205252 matches found
masc
masc A malware web scanner developed during CyperCamp Hackathon 2017 About homepage PyPI Features At the moment, there are some features avaiable for any type of website custom or CMS and some of them only available for specific platforms: Scan any website for malware using OWASP WebMalwareScanne...
bashacks
bashacks What? bashacks is a collection of bash functions likely to be useful for programmers, security analysts, and general users who need low-level operations. In fact, there is nothing really new in bashacks; all functions are written using existing software in UNIX-like systems. However, it...
GTFOBins.github.io
GTFOBins GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems. Find the project at: gtfobins.org...
CVE-2024-31317
CVE-2024-31317 Preface A couple of days ago, I saw an analysis of the CVE-2024-31317 vulnerability posted on JD's official account. After reading it through, I found it quite interesting. Moreover, the current mainstream solutions for automotive IVI In-Vehicle Infotainment are all based on Androi...
flawfinder
About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...
dirty_sock
dirtysock: Linux Privilege Escalation via snapd In January 2019, current versions of Ubuntu Linux were found to be vulnerable to local privilege escalation due to a bug in the snapd API. This repository contains the original exploit POC, which is being made available for research and education. F...
hash-identifier
hash-identifier Software to identify the different types of hashes used to encrypt data and especially passwords. Encryption formats supported: ADLER-32 CRC-32 CRC-32B CRC-16 CRC-16-CCITT DESUnix FCS-16 GHash-32-3 GHash-32-5 GOST R 34.11-94 Haval-160 Haval-192 110080 ,Haval-224 114080 ,Haval-256...
suricata_exporter
Suricata Prometheus Exporter This is a Prometheus Exporter for Suricata using dump-counters via the unix socket to query metrics. Usage $ ./suricataexporter -h Usage of ./suricataexporter: -suricata.socket-path string Path to the Suricata Command socket. default "/var/run/suricata.socket" -versio...
sx
sx is the command-line network scanner designed to follow the UNIX philosophy. The goal of this project is to create the fastest network scanner with clean and simple code. 📖 Table of Contents Features Install Build from source Quick Start References Contributing Credits License ✨ Features ⚡ 30x...
CVE-2021-3156
CVE-2021-3156 Visualization, Fuzzing, Exploit and Patch of Baron Samedit Vulnerability See report » Francesco Marchiori · Alessandro Lotto Table of Contents 1. Abstract 2. Visualization 3. Fuzzing 4. Exploit 5. Patch 🧩 Abstract Any Unix-based Operating System is equipped with the sudo command tha...
zi
Zi Manage your Zsh plugins, snippets, and command-line tools. Quick start · Documentation · Releases · Discussions Zi is the Z-Shell ecosystem's plugin manager, formerly known as zplugin and zinit. Features Responsive startup: defer plugin loading until after the first prompt with Turbo mode...
twiga
Twiga A tool that enumerates Android devices for information useful in understanding its internals and for exploit development. It supports android 4.2 to android 7.1.1 Requirements The most current ADB must be in your path and fully functional The report name must not have any whitespace...
Updated bluez package fixes security vulnerabilities
Out-of-bounds read in avrcp parsemediaelement and parsemediafolder. CVE-2026-75032 Unprivileged-local and adjacent-LE-peer leads to arbitrary code execution as root. CVE-2026-80185 Stack Overflow in name2utf8 causes DoS and potential code execution. CVE-2026-80186 AVRCP ListPlayerAttributes Doubl...
uac
Unix-like Artifacts Collector UAC About • Documentation • Main Features • Supported Operating Systems • Usage • Contributing • Support • License 🔎 About UAC UAC Unix-like Artifacts Collector is a powerful and extensible incident response tool designed for forensic investigators, security analysts...
CVE-2025-24813
Testing any tomcat version to see whether that version is vulnerable to CVE-2025-24813 This POC allow you to test any tomcat version to verify whether that version is vulnerable to CVE-2025-24813 under the vulnerable conditions, in Unix environments tested on a Ubuntu machine. Note: tested using...
CVE-2026-21636
CVE-2026-21636 - Node.js Permission Model UDS/Network Bypass Vulnerability summary The Node.js permission model --permission is designed to sandbox a process by restricting access to the filesystem, child processes, workers, and network. CVE-2026-21636 reveals that connections made via undici/fet...
lunar
LUNAR Lockdown UNix Auditing and Reporting Version Current version 16.6.1 Refer to lunar.sh and CHANGELOG.md for more up to date version information License CC BY-NC-SA: https://creativecommons.org/licenses/by-nc-sa/4.0/ Fund me here: https://ko-fi.com/richardatlateralblast NOTICE Run this code i...
GHSA-PJVX-PRJX-H659 vulnerabilities
Vulnerabilities for packages: tensorflow-cpu-jupyter, tensorflow-gpu-jupyter...