sx

sx is the command-line network scanner designed to follow the UNIX philosophy. The goal of this project is to create the fastest network scanner with clean and simple code. 📖 Table of Contents Features Install Build from source Quick Start References Contributing Credits License ✨ Features ⚡ 30x...

prowler

Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...

CVE-2018-20250-WinRAR

CVE-2018-20250-WinRAR このリソースは、作者がWinRARの脆弱性CVE-2020-0601を再現し、関連するリソースや記事を組み合わせて実装したものです。作者的ブログと組み合わせて、この脆弱性を再現し、マルウェアの自動起動ハイジャックの原理を理解することをお勧めします。サイバーセキュリティ初心者として、自分は確かにまだまだですが、頑張り続けたいと思います。一緒に頑張りましょう！...

MaFrida

MaFrida 起動時に Frida サーバーを自動的に開始し、Android 上で異なる Frida バージョンを管理するための便利なコマンドラインインターフェースを提供する、シンプルでありながら強力な Magisk モジュールです。 機能 起動時に frida-server を自動的に開始します。 異なる Frida バージョンを簡単に切り替えられます。 軽量な CLI ツール: mafrida、frida-server のダウンロード、起動、強制終了、ステータス確認のための組み込みコマンド。 起動時の frida-server の有効化/無効化。 インストール 1. Magisk...

tsunami-security-scanner

Tsunami Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence. To learn more about Tsunami, visit our documentation. Tsunami relies heavily on its plugin system to provide basic scanning capabilities...

beef

=============================================================================== Copyright c 2006-2026 Wade Alcorn - [email protected] Browser Exploitation Framework BeEF - https://beefproject.com See the file 'doc/COPYING' for copying permission...

intercept

!Ask...

mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...

smolvm

smolvm AIエージェント向けのブランチ可能なmicroVM。 軽量な仮想マシンをソフトウェアに組み込み、ポータブルな開発環境やローカルサンドボックスを実現します。 インストール curl -sSL https://smolmachines.com/install.sh | bash macOS + Linux Windows: windows-x8664 リリースを解凍してsmolvm.exeを実行します（Windows Hypervisor Platformが必要です）。コーディングエージェント: インストール後にsmolvm...

microctfs

microctfs Small CTF challenges running on Docker logviewer Build and Start logviewer challenge exposed on port 8000 cd logviewer docker build -t logviewer . docker run -d -p 8000:80 --name logchallenge logviewer Restart logviewer challenge docker rm -f logchallenge && docker run -d -p 8000:80...

zap-hud

ZAP Heads Up Display The HUD is no longer under active development Unfortunately the HUD is no longer under active development due to the fact no one is focusing on it. The HUD is a unique and innovative interface that we know some people love. But it also needs a non trivial amount of maintenanc...

tcpcopy

TCPCopy - A TCP Stream Replay Tool TCPCopy is a TCP stream replay tool for realistic testing of Internet server applications. Getting to Know TCPCopy An Overview of TCPCopy for Beginners A General Overview of TCPCopy Architecture TCPCopy Testing Use Cases TCPCopy Pre-Warming Examples Description...

jackhammer

Jackhammer: One Security vulnerability assessment/management tool to solve all the security team problems. What is Jackhammer? Jackhammer is a collaboration tool built with an aim of bridging the gap between Security team vs dev team, QA team and being a facilitator for TPM to understand and trac...

cloudquery

CloudOps, without the chaos CloudQuery is a cloud asset inventory built for platform teams. Sync your cloud infrastructure metadata into your data warehouse, powering insights and automation. Unify data and provide context across AWS, Azure, GCP, and 70+ cloud and SaaS sources such as Wiz, Finout...

CVE-2022-27254

CVE-2022-27254 Hondaのリモートキーレスシステムの脆弱性のPoC CVE-2022-27254 免責事項: 教育目的のみ。 この脆弱性の発見者は、UMass Dartmouthの学生である Ayyappan Rajesh と HackingIntoYourHeart です。 このリポジトリに記載されているその他の方々は、提供されたサポートに対してクレジットされていますが、この発見に関連するいかなる研究にも積極的な役割を果たしていません。これらの調査結果を他の場所で公開する場合は、明示的な承認なしに他の個人、企業、または機関と関連付けないでください。 概要: これは...

pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

CVE-2026-21002-Serverless-Cold-Start-Credential-Leakage-via-Reused-tmp

CVE-2026-21002 – 通过复用的 /tmp 导致的无服务器冷启动凭据泄露 程序代码（Python AWS Lambda 模拟） lambdafuncsim.py - Simulated serverless function import os, tempfile, time SECRETFILE = '/tmp/credentials' reused across warm starts def handlerevent: On first invocation, write a secret if not os.path.existsSECRETFILE: with...

CVE-2026-23007-Serverless-Cold-Start-Memory-Remanence-Data-Leakage-

CVE-2026-23007 – 无服务器冷启动内存残留（数据泄漏） 程序代码（Python Lambda 模拟） lambdaremanence.py - Simulated Lambda environment reuse import os, secrets def firstinvocation: Simulates storing a secret in a global variable global SECRET SECRET = secrets.tokenhex16 return "Initialized" def secondinvocation: Another...

columbus-server

Columbus server This repository is deprecated! ‼️ The server component is moved to https://github.com/elmasy-com/columbus. Columbus Project is an API first subdomain discovery service, blazingly fast subdomain enumeration service with advanced features. Columbus returned 638 subdomains of tesla.co...

CVE-2026-79900

boksksllogsd accepts a checksum algorithm name in the MD field of an authenticated KSL start message. Affected releases verify that OpenSSL recognizes the digest name but do not verify that the value fits in a fixed 16-byte checksum context field before copying it. An authenticated KSL client can...