1559 matches found
Apktool
Apktool これはApktoolのリポジトリです。ウェブサイトはapktool.orgリポジトリにあります。 Apktoolは、サードパーティ製のクローズドなバイナリAndroidアプリをリバースエンジニアリングするためのツールです。リソースをほぼ元の形式にデコードし、いくつかの変更を加えた後に再構築できます。また、smaliコードのステップバイステップでのデバッグも可能にします。プロジェクトのようなファイル構造と、apkのビルドなどの繰り返し作業の自動化により、アプリの操作を容易にします。 Apktoolは決して...
contact.sh
contact.sh セキュリティ脆弱性を報告するための連絡先を見つけるOSINTツールです。 インストール 🐧 GNU/Linux whois パッケージと jq パッケージがインストールされていることを確認してください。 $ git clone https://github.com/EdOverflow/contact.sh.git $ cd contact.sh/ $ chmod u+x contact.sh $ ./contact.sh -d google.com -c google 🍎 OSX $ brew install gnu-sed --with-default-name...
faraday_addon
简介 Faraday Addon 是一个简单的插件，用于将通过浏览器浏览到的漏洞自动上报到你自己的 Faraday 实例。Faraday Addon 会拦截浏览器的每一个请求，并增加一项功能，让你可以将每个请求视为一个漏洞进行访问。这样，渗透测试人员只需使用该插件将潜在的漏洞请求发送到 Faraday，而无需手动复制粘贴到服务器中。 兼容性 目前，Faraday Addon 仅适用于 Firefox Quantum 。我们正在努力推出稳定的 Chrome 版本。 安装 用户安装 从 Firefox 附加组件仓库下载并安装最新版本： Faraday Addon 开发者安装 $ git...
petereport
PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...
versionscan
versionscan Versionscan is a tool for evaluating your currently installed PHP version and checking it against known CVEs and the versions they were fixed in to report back potential issues. PLEASE NOTE: Work is still in progress to adapt the tool to linux distributions that backport security fixe...
Bug-Bounty-Beginner-Roadmap
请随时为本仓库贡献内容！ 漏洞赏金初学者路线图 你好！我是 Ansh Bhawnani 。我目前是一名安全工程师，同时也是一名兼职内容创作者。我创建这个仓库是为了让每个人都能够贡献内容，引导年轻而充满热情的心灵开启漏洞赏金职业生涯。更多内容将定期添加。请持续关注。那么让我们开始吧！ 注意： 过去几年中，漏洞赏金领域已经发生了变化。一年前我们容易发现的问题，现在不再容易找到。自动化被广泛使用，如果你运气不佳，大多数“低垂的果实”都会被重复提交。如果你想开始从事漏洞赏金，你必须下定决心保持坚持和专注，因为竞争非常激烈。 简介 什么是漏洞？...
CVE-2026-59568
creationtimestamp| type| source ---|---|--- 2026-08-24 15:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mttnscki7u2p 2026-08-24 16:07:47+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mttorycio22e 2026-08-24 18:12:34+00:00| seen|...
claude-pentest
claude-pentest A local pentesting toolkit built for Claude Co...
6 security settings every GitHub maintainer should enable this week
At GitHub Security Lab, we spend a lot of our week talking to maintainers. Some find the settings page dense and the docs sprawl. Most maintainers we talk to weren't hired to be security engineers. While this is true, ignoring a project's security settings completely will lead into leaving a lot ...
metasploit-web-scanner-module
MSF Web Vulnerability Scanner Advanced Advanced Metasploit au...
ai-pentest-agent
🔐 AI Pentest Agent v4 Automated web application penetration...
GHSA-XMRV-PMRH-HHX2 Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder
CVSSv3.1 Rating: Medium CVSSv3.1 Score: 5.9 CVSSv3.1 Vector String: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Summary and Impact An issue exists in the the EventStream header decoder in AWS SDK for Go v2 in versions predating 2026-03-23. An actor can send a malformed EventStream response frame...
Fleet 代码问题漏洞
Fleet is an open-source device management platform developed by Fleet Device Management. It supports various operating systems and devices, and helps IT and security teams with device management, vulnerability reporting, MDM operations, etc. Versions of Fleet prior to 4.81.0 contained code...
PT-2026-28102
What are the limits of AI-assisted vulnerability hunting? I obtained 23 CVEs in one month. BentoML 8.2k CVE-2026-27905 HIGH SillyTavern 24.6k CVE-2026-26286 HIGH Plane 28.2k CVE-2026-27705 MEDIUM NocoDB 46.4k CVE-2026-28399 MEDIUM Mautic 8.4k CVE-2026-3105 HIGH File Browser 27.9k CVE-2026-28492...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell Security Tool CVE-2025-55182 & CVE-2025-66478...
S3C2 SICP Summit 2025-06: Vulnerability Response Summit
Recent years have shown increased cyber attacks targeting less secure elements in the software supply chain and causing significant damage to businesses and organizations. The US and EU governments and industry are equally interested in enhancing software security, including supply chain and...
CVE-2025-9981
QuickCMS is vulnerable to multiple Stored XSS in slider editor functionality sliders-form. Malicious attacker with admin privileges can inject arbitrary HTML and JS into website, which will be rendered/executed on every page. By default admin user is not able to add JavaScript into the website. T...
EUVD-2019-14213
Malware in sbrugna...