30665 matches found
threat-dragon
OWASP Threat Dragon OWASP Threat Dragon is a free, open-source, cross-platform threat modeling application. It is used to draw threat modeling diagrams and to list threats for elements in the diagram. Mike Goodwin created Threat Dragon as an open source community project that provides an intuitiv...
cookie_crimes
Chrome Cookie Extraction Without Root This will print out a user's Chrome cookies. You don't need to have their password or be root to use it. nice nice nice nice nice. If you are not the kind of person who regularly gets the ability to execute code on other people's computers, you probably don't...
linux_screenshot_xwindows
Intro The goal of this volatility plugin is to extract a screenshot of all open X windows from a memory dump. Previous work The volatility plugin linuxxwindows realised by Adam Bridge https://github.com/bridgeythegeek/linuxxwindows extracts various metadata from the window objects registered to X...
CVE-2024-9465
CVE-2024-9465 Inyección SQL en Checkpoint mediante ataque basado en tiempo CVE-2024-9465 BÚSQUEDA EN SHODAN root@kitploit: https://www.shodan.io/search?query=html%3A%22Expedition+Project%22 html:"Expedition Project" BÚSQUEDA EN FOFA root@kitploit: https://en.fofa.info/ body="Expedition Project" |...
Cortex
Cortex tries to solve a common problem frequently encountered by SOCs, CSIRTs and security researchers in the course of threat intelligence, digital forensics and incident response: how to analyze observables they have collected, at scale , by querying a single tool instead of several? Cortex, an...
CVE-2021-25646-GUI
CVE-2021-25646-GUI A small demo implemented while learning the C language, with some code referenced from the internet...
subjack
subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...
xori
Xori - Custom disassembly framework Xori is an automation-ready disassembly and static analysis library that consumes shellcode or PE binaries and provides triage analysis data. Acknowledgements: Xori wouldn't exist without inspiration and ideas from the open source community. We are indebted to...
faction
OWASP - FACTION Marco de generación de informes de pruebas de penetración y colaboración ¡Faction ahora es un proyecto OWASP! Puedes encontrar más informaciónaquí Patrocinadores Patrocinadores Premium...
FileWatchTower
FileWatchTower - FWT NOTE: This project is no longer maintained and has been published from archived projects for reference. It is available for anyone interested in developing file analysis software. FWT is a security analysis and file monitoring tool that utilizes Sysmon events. It tracks files...
CVE-2025-58443
CVE-2025-58443 exploit POC for https://github.com/FOGProject/fogproject which is authentication bypass leads to dump DB that include full DB dump, that include clear text password and users and admin password hash. vulnerable version : 1.5.10.1673 below a script that will exploit the vulnerabilit...
androidqf
androidqf NOTA: este proyecto actualmente no tiene mantenimiento. Se puede encontrar un fork independiente bajo elProyecto MVT. androidqf Android Quick Forensics es una herramienta portátil para simplificar la adquisición de datos forenses relevantes de dispositivos Android. Descargar androidqf...
slsa
SLSA "salsa" es Niveles de cadena de suministro para artefactos de software SLSA pronunciado "salsa" es un marco de seguridad desde el origen hasta el servicio, que brinda a cualquier persona que trabaje con software un lenguaje común para aumentar los niveles de seguridad del software y la...
OCSD
OCSD OWASP Certified Secure-Software Developer - the repository for the the proposed OCSD certification OWASP Project link: https://owasp.org/www-project-certified-secure-developer/...
packman
packman A documentation and tracking project with the goal of making package management systems more secure. See issues for a very rough list of a few of the related issues we have seen. Table Of Package Management Systems...
CVE-2026-43500
Este proyecto se ha movido a https://github.com/First-John/cve2026fragfamilyfix...
Recaf
Recaf Un editor moderno y fácil de usar de bytecode Java que abstrae las complejidades de los programas Java. Descarga Lanzador Uso e instrucciones en el repositorio del lanzador Lanzamientos snapshot Ver acciones de CI para los artefactos de lanzamiento Lanzamientos independientes Ninguno para 4...