MalQR.github.io

MalQR About MalQR is a collection of malicious QR codes and barcodes you can use to test the security of your scanners. It gives you the ability to conduct such tests with easiness : you just need to have a smartphone, a tablet or a laptop with an internet connection and browse MalQR.shielder.com...

browser-identity-attacks-matrix

Browser & Identity Attacks Matrix This repository is a collection of browser and identity attack techniques covering SaaS apps, browser-based attacks, identity providers, and phishing. It is intended to be a resource for security researchers, red/blue teams, and penetration testers to learn about...

rakkess

rakkess Review Access - kubectl plugin to show an access matrix for server resources Intro Have you ever wondered what access rights you have on a provided kubernetes cluster? For single resources you can use kubectl auth can-i list deployments, but maybe you are looking for a complete overview?...

agartha

Agartha Payload Injection LFI, RCE, SQLi, with optional BCheck, Auth Issues Access Matrix, HTTP 403, Copy as JavaScript, and Bambdas Agartha, specializes in advance payload generation and access control assessment. It adeptly identifies vulnerabilities related to injection attacks, and...

Grid-Mobile

Grid - Encrypted Location Sharing Be Hard to Track. mygrid.app Grid is a secure, end-to-end encrypted E2EE location sharing application integrated with the Matrix Protocol. Built using Flutter, Grid provides a privacy-focused solution for sharing your location with trusted contacts. Features...

Ransomware-Tool-Matrix

Ransomware Tool Matrix This repository contains a list of which tools each ransomware gang or extortionist gang uses As defenders, we should exploit the fact that many of the tools used by these cybercriminals are often reused We can threat hunt, deploy detections, and block these tools to...

graphql-threat-matrix

GraphQL Threat Matrix Why graphql-threat-matrix? graphql-threat-matrix was built for bug bounty hunters, security researchers and hackers to assist with uncovering vulnerabilities across multiple GraphQL implementations. The differences in how GraphQL implementations interpret and conform to the...

Risk-Analysis-Editor

Risk Analysis Editor RAE English · Français Standalone tool for building and visualizing risk matrices — inherent gross risk and residual net risk — with an open, documented file format, .rae.json. ▶️ Open the app · 📖 User guide · 🎬 Video tutorials · ⬇️ Download No installation: the tool runs...

CVE-2024-50485

CVE-2024-50485 Exam Matrix = 1.5 - Unauthenticated Privilege Escalation Description: The Exam Matrix plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.5. This is due to the plugin not properly restricting functionality that makes it possible for...

matrix-rs

Windows Kernel Blue Pill Type-2 Hypervisor in Rust Codename: Matrix Blog: https://memn0ps.github.io/hypervisors-for-memory-introspection-and-reverse-engineering/ A lightweight, memory-safe, and blazingly fast Rust-based type-2 research hypervisor with hooks for Intel VT-x, focused on studying the...

defense-matrix

Defense Matrix Archived Project This project was an attempt to automate various aspects of Linux security auditing and hardening. As time passed, I K4YT3X found many of the methodologies used in this project to be unideal and obsolete. Therefore, I recommend not continuing using this project but...

CVE-2026-101896

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.32, 21.2.24, and 22.2.0, the @angular/router URL parser stores numeric matrix parameter names and numeric outlet names as properties on initially empty...

CVE-2026-101896 Angular: Denial of Service via Numeric URL Matrix Parameters in Server-Side Rendering (SSR)

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.32, 21.2.24, and 22.2.0, the @angular/router URL parser stores numeric matrix parameter names and numeric outlet names as properties on initially empty...

CVE-2026-101896

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.32, 21.2.24, and 22.2.0, the @angular/router URL parser stores numeric matrix parameter names and numeric outlet names as properties on initially empty...

CVE-2026-101896

The @angular/router component is vulnerable to a Denial of Service (DoS) attack when Server-Side Rendering (SSR) is enabled on Node.js (V8). The root cause is the inefficient handling of numeric matrix parameter names and numeric outlet names in URL paths. When these are parsed, V8 interprets the...

OPENSUSE-SU-2026:12133-1 matrix-synapse-1.163.0-1.1 on GA media

These are all security issues fixed in the matrix-synapse-1.163.0-1.1 package on the GA media of openSUSE Tumbleweed...

synapse

========================================================================= Synapse |support| |development| |documentation| |license| |pypi| |python| Synapse is now actively maintained at element-hq/synapse Synapse is an open-source Matrix homeserver developed from 2019 through 2023 as part of the...

graphw00f

Créditos a Nick Aleks por el logo! graphw00f - Fingerprinting de servidores GraphQL Tabla de Contenidos ¿Cómo funciona? Detecciones Matriz de Amenazas GraphQL Requisitos previos Instalación Configuración Ejemplo de uso Fingerprinting de GraphQL Detección y Fingerprinting de GraphQL Soporte e...

rakkess

rakkess Revisar Acceso - plugin de kubectl para mostrar una matriz de acceso para recursos del servidor Introducción ¿Alguna vez te has preguntado qué derechos de acceso tienes en un clúster de Kubernetes proporcionado? Para recursos individuales puedes usar kubectl auth can-i list deployments,...

graphql-threat-matrix

GraphQL Threat Matrix ¿Por qué graphql-threat-matrix? graphql-threat-matrix fue creado para cazadores de recompensas, investigadores de seguridad y hackers, con el fin de ayudar a descubrir vulnerabilidades en múltiples implementaciones de GraphQL. Las diferencias en cómo las implementaciones de...