1441520 matches found
CMD_Bypass_Assessment
Análisis de métodos de bypass de CMD CMD Bypass Method Analysis es un script de PowerShell que prueba automáticamente métodos de bypass de CMD en sistemas Windows y evalúa los resultados. El script verifica varios métodos de bypass de CMD y guarda los resultados en un archivo de texto,...
reasongate
ReasonGate Una puerta de enlace autoalojable que inspecciona el texto que entra y sale de un LLM y devuelve una decisión explicable de allow / flag / block con un registro de auditoría legible por máquina para cada llamada. Qué es esto El núcleo de código abierto se basa en reglas. Hace cuatro...
PwnFox
PwnFox PwnFox es una extensión de Firefox/Burp que proporciona herramientas útiles para tu auditoría de seguridad. Si eres usuario de Chrome, puedes visitar https://github.com/nccgroup/autochrome. PwnFox Funcionalidades Un solo clic en BurpProxy Perfiles de Contenedores Registrador de PostMessage...
snallygaster
snallygaster Finds file leaks and other security problems on HTTP servers. what? snallygaster is a tool that looks for files accessible on web servers that shouldn't be public and can pose a security risk. Typical examples include publicly accessible git repositories, backup files potentially...
jok3r
.. raw:: html .. image:: ./pictures/logo.png .. raw:: html .. image:: https://img.shields.io/badge/python-3.6-blue.svg :target: https://www.python.org/downloads/release/python-366/ :alt: Python 3.6 .. image:: https://readthedocs.org/projects/jok3r/badge/?version=latest :target:...
CTFTiny
CTFTiny: Lite Benchmarking Offensive Cyber Skills in Large Language Models This is the official repository for CTFTiny from "Towards Effective Offensive Security LLM Agents: Hyperparameter Tuning, LLM as a Judge, and a Lightweight CTF Benchmark" AAAI'26 paper. For CTFJudge, please refer to CTFJud...
TokenUniverse
Token Universe Token Universe es una herramienta avanzada para experimentar e investigar los mecanismos de seguridad de Windows. Expone una interfaz de usuario para crear, visualizar, suplantar y modificar tokens de acceso, generar procesos, gestionar la Autoridad de Seguridad Local, verificar el...
CVE-2023-28588_Singlefile
This repository does not have a README...
AI-Vulnerabilities-Playground
AIVP AI Vulnerabilities Playground AIVP is a hands-on AI security lab platform spanning 4 phases and 50+ labs currently 50+ scenarios across the codebase. It combines Ollama + Llama 3.1 , a FastAPI backend, and a React/Vite frontend to let practitioners safely practice offensive and defensive AI...
tailsnitch
Tailsnitch A security auditor for Tailscale configurations. Tailsnitch scans your tailnet for 57 misconfigurations, overly permissive access controls, and security best practice violations. Quick Start root@kitploit: 1. Set your Tailscale API credentials export TSAPIKEY="tskey-api-..." 2. Run aud...
rustsec
RustSec Crates 🦀🛡️📦 The RustSec Advisory Database is a repository of security advisories filed against Rust crates published via crates.io. The advisory database itself can be found at: https://github.com/RustSec/advisory-db About this repository This repository contains a Cargo Workspace with all...
SysTrace
SysTrace 2.0 ptrace-based Linux syscall monitor and sandbox for analyzing ELF binaries. SysTrace runs a target inside an isolated Linux namespace environment, traces its system calls and child processes, applies rule-based detection and weighted risk scoring, then uses a Random Forest classifier ...
CryKeX
Properties: Cross-platform Minimalism Simplicity Interactivity Compatibility/Portability Application Independable Process Wrapping Process Injection Dependencies: Unix - should work on any Unix-based OS BASH - the whole script root privileges optional Limitations: AES and RSA keys only Fails most...
CVE-PoC-Hub
🔬 CVE-PoC-Hub — Curated Proof-of-Concept Exploits Working, verified PoC scripts for recent CVEs. Tested in lab environments. For security researchers, penetration testers, and CTF players. ⚠️ Disclaimer All PoCs are for educational and authorized testing only. Each exploit has been tested in...
CVE-2025-68921
🎮 CVE-2025-68921 - Secure Your Gaming Laptop Today 🚀 Getting Started Welcome to CVE-2025-68921. This application helps protect your gaming laptop from vulnerabilities affecting millions of devices. Follow the steps below to download and run the software. 🔗 Download Now 💾 System Requirements To ru...
tenzir
Pipelines de Datos para Equipos de Seguridad Recopila, transforma, enriquece y enruta tu telemetría—todo en un solo lugar. ¿Qué es Tenzir? Tenzir es el motor de pipelines de datos para equipos de seguridad. Si necesitas recopilar, analizar, modelar, normalizar, agregar, almacenar, consultar y...
awesome-mobile-security
awesome-mobile-security Mantenido por @vaib25vicky con contribuciones de las comunidades de seguridad y desarrolladores. Android General - Blogs, Artículos, Guías Android: Obteniendo acceso a Content Providers arbitrarios Evernote: Universal-XSS, robo de todas las cookies de todos los sitios y má...
ntopng
ntopng Introduction ntopng® is a web-based network traffic monitoring application released under GPLv3. It is the new incarnation of the original ntop written in 1998, and now revamped in terms of performance, usability, and features. While you can read more about ntopng on the ntop web site...
concealed_position
Concealed Position Concealed Position is a local privilege escalation attack against Windows using the concept of "Bring Your Own Vulnerability". Specifically, Concealed Position CP uses the as designed package point and print logic in Windows that allows a low privilege user to stage and install...