ff4j__ff4j_CVE-2022-44262_1-8-13

✨✨✨ FF4J - Feature Flipping for Java ✨✨✨ Codacy Badge FF4j, is an implementation of the Feature Toggle pattern. 🤘Features Feature Toggle: Enable. and disable features at runtime - no deployments. In your code implement multiple paths protected by dynamic predicates if/then/else. Role-based...

nahsra__antisamy_CVE-2022-29577_1-6-6-1

AntiSamy A library for performing fast, configurable cleansing of HTML coming from untrusted sources. Supports Java 7+. Another way of saying that could be: It's an API that helps you make sure that clients don't supply malicious cargo code in the HTML they supply for their profile, comments, etc...

nahsra__antisamy_CVE-2017-14735_1-5-6

AntiSamy A library for performing fast, configurable cleansing of HTML coming from untrusted sources. Supports Java 8+. Another way of saying that could be: It's an API that helps you make sure that clients don't supply malicious cargo code in the HTML they supply for their profile, comments, etc...

DInvoke

DInvoke Dynamic replacement for PInvoke on Windows. DInvoke contains powerful primitives that may be combined intelligently to dynamically invoke unmanaged code from disk or from memory with careful precision. This may be used for many purposes such as PE parsing, intelligent dynamic API...

Driver-SoulExtraction

SoulExtraction SoulExtraction is a windows driver library for extracting cert information in windows drivers Compile Visual Studio 2022 & WDK10 llvm-msvc link Credit linux BackEngineerLab https://git.back.engineering/gmh5225/Driver-SoulExtraction Some discussions on UnknownCheats...

clroxide

ClrOxide ClrOxide is a rust library that allows you to host the CLR and dynamically execute dotnet binaries. I wanted to call it Kepler for no particular reason, but there's already a package named kepler in cargo. : I have been working on hosting CLR with rust on and off for 2 years now, and...

qscan

Quick Network Scanner Quick Network Scanner project includes: qscan: a rust library for asynchronous network ports scanning see README. qsc: a command line utility built on top of qscan library for quick network scanning activities see README. NOTE: in order to properly use the library and the...

ail-typo-squatting

ail-typo-squatting ail-typo-squatting è una libreria Python per generare un elenco di potenziali domini typosquatting con un motore di permutazione dei nomi di dominio, per alimentare AIL e altri sistemi. Lo strumento può essere utilizzato come strumento autonomo o per alimentare altri sistemi. S...

Yordam-Kutuphane-Otomasyonunda-Coklu-HTML-Enjeksiyonu

Yordam-Kütüphane-Otomasyonunda-Çoklu-HTML-Enjeksiyonu CVE-2026-77818 · CVSS 3.1 6.1 Orta · Siber Güvenlik Başkanlığı · Yayımlanma 2026-09-04 · TR-26-1011 Durum: Zafiyetler v22.2 sürümünde giderilmiştir. Etkilenen kurulumların v22.2 veya üzerine yükseltilmesi gerekmektedir. Genel Bakış Yordam...

adversary_emulation_library

Adversary Emulation Library In collaboration with Center Participants, the MITRE Center for Threat-Informed Defense Center maintains a library of adversary emulation plans to allow organizations to evaluate their defensive capabilities against the real-world threats they face. Emulation plans are...

dpapi-ng

dpaping - Python DPAPI-NG De-/Encryption Library Library for DPAPI NG, also known as CNG DPAPI, de- and encryption in Python. It is designed to replicate the behaviour of NCryptUnprotectSecret and NCryptProtectSecret. This can be used on non-Windows hosts to de-/encrypt DPAPI NG protected secrets...

gofireprox

GoFireProx This is a port of FireProx to Golang Installation go install -v github.com/mr-pmillz/gofireprox/cmd/gofireprox@latest gofireprox as library Integrate gofireprox with other go programs package main import "fmt" "github.com/mr-pmillz/gofireprox" func main region := "us-east-1" fpClient,...

GetLAPSPassword

GetLAPSPassword A feeble attempt at writing a LAPS dumping tool that supports both NTLM and Kerberos auth using the impacket library. Initial structure of this tool was taken from the impacket example GetADUsers.py https://github.com/fortra/impacket/raw/master/examples/GetADUsers.py and the LDAP...

CVE-2026-25645

CVE-2026-25645 Insecure Temporary File Reuse in requests.utils.extractzippedpaths Executive Summary A vulnerability was identified in the requests library Python within the public utility function requests.utils.extractzippedpaths. The function utilizes a predictable, non-unique filename when...

cve-2025-24071

CVE-2025-24054 and CVE-2025-24071 - NTLM Hash Leak via .library-ms Exploit This PoC demonstrates the exploitation of the NTLM hash leak via .library-ms files on unpatched Windows systems March 2025 Patch Tuesday. ⚠️ This is for educational and research purposes only. Do not use this on production...

CorruptQueryAccessWorkaround

CorruptQueryAccessWorkaround: Query '' is corrupt The latest workaround for the Query is corrupt error introduced with CVE-2019-1402 in MS Access. There are other workarounds out there that need to be applied on an administrative level, e.g. by uninstalling the erroneous update. In contrast to...

cve-2018-6574-exploit

cve-2018-6574-exploit gcc -shared -o attack.so -fPIC attack.c go get github.com/zerbaliy3v/cve-2018-6574-exploit...

Malicious Package

Overview media-manager5 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @galicia-toolkit-nestjs/paas is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview asepxyznew is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...