written in Ruby and it supports all major MVC Model View Controller frameworks, out of the box...

frameworks_av-r33_CVE-2022-20413

This repository does not have a README...

Payload-and-Polyglot-Lists

Payload & Polyglot Lists Found a payload that doesn't work? Please open an issue with the payload, target context, and what you expected to happen. Pull requests with fixes or new payloads are always welcome. Research is ongoing. This project is under active development and will be updated...

C4

C4 C yberdelia, a C ollection of C ommand and C ontrol frameworks Table of Contents C4 Table of Contents What is this? Cyberdelia? What is a C2 framework? Why create this repo? Format Plan for this repo Github Specific content Contribute to project Resources used What is this? This is a very flui...

social-analyzer

Social Analyzer - API, CLI, and Web App for analyzing & finding a person's profile across +1000 social media \ websites. It includes different analysis and detection modules, and you can choose which modules to use during the investigation process. The detection modules utilize a rating mechanism...

commix

English • Ελληνικά • Español • Français • فارسی • Bahasa Indonesia • Türkçe Commix short for command injection exploiter is an open source penetration testing tool, written by Anastasios Stasinopoulos @ancst, that automates the detection and exploitation of command and code injection...

cve-2015-6612poc-forM

cve-2015-6612 POC for M reported by me and @WenXu from Keen put this under ANDROIDSRCROOT/frameworks/av/media/decrytpoc/ and cd into it && calling mm...

cookiemonster

🍪 CookieMonster CookieMonster is a command-line tool and API for decoding and modifying vulnerable session cookies from several different frameworks. It is designed to run in automation pipelines which must be able to efficiently process a large amount of these cookies to quickly discover...

kiterunner

Kiterunner Introduction For the longest of times, content discovery has been focused on finding files and folders. While this approach is effective for legacy web servers that host static files or respond with 3xx’s upon a partial path, it is no longer effective for modern web applications,...

pentagi

PentAGI P enetration testing A rtificial G eneral I ntelligence Join the Community! Connect with security researchers, AI enthusiasts, and fellow ethical hackers. Get support, share insights, and stay updated with the latest PentAGI developments. ⠀ Table of Contents Overview Features Architecture...

Digital-Forensics-Guide

Digital Forensics Guide A guide covering Digital Forensics the applications, libraries and tools that will make you a better and more efficient with Digital Forensics development. Note: You can easily convert this markdown file to a PDF inVSCode using this handy extension Markdown PDF. Table of...

route-detect

route-detect Find authentication authn and authorization authz security bugs in web application routes: Routes fromkoel streaming server Web application HTTP route authn and authz bugs are some of the most common security issues found today. These industry standard resources highlight the severit...

awesome-ctf

멋진 CTF 선별된 Capture The Flag CTF 프레임워크, 라이브러리, 리소스, 소프트웨어 및 튜토리얼 목록입니다. 이 목록은 초보자와 숙련된 CTF 플레이어 모두가 CTF 관련 모든 것을 한 곳에서 찾을 수 있도록 돕기 위해 만들어졌습니다. 기여하기 먼저 기여 가이드라인을 간단히 살펴보세요. 여기에 없는 도구를 알고 있다면, 풀 리퀘스트를 열어 주세요. 왜? CTF에 사용되는 도구들을 모으고 모두 기억하는 데는 시간이 걸립니다. 이 저장소는 흩어져 있는 이러한 도구들을 한 곳에 보관하는 데 도움을 줍니다. 목차 멋...

frameworks_native_AOSP-10_r33_CVE-2023-21094

This repository does not have a README...

dawnscanner

Dawnscanner - Ruby 웹 애플리케이션을 위한 떠오르는 보안 스캐너 dawn은 웹 애플리케이션의 보안 문제를 검토하기 위해 설계된 소스 코드 스캐너입니다. 이 도구는 Ruby로 작성된 웹 애플리케이션을 스캔할 수 있으며, 기본적으로 모든 주요 MVCModel View Controller 프레임워크를 지원합니다: Ruby on Rails Sinatra Padrino dawn 버전 2.0은 지식 베이스에 680개 이상의 보안 검사를 탑재하고 있으며, NIST의 National Vulnerability Database에서...

Awesome-MoAI-Security

Awesome Mobile On-Device AI Security SoK: Attack and Defense Landscape of Mobile On-device AI Systems Mobile on-device AI systems execute AI models locally through ML frameworks such as LiteRT/TFLite , Core ML , ExecuTorch , ONNX , and hardware-backed accelerators. This repo tracks the security...

Spring Framework Path Traversal in Functional Web Frameworks

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application...