CVE-2026-107121

A flaw exists in the SMTP email configuration handling of the keycloak-services component. When the STARTTLS option is enabled, the system fails to strictly enforce encrypted connections, allowing a downgrade to unencrypted communication if the encryption request is tampered with. An attacker cap...

dnsdiag

DNS 测量、故障排除与安全审计工具集 你是否曾怀疑你的互联网服务提供商（ISP）在拦截你的 DNS 流量？ 你是否注意到 DNS 响应中出现异常行为，或被重定向到错误的地址，并怀疑 DNS 出了问题？我们提供一套工具，用于对你的 DNS 请求和响应进行基本审计，帮助你确保 DNS 按预期运行。 通过 dnsping，你可以测量任意 DNS 服务器对任意查询的响应时间。类似于常规的 ping 工具，dnsping 为 DNS 请求提供了类似的功能，帮助你监控服务器的响应能力。 你还可以使用 dnstraceroute 来追踪 DNS...

pypacker

Información general Este es Pypacker: la biblioteca de manipulación de paquetes de bajo nivel más rápida y simple para Python. Vea los ejemplos a continuación para ver qué puede hacer con ella. Si desea apoyar este proyecto puede a través de PayPal. Qué puedes hacer con Pypacker Crear paquetes...

SMBetray

SMBetray Version 1.0.0. This tool is a PoC to demonstrate the ability of an attacker to intercept and modify insecure SMB connections, as well as compromise some secured SMB connections if credentials are known. Background Released at Defcon26 at "SMBetray - Backdooring and Breaking Signatures" I...

PAPIMonitor

PAPIMonitor P ython API Monitor for Android apps is a python tool based on Frida for monitoring user-select APIs during the app execution. The app should be installed within an emulator already connected through ADB to the pc host. The user can choose to monitor a predefined list of APIs divided...

flare-fakenet-ng

| /\ | |/ / | \ | | | | | \ | |/ | | | / \ | ' /| | | | | | | || | | | | / /\ \ | | | | . | | | || . | | | | | | / | . | || |\ | | | | | |\ | || | ||// \|\|| || || || || D O C U M E N T A T I O N FakeNet-NG 3.5 es una herramienta de análisis de red dinámico de próxima generación para...

InterceptSuite

InterceptSuite !IMPORTANT This repository has been archived. The active InterceptSuite codebase is now closed-source and paid-only. See below for details. About InterceptSuite was created to solve a long-standing problem in security testing - intercepting and inspecting non-HTTP traffic. While...

macstealer

MacStealer: Bypass de Aislamiento de Clientes Wi-Fi 1. Introducción Este repositorio contiene MacStealer. Puede probar redes Wi-Fi para detectar bypasses de aislamiento de clientes CVE-2022-47522. Nuestro ataque puede interceptar robar tráfico hacia otros clientes en la capa MAC, incluso si los...

macstealer

MacStealer: Wi-Fi Client Isolation Bypass 1. Introduction This repo contains MacStealer. It can test Wi-Fi networks for client isolation bypasses CVE-2022-47522. Our attack can intercept steal traffic toward other clients at the MAC layer, even if clients are prevented from communicating with eac...

tirith

tirith Your browser would catch this. Your terminal won't. Website | Docs | SKILL.md | Changelog | Releases Independent open-source project, with hosting supported by the Vercel Open Source Program Spring 2026 Cohort. Can you spot the difference? curl -sSL https://install.example-cli.dev | bash...

stegowiper

stegoWiper：一种强大且灵活的攻击工具，用于破坏隐写恶意软件 过去10年中，许多威胁组织都采用了隐写恶意软件或其他基于隐写术的技术来攻击全球各行各业和地区的组织。一些例子包括：APT15/Vixen Panda、APT23/Tropic Trooper、APT29/Cozy Bear、APT32/OceanLotus、APT34/OilRig、APT37/ScarCruft、APT38/Lazarus Group、Duqu Group、Turla、Vawtrack、Powload、Lokibot、Ursnif、IceID等。 我们的研究（参见...

faraday_addon

About Faraday Addon is a simple addon for automate reporting vulnerabilities through the browsed to your own Faraday instance. Faraday Addon intercepts every single request from the browser, adding a functionality for accessing each one of them treating them as a vulnerability. In this way, a...

PowerGram

PowerGram PowerGram es un Bot de Telegram puro de PowerShell que puede ejecutarse en Windows, Linux o Mac OS. Para usarlo, solo necesitas PowerShell 4 o superior y una conexión a Internet. Toda la comunicación entre el Bot y los servidores de Telegram está cifrada con HTTPS, pero todas las...

MemITM

MemITM工具是什么？ MemITM（内存中间人）工具的开发目的是为了轻松拦截 Windows 进程内存中的“消息”。我们开发了许多自定义的内存拦截工具，用于在加密前捕获网络消息，或拦截 IPC 消息，并能够检查或修改它们以进行模糊测试。每个工具都高度定制、不通用，用 C/ASM 实现，且不易使用、维护和适配。 MemITM 工具旨在解决这些问题，其组成包括： 一个 IDA Python 脚本，生成“配置”文件，指示拦截点的位置和方式（相对地址、如何找到缓冲区及其大小、如何放置钩子等）； 一个 DLL 文件，将被注入到目标进程中，加载配置并放置钩子； 一个 DLL 文件注入器，将 DL...

tcpflow

TCPFLOW 1.5.0 Downloads directory: http://digitalcorpora.org/downloads/tcpflow/ Installation Most common GNU/Linux distributions ship tcpflow in their repositories. So on Debian/Ubuntu/etc you can say sudo apt-get install tcpflow and on Fedora/RedHat/CentOS/etc you can say sudo dnf install tcpflo...

atlantis-android

Atlantis Android Capture HTTP/HTTPS traffic from Android apps and send to Proxyman for debugging. Overview Atlantis Android is a companion library to Proxyman that allows you to capture and inspect network traffic from your Android applications without configuring a proxy or installing...

CVE-2025-63820

CVE-2025-63820 Submitter: Nicola Giuffrida Information Vendor: TOTOLINK Vendor's website: TOTOLINK Model: A720R Firmware version: V4.1.5cu.630B20250509 Firmware download address: TOTOLINK Vulnerability details When logging into the control panel, the username and password are sent in plain-text:...

hyperfox

Hyperfox Hyperfox is a security auditing tool that proxies and records HTTP and HTTPS traffic between two points. Installation You can install the latest version of hyperfox to /usr/local/bin with the following command requires admin privileges: curl -sL...

frida-interception-and-unpinning

Frida Mobile Interception Scripts !Funded by NLnet - NGI Zero...

-CVE-2024-3094-Vulnerability-Checker-Fixer-Public

Show Your Support If you find this script useful and it has helped you safeguard your systems against CVE-2024-3094, please consider giving it a star ⭐ . Starring this repository not only shows your support but also helps more people discover and benefit from our collective effort to improve...