504 matches found
diaphora-mcp
Читать на русском языке Diaphora MCP Diaphora MCP is an MCP Model Context Protocol server for automated binary diffing. It connects Diaphora the diffing engine and IDA Pro the disassembler via the MCP protocol, allowing AI agents such as Claude Code to perform binary file comparison, find securit...
sslscan
sslscan2 sslscan version 2 has now been released. This includes a major rewrite of the backend scanning code, which means that it is no longer reliant on the version of OpenSSL for many checks. This means that it is possible to support legacy protocols SSLv2 and SSLv3, as well as supporting TLSv1...
BWASP
BWASP The BoB Web Application Security Project BWASP is an open-source, analysis tool to support for Web Vulnerability Manual Analysis hackers. The BWASP tool basically provides predicted information through vulnerability analysis without proceeding with an attack. BWASP supports performing...
analise-vulnerabilidades-zabbix-notebooklm
🛡️ SQLi Vulnerability Analysis in Zabbix with NotebookLM Thematic Notebook developed as a deliverable for the DIO Project Challenge Using NotebookLM as an active AI tool for curation, synthesis, and organization of knowledge in Cybersecurity 📋 Table of Contents Context and Objectives Source...
PatchaPalooza
PatchaPalooza patchapalooza.com — the interactive version is live! This CLI tool has been superseded by patchapalooza.com , a full interactive website for exploring and analyzing Microsoft Patch Tuesday data. It covers everything this tool does — and much more. Head there for the best experience...
FirmAE
FirmAE FirmAE is a fully-automated framework that performs emulation and vulnerability analysis. FirmAE significantly increases the emulation success rate From Firmadyne's 16.28% to 79.36% with five arbitration techniques. We tested FirmAE on 1,124 wireless-router and IP-camera firmware images fr...
GPT_Vuln-analyzer
GPTVuln-analyzer GVA GVA is an AI-assisted reconnaissance and vulnerability-analysis toolkit. It runs the scan nmap, DNS, subdomains, JWT, PCAP, GeoIP, then hands the raw output to a large language model that returns a structured, pentester-oriented analysis. It ships with both a command-line...
CVE-2022-29622
CVE-2022–29622: Invulnerability Analysis This codebase was created to help security professionals and developers to understand why I think Formidable was not vulnerable to CVE-2022-29622. I have written up my analysis here: CVE-2022–29622: Invulnerability Analysis As some did not understand it, I...
CVE-mitre
CVE-Mitre Common Vulnerability Exposure Download single CVE The variable is only for example ; you can make your own SVN script for downloading a single folder = CVE = BR @nu11secur1ty $CVE = CVE-2020-13935 svn checkout https://github.com/nu11secur1ty/CVE-mitre/trunk/$CVE Link table of Analysis...
SSRF-CVE-2023-22493
SSRF-CVE-2023-22493 Analysis of CVE-2023-22493...
Preparation-Guide-to-OSCP
OSCPガイド このガイドでは、OSCPの全トピックに加え、その他の情報セキュリティの知識についても詳細にカバーします。各セクションにはチートシートも用意するので、トピックやツールを理解したらすぐにコマンドを使用できるようにします。しかし、優れたペネトレーションテスターになるためには、物事がどのように動作するかを知るべきだと思います。ペネトレーションテスティングは非常に広い分野です。例えば、Webアプリケーションのペネトレーションテスティングに興味があるなら、アプリケーションがデータベースとどのようにやり取りするのか、データベースの基本、Webアプリケーション言語について知るべきです。...
JustALampNothingElse
脆弱性の完全な分析とアプリの説明はこちらからご覧いただけます： https://drive.google.com/file/d/14s5rYThOpEbU6KjBNT2D2l65WDcwCDTL/view?usp=drivelink このプロジェクトは SocialTIC と ITESO によって作成されました Cris...
android-kernel-exploitation
Android カーネルエクスプロイテーション 目的 このワークショップの目的は、Android プラットフォームにおけるカーネル脆弱性解析 とエクスプロイテーション を始めることです。 使用方法 リポジトリをクローンします git clone https://github.com/cloudfuzz/android-kernel-exploitation /workshop Github Pages URL https://cloudfuzz.github.io/android-kernel-exploitation/ ワークショップ動画 カーネル構築用 Docker Docker...
KoodousFinder
KoodousFinder A simple tool to allows users to search for and analyze android apps for potential security threats and vulnerabilities Account and API Key Create a Koodous account and get your api key https://koodous.com/settings/developers Install $ pip install koodousfinder Arguments Param|...
firmware-analysis-toolkit
FAT — ファームウェア解析ツールキット 最新リリースをダウンロード · 変更履歴 · インストール Firmware Analysis Toolkit は、IoT、Physical AI、モバイルデバイス、ロボティクス向けのファームウェアセキュリティを調査するためのセキュリティリサーチツールキットです。主に Attify が実施する "Offensive IoT Exploitation" トレーニング向けに構築されています。 実際のファームウェアセキュリティ調査において本当に重要な要素は何かという、現場での実践的な経験に基づいて構築されています。 FAT...
V8Harvest
V8Harvest V8Harvest helps view recent V8 bug patterns on a single page for analyzing V8 vulnerabilities. It has parsed all regress- files under the directory of src/v8/test/mjsunit/ using git log. Each regress contains the following links related to its own information: Chromium Bugs / V8 Bugs V8...
cve-2021-44228
cve-2021-44228 This is the mid-term assignment archive of the "Vulnerability Analysis Lab" Junior Fall-Winter at Anhui University. The full document is at https://testgames.me/2024/11/10/cve-2021-44228/...
cve-2020-23127-PoC
cve-2020-23127-PoC CVE-2020-23127: https://www.cvedetails.com/cve/CVE-2020-23127/ Introduction This is my first CVE proof of concept and analysis. It was done as part of my cyber-security course on my 2nd year of Master in Computer Sciences at Université de Franche-Comté. I looked specifically fo...
CVE-2025-5548
🛠️ Environment Setup Target platform: Windows This guide details all the tools required to perform vulnerability analysis and fuzzing of the binary. Follow the steps in order to ensure everything is set up correctly. 🐍 Python 3 Download: python.org/downloads/windows Python 3 is the language we wil...