DakshSCRA

Daksh SCRA Source Code Review Assist Author: - Debasis Mohanty [email protected] - Twitter / X: @coffeensecurity - www.coffeeandsecurity.com About Daksh SCRA Daksh SCRA Source Code Review Assist is built to enhance the efficiency of the source code review process, providing a well-structured...

sharesniffer

sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares: pyth...

pmd

PMD - 소스 코드 분석기 PMD 는 확장 가능한 다중 언어 정적 코드 분석기입니다. 사용하지 않는 변수, 빈 catch 블록, 불필요한 객체 생성 등과 같은 일반적인 프로그래밍 결함을 찾아냅니다. 주로 Java 및 Apex 를 대상으로 하지만, 16개의 다른 언어를 지원 합니다. 400개 이상의 내장 규칙 이 함께 제공됩니다. 사용자 정의 규칙으로 확장할 수 있습니다. JavaCC와 Antlr을 사용하여 소스 파일을 추상 구문 트리AST로 파싱하고 규칙을 실행하여 위반 사항을 찾습니다. 규칙은 Java 또는 XPath 쿼리...

hyperion-disassembler

Hyperion ネイティブマルチアーキテクチャの逆アセンブラおよびバイナリ解析ツール。PE、ELF、Mach-O、.NET バイナリを x86、x64、ARM、ARM64、MIPS、PPC でサポート。C++20 と ImGui でスクラッチから構築。 単一の静的リンク実行ファイル。インストーラ不要、ランタイム依存関係なし。3MB 未満。 コミュニティ Discord GitHub サポートされているフォーマットとアーキテクチャ フォーマット| アーキテクチャ ---|--- PE exe, dll, sys| x86, x64 ELF so, o, 実行可能ファイル| x86, x6...

Network-Analysis-Tools

Pcap 캡처 파일 분석 도구v.1 !CONTACT! | Email: [email protected] | | Github: github/azizaltuntas | | Twitter: @esccopyright | 기능 1-Top 10 Visited Sites 2-Emails 3-All Request Urls 4-User-Agents List 5-String Grep Mode 6-Connection details 7-Ports Used 8-ALL Ip List 9-Manuel Packet Filter 10-Smtp...

hobbits

About Hobbits was developed at Mahlet in 2019 as an integrated data analysis tool. It was open-sourced and is now passively maintained by Adam and anyone who wants to contribute. Join the Discord server if you want to ask questions, contribute, or just chat about binary analysis tools...

winevt_logs_analysis

Winevt ログ分析 リモート接続 Windows マシンへのリモート接続と、理想的にはいくつかのパブリック IP を検出するためのシンプルなスクリプトです。リモートログインやセッションに関するいくつかのイベント ID をチェックします。 スクリプトが動作し、winevt フォルダ内の一部の .evtx ファイルを解析できるように、pip install -r requirements.txt を実行してください。 winevt/Logs フォルダとスクリプトは同じファイルパスにある必要があります。 実行例 結果例...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: media: adv7842: Avoid possible out-of-bounds array accesses in adv7842cplogstatus It is possible for cpread and hdmiread to return -EIO. These values are further used as indexes for accessing arrays. The issue was fixed by checki...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/via: Avoid potential array out-of-bound access in addsecretdacpath The sndhdagetconnections function may return a negative error code. This could lead to accessing the ‘conn’ array at a negative index. This issue was...

The vulnerability of the Checkov code analysis tool by Prisma Cloud lies in the fact that functions from an unreliable controlled area can be enabled, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Checkov code analysis tool by Prisma Cloud lies in the inclusion of functions from an unverified controlled area. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-48813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Flawfinder is a a static analysis tool for finding vulnerabilities in C/C++ source code. Versions prior to 2.0.20 have an improper input neutralization issue...

UBUNTU-CVE-2026-64348

In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on failed submit EHCI and FOTG210 isochronous submits build an ehciisosched before linking the URB to the endpoint queue, and keep the staged schedule in urb-hcpriv until isostreamschedule and the link...

ROS-20260714-73-0026

The vulnerability of the Monero protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, is related to an uncontrolled recursion. Exploiting this vulnerability could allow a hacker to cause a service failure...

ROS-20260714-73-0018

The vulnerability of the WebSocket protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, is related to improper management of sequential memory allocation. Exploiting this vulnerability can allow attackers to cause service failures...

ROS-20260714-73-0055

The vulnerability of the rdp8decompresssegment function in the RDP protocol analysis tool for computer network traffic analysis in Wireshark is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to cause service failur...

CVE-2025-71368 picklescan - Arbitrary Code Execution via Undetected doctest.debug_script

picklescan before 0.0.30 fails to detect the doctest.debugscript function when analyzing pickle files, allowing attackers to execute arbitrary code. Remote attackers can craft malicious pickle files embedding doctest.debugscript calls that bypass picklescan detection and execute arbitrary command...

Can Open-Source LLM Agents Replace Static Application Security Testing Tools? an Empirical Assessment

This paper explores the value of agentic AI tools for cybersecurity purposes. We evaluate the efficacy of a general-purpose GenAI Large Language Model- GenAI- based agent when powered by three different Ollama-hosted general-purpose open source models. We assess each agent's performance using...

AMD uProf 安全漏洞

AMD uProf is a cross-platform performance analysis tool developed by AMD, Inc. for AMD processor architecture. AMD uProf has a security vulnerability; this vulnerability stems from unlimited resource allocation, which may lead to excessive consumption of system resources and resulting in usabilit...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Added a check on the callback function pointer before its call. In the dpucoreirqcallbackhandler callback function, the pointer pointing to the callback function is checked to be NULL. However, the callback function ...

CVE-2026-43432

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix memory leak in xhcidisableslot xhcialloccommand allocates a command structure and, when the second argument is true, also allocates a completion structure. Currently, the error handling path in xhcidisableslot only...