PSBits

PSBits Soluciones simples relativamente que te permiten profundizar un poco más de lo habitual. Cada carpeta debería tener su propio readme.md explicando los detalles. Si no es así, el código tiene comentarios extensos al principio y en línea. Boletín: https://gtworek.ck.page/ Si quieres compilar...

systeminformer

System Informer A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc...

pycdc-studio

pycdc-studio English README 一个基于 Qt Widgets 的桌面图形界面，用来配合 pycdc / pycdas 浏览 Python 字节码、查看原生反编译结果、导入 Pyarmor oneshot 输出，并在遇到不支持的 code object 时使用 AI 做兜底重建。 当前支持 Windows 和 Linux 桌面环境。 界面预览 主工作区 设置页 AI 重建 功能 直接打开 .pyc / .pyo 支持把文件夹拖进窗口，递归扫描其中的字节码文件 支持通过 oneshot 流程导入 Pyarmor 混淆项目 多文件会一起显示在左侧树里...

studio

ShipSec Studio Plataforma de Orquestación de Flujos de Trabajo de Seguridad de Código Abierto. ShipSec se encuentra actualmente en desarrollo activo. Estamos optimizando la plataforma para un uso estable en producción y operaciones de seguridad de alto rendimiento. ShipSec Studio proporciona un D...

CVE-2020-0418

CVE-2020-0418 Proyecto de Android Studio para generar las apks utilizadas para el exploit. Para generar la versión 1 de la apk basta con dejar comentadas las líneas indicadas en el AndroidManifest.xml Para generar la versión 2 de la apk basta con descomentarlas Demostración en...

idacode

IDACode IDACode makes it easy to execute and debug Python scripts in your IDA environment without leaving Visual Studio Code. The VS Code extension can be found on the marketplace. IDACode is still in a very early state and bugs are to be expected. Please open a new issue if you encounter any...

Label Studio < 1.16.0 - Cross-Site Scripting

Label Studio prior to version 1.16.0 contains a cross-site scripting caused by rendering unsanitized user-provided HTML in the /projects/upload-example endpoint, letting attackers execute arbitrary JavaScript via crafted labelconfig in a GET request, exploit requires victims to visit malicious UR...

Wavemaker Studio 6.6 - Local File Inclusion/Server-Side Request Forgery

WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value in com/wavemaker/studio/StudioService.java, leading to disclosure of local files and server-side request forgery. id: CVE-2019-8982 info: name: Wavemaker Studio 6.6 - Local File Inclusion/Server-Side Request...

Label Studio - Sensitive Information Exposure

An attacker can construct a filter chain to filter tasks based on sensitive fields for all user accounts on the platform by exploiting Django's Object Relational Mapper ORM. Since the results of query can be manipulated by the ORM filter, an attacker can leak these sensitive fields character by...

Joomla! Component Jphone 1.0 Alpha 3 - Local File Inclusion

A directory traversal vulnerability in jphone.php in the JPhone comjphone component 1.0 Alpha 3 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-3426 info: name: Joomla! Component Jphone 1.0...

Label Studio - Cross-Site Scripting

Versions prior to 1.9.2 have a cross-site scripting XSS vulnerability that could be exploited when an authenticated user uploads a crafted image file for their avatar that gets rendered as a HTML file on the website. id: CVE-2023-47115 info: name: Label Studio - Cross-Site Scripting author: isaca...

CVE-2024-35250-BOF

CVE-2024-35250-BOF CVE-2024-35250 的 Beacon Object File BOF 实现，用于 Cobalt Strike。 使用 Visual Studio 编译。 致谢 所有漏洞代码的功劳归原作者 varwara。 免责声明 我对您使用这段糟糕代码可能犯下的任何反人类罪行或引发的核战争不承担任何责任。...

CVE-2025-34300POC

Sawtooth Lighthouse Studio存在模板注入漏洞CVE-2025-34300 参数： root@kitploit: options: -h, --help show this help message and exit -u URL, --url URL 请输入待检测的URL -f FILE, --file FILE 请输入一行一个URL的文件地址 举例： root@kitploit: 单个检测： python .\CVE-2025-34300POC.py -u URL 批量检测; python .\CVE-2025-34300POC.py -f urls.txt...

blutter

Blutter Flutter Mobile Application Reverse Engineering Tool by Compiling Dart AOT Runtime Currently the application supports only Android libapp.so arm64 only. Also the application is currently work only against recent Dart versions. For high priority missing features, see TODO Environment Setup...

CVE-2024-30085

CVE-2024-30085 CVE-2024-30085 Alex Birnberg 受影响版本：Windows 11 23H2 最初来自这里 略微修改以在Visual Studio上无需配置即可编译...

apkstudio

APK Studio 基于 Qt6 的开源跨平台 IDE，用于逆向工程 Android 应用程序包。提供友好的 IDE 风格布局，包括支持 .smali 代码文件语法高亮的代码编辑器。 特性 跨平台，可在 Linux 、Mac OS X 和 Windows 上运行 反编译/重新编译/签名和安装 APK 自动工具下载与安装 - APK Studio 可自动下载并安装所需工具（Java、Apktool、JADX、ADB、Uber APK Signer） 框架支持 - 安装并使用制造商特定的框架文件（例如 HTC、LG、Samsung），支持可选标签，用于反编译和重新编译 APK 命令行打开...

Magento-ver.-2.4.6

Título del exploit: FireBear Studio Improved Import & Export ver. 3.8.6 para Magento 2.4.6 - Inyección XSLT del lado del servidor Fecha: 2023-11-17 Autor del exploit: tmrswrr Página web del proveedor: FireBear Studio Enlace del software: FireBear Studio Improved Import & Export Versión: FireBear...

blackout-public

ZoomInfo GTM Studio: Documentación sobre el seguimiento previo al consentimiento "Puedes bloquear al investigador. No puedes bloquear la evidencia." Lo que sucedió El 25 de noviembre de 2025, el CEO de ZoomInfo, Henry Schuck, publicó una demostración del producto GTM Studio en LinkedIn: su...

power-pwn

Maintained by: Secure AI Agents Everywhere. Overview Power Pwn is an offensive and defensive security toolset for Microsoft 365 Power Platform and AI services. Key Features, among others: 💾 PowerDump : Comprehensive tenant scanning and data collection 🚪 BackDoor : Deploy backdoor flows for...

reko

reko - a general purpose decompiler. Reko Swedish: "decent, obliging" is a decompiler for machine code binaries. This project is freely available under the GNU General Public License. The project consists of front ends, core decompiler engine, and back ends to help it achieve its goals. A...