341 matches found
log4fix
log4fix This tool is to detect and fix the log4j log4shell vulnerability CVE-2021-44228 by looking and removing the JndiLookup class from .jar/.war/.ear files with zero dependencies for free. This tool has been tested on: - Linux 32bit and 64 bit - Windows 32 bit and 64 bit - OpenBSD 64 bit This...
bissap
bissap root@kitploit: %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%. % % % .: % .===% . :: % :%%=====%%%%%%: % %%%= =====%============%%%-% = % = =====-================ % BBBBBBBBBBBBBBBBB IIIIIIIIII SSSSSSSSSSSSSSS SSSSSSSSSSSSSSS AAA PPPPPPPPPPPPPPPPP = : =====================% + B::::::::::::::::B I::::::::I...
edk2
============== Proyecto EDK II Un entorno de desarrollo de firmware moderno, rico en funciones y multiplataforma para las especificaciones UEFI y PI de www.uefi.org. .. image::...
vuln_apps
vulnapps A fleet of intentionally-vulnerable apps to point security tooling at crossfyre, Burp, ZAP, nuclei, and so on. This folder holds no app source , just skeleton definitions and a small manager. Each app runs as its own isolated container stack, so nothing clashes. Everything here is...
custom-oscp-tooling
Custom OSCP Tooling A consolidated set of read-only, OSCP-exam-safe custom tools by Samson Laird. Everything here enumerates, identifies, and advises. Nothing here exploits, sprays, or modifies a target. The problem this solves OSCP exam and lab work is a list of disconnected one-liners: nmap her...
nxlog-ubuntu-githubactions
nxlog-ubuntu-githubactions nxlog ubuntu...
AtlassianPwn
This repository does not have a README...
SharpExchange
SharpExchange This command line POC that shows how C can be used to interact with Microsoft Exchange EWS. Showing that it can be done in other tooling other than Powershell. Yes this is a simple POC to show how it could be done. Its not 100%. You want to show off your l33t C coder or red teamer...
DynamicDotNet
DynamicDotNet A collection of various and sundry code snippets that leverage .NET dynamic tradecraft Purpose To showcase offensive and defensive tooling and POCs that leverage .NET dynamic loading, staging, bootstrapping, types, objects, functions, etc. Contribute Source Code & Text Documents All...
tooling-playground
tooling-playground A collection of small scripts and tools for deobfuscation and malware analysis...
Asyncrat-Venom-Dcrat-Config-Extractor
Asyncrat-Venom-Dcrat-Config-Extractor Static Config Extractor for Asyncrat/Dcrat/VenomRat Utilises dnlib to locate encrypted Config data and associated Encryption values. Values are decrypted in the script without emulating or executing malware code Assumes config lies under the Client.Settings...
Nuclei-Templates-Collection
https://github.com/0xSojalSec/templates-nuclei-Oracle-OAM---XSS https://gist.github.com/ResistanceIsUseless/e46848f67706a8aa1205c9d2866bff31 https://github.com/0xElkot/My-Nuclei-Templates https://github.com/0xSojalSec/Nuclei-Templates-API-Linkfinder https://github.com/0xSojalSec/templatesallnucle...
ebpf
Miscellaneous eBPF Tooling...
GO-2026-6255 vulnerabilities
Vulnerabilities for packages: kaniko, docker-fips, zot, conftest, kubescape-server, livekit-cli, skaffold, podman, trivy-operator-fips, cloudbeat-fips, kaniko-fips, trivy, guac, podman-fips, cloudbeat, skaffold-fips, conftest-fips, scorecard, kubescape, kubescape-server-fips, trivy-fips...
GO-2026-6213 vulnerabilities
Vulnerabilities for packages: nfpm, trivy-operator, act, crossplane, guac, pulumi, snyk-cli, witness, argo-cd, external-secrets-operator, k9s, gitsign, pulumi-language-yaml, argo-events, grype, xeol, scorecard, kyverno, trufflehog, cerbos, gitaly, kots, bom, nuclei, grafana-alloy, src-fingerprint...
Malicious code in warp-drive-internal-tooling (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62165101225b7ad5371e9310e013a9e1dc69b59a475a7a4ccd7cdf0d7996c1d [email protected] declares a preinstall hook that runs index.js, which on Windows spawns a hidden-window PowerShell process powershe...
MAL-2026-12248 Malicious code in tinkoff-pfp-block-mobile-advert-footer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12bd549b3c3a286caedd91cb1bbc6052850f23c01f5eaa33e7c336db1928258c On require of index.js, the package silently loads bootstrap.js, which reconstructs attacker-controlled hostnames from split-string fragments...
Malicious code in nolimit-agent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb0b18aa83b740e2cb908b4dabf469e2447548d637dbc409f1e11f88ab6b534 Package is a weaponized mass-mail / SMS spam and phishing toolkit distributed as an npm package. All 45 source files under.ad/ are post-obfuscated wi...