pwndoc

PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...

Security-101

🌐 Multi-Language Support Supported via GitHub Action Automated & Always Up-to-Date Arabic | Bengali | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |...

hacktricks-cloud

HackTricks Cloud Hacktricks logos & motion designed by @ppieranacho .1 Run HackTricks Cloud Locally The workflow below follows Git's documented clone, checkout, and pull operations and the repository's published language branches and container setup.238910 root@kitploit: Download latest version o...

msmap

MSMAP MsmapはメモリWebShellジェネレーターです。さまざまなコンテナ、コンポーネント、エンコーダー、 WebShell / Proxy / Killer 、および管理クライアントと互換性があります。简体中文 アイデアの背景 I, アイデアの背景 II, アイデアの背景 III 機能 WIP 機能 動的メニュー 自動コンパイル スクリプト生成 ライトモード...

serverless

网站 • 文档 • X / Twitter • 社区 Slack • 论坛 The Serverless Framework – 使您可以轻松使用 AWS Lambda 和其他托管云服务，构建能够自动扩展、空闲时零成本且维护成本极低的应用。 Serverless Framework 是一个命令行工具，采用易用的 YAML 语法，既部署您的代码，也部署支持众多无服务器应用场景（如 API、前端、数据管道和定时任务）所需的云基础设施。它是一个多语言框架，支持 Node.js、Typescript、Python、Go、Java 等。它还通过 1,000...

sqlmap-tamper-api

SQLmap Tamper-API SQLmap用の改変スクリプト（tamper script）のAPIです。お好みのプログラミング言語を使って改変スクリプトを記述できます。 このAPIは、SQLmapが改変スクリプトの記述にPythonしか受け付けないという制限を解決します。 仕組み taper-api.py スクリプトは、ペイロード と kwargs をJSON形式（"payload": "", "kwargs": "headers": ）で外部の改変スクリプトの標準入力（STDIN）に引数として送信します。...

Graffiti

NOTE : Never upload payloads to online checkers Graffiti is a tool to generate obfuscated oneliners to aid in penetration testing situations. Graffiti accepts the following languages for encoding: Python Perl Batch Powershell PHP Bash Graffiti will also accept a language that is not currently on...

wrongsecrets-binaries

wrongsecrets-binaries 这是 OWASP WrongSecrets 的配套仓库。 我们在此构建包含在官方项目中的二进制文件。 想要添加与二进制文件中隐藏机密相关的挑战？请在 WrongSecrets issues 中提交工单。 想要修复你在某个二进制文件中发现的问题：请在此处提交工单或 PR。 CTF 支持 本仓库现已支持生成所有二进制文件的 CTF（Capture The Flag）版本 ，并带有随机化机密。CTF 版本使用 this is the secret in : 格式，而非静态机密，使其适用于 CTF 竞赛。 自动生成 ：quickbuild.sh 和...

EasyOCR

EasyOCR 即用型 OCR，支持 80+ 种语言以及所有主流书写文字，包括：拉丁文、中文、阿拉伯文、天城文、西里尔文等。 在我们的网站上试用 Demo 已通过 Gradio 集成到 Huggingface Spaces 🤗。试试 Web Demo： 最新动态 2024 年 9 月 24 日 - 版本 1.7.2 修复多项兼容性问题 阅读全部版本说明 后续计划 手写文本支持 示例 安装 使用 pip 安装 最新稳定版： root@kitploit: pip install easyocr 最新开发版： root@kitploit: pip install...

catphish

CATPHISH Generate similar-looking domains for phishing attacks. Check expired domains and their categorized domain status to evade proxy categorization. Whitelisted domains are perfect for your C2 servers. Perfect for Red Team engagements. Installation root@kitploit: bundle install Current...

vader

VADER：用于漏洞评估、检测、解释和修复的人工评估基准 官方 GitHub 仓库：https://github.com/AfterQuery/vader Hugging Face 数据集：https://huggingface.co/datasets/AfterQuery/vader VADER 是一个人工评估基准 ，旨在衡量大型语言模型（LLMs）处理真实世界软件漏洞的能力。它包含 174 个真实世界漏洞案例 （从开源仓库中精选），涵盖四项任务： 漏洞识别与分类（CWE） 根因解释 补丁（修复） 测试计划生成 这些案例涵盖 15+ 编程语言 （例如...

gha-lab-d14c91f1bb

自动化研究产物 — 非上游项目。 本仓库是由自动化工具链为拉瓦尔大学（Université Laval）硕士论文构建的一次性实验环境，用于复现已发表的 GitHub Actions 工作流漏洞。它是 RooCodeInc/Roo-Code 在提交 08a825f9bb0086a88cff5a79b9af4731bba7d076（2025-09-04）时的逐字快照，依据该项目自身的许可证重新分发，该许可证文件已原样包含在本快照中。 上游项目未 参与其中，也从未 成为攻击目标，此处研究的漏洞已公开。本仓库中的每个密钥和变量均为随机生成的虚拟值——不存在任何真实凭据。操作引用和运行器镜像均固定...

Joern 4.0.528

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

[SECURITY] Fedora 44 Update: valkey-9.0.3-1.fc44

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

[SECURITY] Fedora 41 Update: valkey-8.0.6-1.fc41

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

EUVD-2020-2946

Malware in sbrugna...

Binary Vulnerability in Unisys UOS Desktop Professional Edition by Unisys Software Technology Co.

Unisys UOS Desktop Professional Edition is a commercial desktop operating system based on Linux kernel, which supports all CPU architectures including AMD64, ARM64, LoongArch64, SW64 and other mainstream architectures, and is suitable for domestic CPU platforms e.g., Haikuang, Zhaoshen, etc.. The...

Darcula Adds GenAI to Phishing Toolkit, Lowering the Barrier for Cybercriminals

The threat actors behind the Darcula phishing-as-a-service PhaaS platform have released new updates to their cybercrime suite with generative artificial intelligence GenAI capabilities. "This addition lowers the technical barrier for creating phishing pages, enabling less tech-savvy criminals to...

[SECURITY] Fedora 37 Update: phpMyAdmin-5.2.1-1.fc37

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently it can create and drop databases, create/drop/alter tables, delete/edit/add fields, execute any SQL statement, manage keys on fields, manage privileges,export data into various formats and i...

TeaBot Trojan Targets Banks via Hijacked Android Handsets

Researchers have discovered an Android trojan that can steal victims’ SMS messages and credentials and completely take over devices. The trojan, dubbed TeaBot, is aimed at committing fraud against at least 60 banks in Europe. Join Threatpost for “Fortifying Your Business Against Ransomware, DDoS ...