65 matches found
patchkit
patchkit Patches an ELF binary using one or more simple Python scripts. Usage: root@kitploit: patch patchdir|file... patchdir Contains one or more Python patch files, which will be executed in alphabetical order against a binary. Patch Examples Nopping an address, injecting an assembly function,...
turbo-intruder
Turbo Intruder Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results. It's intended to complement Burp Intruder by handling attacks that require exceptional speed, duration, or complexity. The following features set it apart: Fast - Turbo...
plasma
PLASMA The old project name was Reverse. PLASMA is an interactive disassembler. It can generate a more readable assembly pseudo code with colored syntax. You can write scripts with the available Python api see an example below. The project is still in big development. wiki : TODO list and some...
pyrebox
================ ARCHIVED PROJECT THIS PROJECT HAS BEEN ARCHIVED AND ITS ISSUE QUEUE IS LOCKED. THE PROJECT WILL BE KEPT PUBLIC ONLY FOR REFERENCE PURPORSES. .. image:: docs/media/pyreboxlogolightbg.png .. QEMU: http://qemu.org/ .. DECAF: https://github.com/sycurelab/DECAF .. S2E:...
pentest-tools
pentest-tools クイックニーズに対応するカスタムセキュリティツール集 重要なお知らせ ‼ 2022年11月に大規模な整理を行いました ‼ 一部の使われなくなった/動作しないスクリプトはアーカイブされ、他のスクリプトはより見やすくするために独自のリポジトリに移動されました。以下もご確認ください: apk-analyzer cloudflare-origin-ip csp-analyzer detectify-cves extract-endpoints favicon-hashtrick google-search graphql-introspection-analyzer...
asadbg
asadbg 初步说明：我们建议你将其作为 asatools 的一部分使用，但它也可以 独立使用。 asadbg 是一个工具框架，用于帮助自动执行 Cisco ASA 设备的实时调试， 以及通过串口/SSH 自动与 Cisco CLI 交互， 以快速执行重复性任务。 它封装了 gdb 它支持使用 asadbg.cfg 配置文件，以方便调试不同的 版本 它同时支持真实硬件和 GNS3 它可选地使用 ret-sync，以便从 IDA Pro 获得更好的调试体验 它支持在启动时执行额外的 gdb 脚本 它提供了一些库，可用于跨多个固件版本在真实硬件上 自动化测试 主工具是...
dionaea
dionaea - 捕获恶意软件 Dionaea 旨在成为 nepenthes 的后继者，嵌入 Python 作为脚本语言，使用 libemu 检测 shellcode，支持 IPv6 和 TLS。 协议 blackhole epmap ftp http memcache mirror mqtt mssql mysql pptp sip smb tftp upnp 日志 fail2ban hpfeeds logjson logsqlit 文档 文档 源代码 问题 许可证 dionaea: GPLv2+ tftp 服务modules/python/tftp.py: CNRI Python...
idahunt
Descripción general Requisitos Características Scripting Uso Simular sin ejecutar Análisis inicial Ejecutar script de IDA Python Diffing de binarios Requisitos Análisis inicial Diffing de archivos Diffing de una función Filtros Detección de arquitectura Específico del objetivo Proyectos conocidos...
offensive-security-labs
Offensive Security Labs A collection of hands-on offensive cy...
CVE-2026-33229
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Prior to 17.4.8 and 17.10.1, an improperly protected scripting API allows any user with script right to bypass the sandboxing of the Velocity scripting API and execute, e.g., arbitrary Python...
CVE-2025-13911
The vulnerability affects Ignition SCADA applications where Python scripting is utilized for automation purposes. The vulnerability arises from the absence of proper security controls that restrict which Python libraries can be imported and executed within the scripting environment. The core issu...
CVE-2025-13911
Ignition by Inductive Automation, when installed with default OS service account settings, may expose the host system to an elevated code execution risk via the gateway backup restore functionality. An authenticated user with Gateway Administrator privileges can import a malicious gateway backup...
CVE-2025-13911
CVE-2025-13911 affects Inductive Automation Ignition SCADA, where Python scripting is used for automation. The root cause is insufficient controls on which Python libraries can be imported/executed within the scripting environment, paired with an Ignition service account that has system-level Win...
CVE-2025-13911 Inductive Automation Ignition Execution with Unnecessary Privileges
Ignition by Inductive Automation, when installed with default OS service account settings, may expose the host system to an elevated code execution risk via the gateway backup restore functionality. An authenticated user with Gateway Administrator privileges can import a malicious gateway backup...
CVE-2025-13911 Inductive Automation Ignition Execution with Unnecessary Privileges
Ignition by Inductive Automation, when installed with default OS service account settings, may expose the host system to an elevated code execution risk via the gateway backup restore functionality. An authenticated user with Gateway Administrator privileges can import a malicious gateway backup...
PT-2025-52333
Name of the Vulnerable Software and Affected Versions Ignition SCADA applications affected versions not specified Description The issue concerns Ignition SCADA applications utilizing Python scripting for automation. A lack of security controls regarding Python library imports and execution allows...
EUVD-2017-3874
Malware in sbrugna...