echidna

Echidna: Быстрый фаззер для смарт-контрактов Echidna — это странное существо, которое питается багами и обладает высокой электрочувствительностью с извинениями перед Джейкобом Стэнли Если говорить серьёзно, Echidna — это программа на Haskell, предназначенная для фаззинга и тестирования на основе...

sslyze

SSLyze SSLyze is a fast and powerful SSL/TLS scanning tool and Python library. SSLyze can analyze the SSL/TLS configuration of a server by connecting to it, in order to ensure that it uses strong encryption settings certificate, cipher suites, elliptic curves, etc., and that it is not vulnerable ...

IOSSecuritySuite

⭐️ Хотите стать сертифицированным инженером по безопасности iOS-приложений? ⭐️ Ознакомьтесь с нашим практическим и полностью онлайн-курсом: https://courses.securing.pl/courses/iase Описание ISS by @r3ggi 🌏 iOS Security Suite — это продвинутая и простая в использовании библиотека для обеспечения...

auto-re-agent

re-agent Автономный агент для реверс-инжиниринга — цикл реверс/проверка с учётом исходного кода, верификатор целей, механизм паритета и бэкенд на Ghidra. Обзор Демо: YouTube re-agent автоматизирует рабочий процесс реверс-инжиниринга, объединяя цикл реверс/проверка с декомпиляцией Ghidra через...

zuthaka

A collaborative free open-source Command & Control integration framework that allows developers to concentrate on the core function and goal of their C2. Explore the docs » · Report Bug · Request Feature · Table of Contents 1. About The Project Problem statement Solution Built With 2. Already...

CVE-2026-108523

The Studio-Saelix Sencho software (up to version 0.94.1 ) contains a Server-Side Request Forgery (SSRF) vulnerability in the git-sources Browse API Endpoint component, specifically affecting the outboundTarget.ts file. Manipulation of the repo_url argument can trigger the SSRF, which may be execu...

CVE-2026-108523 Studio-Saelix Sencho git-sources Browse API Endpoint outboundTarget.ts server-side request forgery

A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git-sources Browse API Endpoint. Executing a manipulation of the argument repourl can lead to server-side request forgery. The attack may be...

CVE-2026-108523

A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git-sources Browse API Endpoint. Executing a manipulation of the argument repourl can lead to server-side request forgery. The attack may be...

EUVD-2026-96730

A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git-sources Browse API Endpoint. Executing a manipulation of the argument repourl can lead to server-side request forgery. The attack may be...

Gepetto

Gepetto Gepetto is a Python plugin which uses various large language models to provide meaning to functions decompiled by IDA Pro ≥ 7.6. It can leverage them to explain what a function does, and to automatically rename its variables. Here is a simple example of what results it can provide in mere...

AWS-Threat-Simulation-and-Detection

Обнаружение угроз AWS с помощью Stratus Red Team Этот репозиторий — документация моих приключений с Stratus Red Team — инструментом для эмуляции действий злоумышленников в облаке. Stratus Red Team — это «Atomic Red Team для облака», позволяющий детально и самодостаточно эмулировать атакующие...

msticpy

MSTIC Jupyter and Python Security Tools Microsoft Threat Intelligence Python Security Tools. msticpy is a library for InfoSec investigation and hunting in Jupyter Notebooks. It includes functionality to: query log data from multiple sources enrich the data with Threat Intelligence, geolocations a...

tarnish

tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...

Awesome-LLMs-for-Vulnerability-Detection

취약점 탐지를 위한 Awesome 대규모 언어 모델 취약점 탐지 및 발견에 LLM을 활용하는 것에 관한 논문, 프로젝트, 에이전트 스킬의 엄선된 목록입니다. 📄 논문 2025년 이후만 표시합니다. 이전 작업은 논문 아카이브 2024년 및 이전를 참조하세요. 제목| 학회| 연도| 논문| Github ---|---|---|---|--- VulnGym: Benchmarking Coding Agents for Repository-Level Vulnerability Detection| | 2026| link| link VulTriage...

nipe

An engine to make Tor Network your default gateway. Summary The Tor project allows users to surf the Internet, chat and send instant messages anonymously through its own mechanism. It is used by a wide variety of people, companies and organizations, both for lawful activities and for other illici...

nipe

Движок, который делает сеть Tor вашим шлюзом по умолчанию. Краткое описание Проект Tor позволяет пользователям анонимно просматривать Интернет, общаться в чатах и отправлять мгновенные сообщения с помощью собственного механизма. Он используется самыми разными людьми, компаниями и организациями ка...

vm2

vm2 !NPM Versionnpm-imagenpm-url !NPM Downloadsdownloads-imagedownloads-url !Licenselicense-imagelicense-url !Known Vulnerabilitiessnyk-imagesnyk-url vm2는 허용 목록에 등록된 Node의 내장 모듈로 신뢰할 수 없는 코드를 실행할 수 있는 샌드박스입니다. 설치sh npm install vm2 빠른 예제js import VM from 'vm2'; const vm = new VM; vm.runprocess.exi...

obfus.h

obfus.h obfus.h is a macro-only library for compile-time polymorphic obfuscation of C applications, designed specifically for TinyCC 0.9.28rc on Windows x86 and x64. Download the complete compiler package from TinyCC-builder releases. One file. Protection baked into your binary. What features doe...

sleuthkit

The Sleuth Kit INTRODUCTION The Sleuth Kit is an open source forensic toolkit for analyzing Microsoft and UNIX file systems and disks. The Sleuth Kit enables investigators to identify and recover evidence from images acquired during incident response or from live systems. The Sleuth Kit is open...

VBA-RunPE

VBA RunPE Описание Простая, но эффективная реализация техники RunPE на VBA. Этот код может использоваться для запуска исполняемых файлов из памяти Word или Excel. Он совместим как с 32-битными, так и с 64-битными версиями Microsoft Office 2010 и выше. Подробнее здесь:...