reFlutter

Este framework ayuda con la ingeniería inversa de aplicaciones Flutter utilizando la versión parcheada de la librería Flutter que ya está compilada y lista para el reempaquetado de la aplicación. Esta librería tiene modificado el proceso de deserialización de instantáneas para permitirle realizar...

quarantyne

=== THIS PROJECT IS ARCHIVED === Quarantyne · Modern Web Firewall 🛃 Automated web security made simple TL;DR Quarantyne is a reverse-proxy that protects web applications and APIs from fraudulent behavior, misuse, bots and cyber-attacks in real-time. Requirements Presentation Features Coverage...

ThunderShell

ThunderShell ThunderShell es un RAT en C que se comunica a través de solicitudes HTTP. Todo el tráfico de red está cifrado usando una segunda capa de RC4 para evitar la interceptación SSL y vencer la detección de red en el sistema objetivo. RC4 es un cifrado débil y se utiliza para ayudar a ofusc...

evillimiter-windows

Evil Limiter for Windows Windows 版邪恶限速器 这是一个无需物理或管理权限即可限制网络中设备带宽（上传/下载）的工具。 evillimiter 利用 ARP 欺骗和流量整形来限制网络中主机的带宽。原理详见下文。 本工具是原始 Linux 命令行工具 Evil Limiter 的 Windows GUI 移植版。 系统要求 Windows 7 或更高版本 运行安装程序时，缺失的依赖（包括第三方应用程序，如 Npcap）将会自动安装。 安装 1. 从 发布页面 下载安装文件 2. 运行安装文件 3. 按照提示操作 4. 如果尚未安装，你会被引导安装...

kemon

Kemon An Open Source Pre and Post Callback-based Framework for macOS Kernel Monitoring. Breaking News - 08/28/2019 macOS Catalina 10.15 Beta 7 Release Notes https://developer.apple.com/documentation/macosreleasenotes/macoscatalina1015beta7releasenotes Endpoint Security The kauth API has been...

stenographer

Stenographer Overview Stenographer is a full-packet-capture utility for buffering packets to disk for intrusion detection and incident response purposes. It provides a high-performance implementation of NIC-to-disk packet writing, handles deleting those files as disk fills up, and provides method...

Red-Team-Infrastructure-Wiki

This wiki is intended to provide a resource for setting up a resilient Red Team infrastructure. It was made to complement Steve Borosh @424f424f and Jeff Dimmock's @bluscreenofjeff BSides NoVa 2017 talk "Doomsday Preppers: Fortifying Your Red Team Infrastructure" slides If you have an addition...

CVE-2024-3596-Detector

RADIUS脆弱性検出ツール コードの制限: このコードはMD5競合の検出を直接目的としています。ただし、CVE-2024-3596のすべての側面を徹底的にテストするには、より包括的な分析が必要になる場合があります。 このコードはMD5衝突に基づく攻撃のみを検出できます。その他の潜在的な脆弱性（TLSやIPSecの欠陥など）を検出するには、追加の分析が必要になる場合があります。 Alperen Ugurlu このスクリプトは、MD5衝突をチェックすることにより、RADIUS/UDPトラフィックにおけるCVE-2024-3596 脆弱性を検出します。RADIUS...

dns-honeypot

My First 24 Hours Running a DNS Honeypot As an engineer who spends most of my days knee-deep in observability tooling, I get the occasional idea that I just have to run with. This was one of those experiments: spin up a DNS resolver on a clean IP that nobody advertises, then let the internet talk...

polymorph

Polymorph Polymorphは、リアルタイムにインターセプトされたネットワークパケットに対してPythonコードを実行できるようにすることで、ネットワークトラフィックをその場で改変するツールです。 このフレームワークは、公的に仕様が定義された任意のネットワークプロトコルを実装するネットワークパケットをリアルタイムに改変するために使用できます。さらに、カスタム抽象化やフィールドを作成することで、非公開のネットワークプロトコルを改変するためにも使用できます。 インストール...

CVE-2026-45769

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5,IKEv2 parser state could grow without bounds while storing client transforms. Repeated crafted UDP traffic may cause Suricata to consume excessi...

CVE-2026-45764

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a protocol change while processing HTTP/2 traffic could lead to type confusion in Suricata. Crafted traffic may cause Suricata to crash,...

CVE-2026-45769

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5,IKEv2 parser state could grow without bounds while storing client transforms. Repeated crafted UDP traffic may cause Suricata to consume excessi...

CVE-2026-45768 Suricata ldap: unbounded responses per transaction can lead to resource exhaustion

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, LDAP transaction state could store an unbounded number of responses. Because LDAP can be processed over UDP, crafted traffic...

CVE-2026-45766

Suricata (network IDS/IPS/NMS engine) is affected by a resource exhaustion flaw in its NFS parser . Prior to versions 7.0.16 and 8.0.5 , certain NFS parser state structures were insufficiently bounded, allowing crafted NFS traffic to cause Suricata to consume excessive memory , potentially leadin...

DatajackProxy

Datajack Proxy Datajack Proxy a tool to intercept non-HTTP traffic between a native application and a server. This would allow for communications interception and modification, even if encryption and certificate pinning were in use. This is done by hooking the application and intercepting calls t...

CVE-2026-45762 Suricata defrag: missing address-family check can lead to remote crash

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's IP defragmentation tracker lookup did not verify that an existing tracker used the same IP address family as the packet being...

EUVD-2026-75730

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, when certain detection transforms are chained, the decompress transform pipeline could read from an inspection buffer after i...

hyperfox

Hyperfox Hyperfox は、2点間のHTTPおよびHTTPSトラフィックをプロキシして記録するセキュリティ監査ツールです。 インストール 以下のコマンドでhyperfoxの最新版を /usr/local/bin にインストールできます（管理者権限が必要です）： root@kitploit: curl -sL 'https://raw.githubusercontent.com/malfunkt/hyperfox/master/install.sh' | sh このバンから無料のキャンディーを受け取りたくない場合は、リリースページ...

stratum-c2

Cloud Persistence Framework · v3.0.2 A fallback foothold that routes through infrastructure defenders can't block. The problem Your primary C2 goes silent. The domain gets blacklisted. The beacon gets flagged. The EDR kills the process. You're out. You need a second channel — one that was never...