9206 matches found
shadow-pentest
🖤 Shadow Pentest Framework v1.0 Automated CVE Discovery & E...
Top Cybersecurity Frameworks Compared
Top Cybersecurity Frameworks Compared: NIST, CIS, and MITRE ATT&CK Security leaders do not need another framework for the sake of paperwork. They need a practical way to decide which cybersecurity frameworks help the business govern risk, harden defenses, and validate whether controls can withsta...
nimrm 1.1.0
nimrm is a native WinRM interactive shell client written in Nim. It's designed to be a compact and fast tool for system administration and authorized security testing. Key features include NTLM and Kerberos authentication, in-memory operations, file transfers, OPSEC awareness, and cross platform...
Faraday 5.21.0
Faraday is a tool that introduces a new concept called IPE, or Integrated Penetration-Test Environment. It is a multiuser penetration test IDE designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use...
auto-test-platform
自动化测试平台-用于POC测试团队...
Exploit-POC
🛡️ Exploit-POC A curated collection of Proof-of-Concept Po...
PickleFuzzer: A Case Study in Fuzzing for Discrepancies between Python Pickle Implementations
Python's native serialization protocol, pickle, is a powerful but insecure format for transferring untrusted data. It is frequently used, especially for saving machine learning models, despite known security challenges. While developers sometimes mitigate this risk by restricting imports during...
UGen: An Agentic Framework for Generating Microarchitectural Attack PoCs
Microarchitectural attacks continue to evolve, uncovering new exploitation vectors in modern processors. From a defensive perspective, assessing a system's susceptibility to such attacks remains challenging. Developing functional attack implementations is labor-intensive, requires deep...
Rcon-Bruteforce
RCON Scanner & Exploitation Toolkit ⚠️ EDUCATIONAL PURPOSE...
DORA Compliance Cybersecurity Guide for Finance
DORA Compliance Cybersecurity: A Practical Guide for Financial Services Teams DORA compliance cybersecurity is now a board-level priority for banks, insurers, investment firms, payment providers, and the ICT providers that support them. The Digital Operational Resilience Act shifts the conversati...
SUSE-SU-2026:21608-1 Security update for ongres-scram, ongres-stringprep, plexus-testing, maven, maven-doxia, mojo-parent, sisu
This update for ongres-scram, ongres-stringprep, plexus-testing, maven, maven-doxia, mojo-parent, sisu fixes the following issues: Changes in ongres-scram: - Version 3.2 Fix Timing Attack Vulnerability in SCRAM Authentication bsc1250399, CVE-2025-59432 Updated dependencies and maven plugins Use...
OPENSUSE-SU-2026:20742-1 Security update for ongres-scram, ongres-stringprep, plexus-testing, maven, maven-doxia, mojo-parent, sisu
This update for ongres-scram, ongres-stringprep, plexus-testing, maven, maven-doxia, mojo-parent, sisu fixes the following issues: Changes in ongres-scram: - Version 3.2 Fix Timing Attack Vulnerability in SCRAM Authentication bsc1250399, CVE-2025-59432 Updated dependencies and maven plugins Use...
Exploit for CVE-2024-12912
Origasus origasus.go ile derlenen, ASUS AiCloud / AsusWRT i...
Maltrail-v0.53-Exploit
Maltrail v0.53 — Command Injection Exploit I wrote this explo...
The vulnerability of the _download_image_to_temp() function in the system, which is used for launching and managing large language models in LoLLMS (Lord of Large Language Multimodal Systems), allows a hacker to perform an SSRF attack.
The vulnerability of the downloadimagetotemp function in the system for launching and managing large language multimodal systems LoLLMS is related to insufficient testing of requests on the server side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack...
Exploit for Out-of-bounds Write in Paloaltonetworks Pan-Os
CVE-2026-0300 Overview CVE-2026-0300 is a critical buffer...
strix-advanced
⚡ Strix-Advanced AI-Powered Security Testing Platform An...
A Systematic Security Testing Approach for InterUSS-Based Environments
Unmanned Traffic Management UTM federated ecosystems, such as InterUSS, enable secure coordination among UAS Service Suppliers USSs. However, they bring up some security challenges at the infrastructure level that haven't been fully explored. This paper presents a security testing approach for...