DedSec

DedSec プロジェクト 公式ウェブサイト -brightgreen.svg DedSec プロジェクト 完全なギリシャ語版に移動するには、ここをクリックしてください。 DedSec プロジェクト は、Android + Termux 向けに構築された広範な教育用ツールキットです。多くのスクリプト、ユーティリティ、ローカル Web インターフェース、練習環境を 1 か所にまとめています。その目的は、ユーザーがツールの仕組みを学び、防御的認識を理解し、一般的な Termux ワークフローを単一のプロジェクトから整理できるようにすることです。 目次 DedSec...

rosenbridge

project:rosenbridge : hardware backdoors in x86 CPUs github.com/xoreaxeaxeax/rosenbridge // domas // @xoreaxeaxeax Overview project:rosenbridge reveals a hardware backdoor in some desktop, laptop, and embedded x86 processors. The backdoor allows ring 3 userland code to circumvent processor...

firmwalker

firmwalker A simple bash script for searching the extracted or mounted firmware file system. It will search through the extracted or mounted firmware file system for things of interest such as: etc/shadow and etc/passwd list out the etc/ssl directory search for SSL related files such as .pem, .cr...

ir-rescue

ir-rescue ir-rescue is composed of two sister scripts that collect a myriad of forensic data from 32-bit and 64-bit Windows systems ir-rescue-win and from Unix systems ir-rescue-nix. The scripts respect the order of volatility and artifacts that are changed with the execution e.g. , prefetch file...

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...

idb

Idb idb is a tool to simplify some common tasks for iOS pentesting and research. Originally there was a command line version of the tool, but it is no longer under development so you should get the GUI version. idb has a new homepage athttp://www.idbtool.com All documentation and news are posted...

Citadel

はじめに Citadelは、ペンテスト関連のタスクのための様々なスクリプト集です。 含まれるスクリプト一覧 vars.zsh msfresourcescripts dnsdump.py fileinfo.zsh fileserver.py opcodes.zsh stackpush.zsh sslconvert.zsh gitdownload.zsh cardmon.zsh powershellcmdstager.py sfparser.py xmltojson.py enumforms.py linker.sh initcommit.sh shellstorm.py vars.zsh...

ROOT-APP-MAVEN-CVE-2026-55471 CVE-2026-55471 in ca.uhn.hapi.fhir:org.hl7.fhir.utilities - Patched by Root

Root has patched CVE-2026-55471 in the ca.uhn.hapi.fhir:org.hl7.fhir.utilities package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-34359 CVE-2026-34359 in ca.uhn.hapi.fhir:org.hl7.fhir.utilities - Patched by Root

Root has patched CVE-2026-34359 in the ca.uhn.hapi.fhir:org.hl7.fhir.utilities package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-33180 CVE-2026-33180 in ca.uhn.hapi.fhir:org.hl7.fhir.utilities - Patched by Root

Root has patched CVE-2026-33180 in the ca.uhn.hapi.fhir:org.hl7.fhir.utilities package for Root:Maven. Multiple fixed versions available...

dracon-utilities

Dracon Utilities Three small Rust CLI tools that look after a Linux development machine: one keeps your git repos committed and backed up, one keeps your disk and memory from falling over, and one stops secrets from landing in your git history. They run as ordinary user-level systemd services — n...

CVE-2026-41845

CVE-2026-41845...

CVE-2026-14208

Remote Utilities Host =7.7.3.0 sets insecure ACLs on all DLL files in the installation directory C:\Program Files x86\Remote Utilities - Host, granting FULL CONTROL F to the built-in Everyone group BUILTIN\Everyone, S-1-1-0. A Windows service running as NT AUTHORITY\SYSTEM loads DLLs from this...

CVE-2026-14208 Local Privilege Escalation via Insecure DLL Permissions in Remote Utilities Host <=7.7.3.0

Remote Utilities Host =7.7.3.0 sets insecure ACLs on all DLL files in the installation directory C:\Program Files x86\Remote Utilities - Host, granting FULL CONTROL F to the built-in Everyone group BUILTIN\Everyone, S-1-1-0. A Windows service running as NT AUTHORITY\SYSTEM loads DLLs from this...

EUVD-2026-63896

Remote Utilities Host =7.7.3.0 sets insecure ACLs on all DLL files in the installation directory C:\Program Files x86\Remote Utilities - Host, granting FULL CONTROL F to the built-in Everyone group BUILTIN\Everyone, S-1-1-0. A Windows service running as NT AUTHORITY\SYSTEM loads DLLs from this...

CVE-2026-14208

Remote Utilities Host versions up to 7.7.3.0 contain a local privilege escalation vulnerability caused by insecure ACLs on all DLL files in the installation directory (C:\Program Files (x86)\Remote Utilities - Host\). The BUILTIN\Everyone group is granted FULL CONTROL , allowing any local unprivi...

v0lt

v0lt v0ltは、私がセキュリティCTFで使用した/使用している/使用する予定の全てのツールを、Pythonスタイルで再グループ化する試みです。 多くの演習はbashスクリプトで解決されていましたが、Pythonの方が柔軟性が高いかもしれないため、これを作りました。 Gallopsledとは関係ありません。これは小さくても特定のユーティリティだけを備えたおもちゃのツールキットです。 このプロジェクトはもうメンテナンスされていません。ユーティリティ自体が十分に小さいため、ほとんどはメンテナンスを必要とせずに動作します。ただし、プルリクエストを提出したい場合は自由にどうぞ:...

yealink_tools

Yealink 固件逆向工程 此仓库包含一些在 Yealink VOIP 电话固件逆向工程过程中使用的脚本工具。 如需了解更多有关这项研究的信息，请阅读博客文章...

ROOT-APP-MAVEN-CVE-2025-67030 CVE-2025-67030 in org.codehaus.plexus:plexus-utils - Patched by Root

Root has patched CVE-2025-67030 in the org.codehaus.plexus:plexus-utils package for Root:Maven. Multiple fixed versions available...

The vulnerability of the data_extract_all.c component in the UNIX utility commands of the BusyBox, which allows a hacker to cause a service failure.

The vulnerability of the dataextractall.c component of the UNIX utility set in the command line of BusyBox is related to external control via a name or file path. Exploiting this vulnerability can allow an attacker to cause a service failure...