sast

sast — by Insomnia Free, fast static application security testing for your terminal & CI/CD. SAST + taint · secrets with live key validation · SCA/CVEs · IaC · CMS & web-shell/malware — one self-contained binary , the same engine in your IDE and your build. Get the editor plugins — same engine,...

CloudGarrison

CloudGarrison Multi-Cloud Posture Workbench CloudGarrison is an offline-capable operator console designed for local evidence analysis, multi-cloud posture planning, and isolated simulations across AWS, Azure/Entra ID, GCP, Kubernetes, identity graphs, and detection engineering platforms. This loc...

Firmware-analysis

This repository does not have a README...

CVE-2026-62362

The PeerBanHelper tool (versions 5.0.0 through 9.3.15 ) is vulnerable to SQL injection via the /api/statistic/analysis/field endpoint. The root cause is that the mapField() method forwards unrecognized field names without proper sanitization, allowing them to be interpolated into SQL queries thro...

CVE-2026-62362 PeerBanHelper: SQL injection via ${field} interpolation in MyBatis mapper for analysis endpoint

PeerBanHelper automatically blocks unwanted, leeching, and abnormal BitTorrent peers using customizable and cloud rules. From 5.0.0 until 9.3.15, the /api/statistic/analysis/field endpoint accepts a crafted field query parameter from an authenticated user and passes it to countField or sumField...

CVE-2024-29943-but-with-wasm

CVE-2024-29943, but with wasm An end-to-end exploit chain for CVE-2024-29943 that achieves arbitrary native code execution by smuggling shellcode into SpiderMonkey's WebAssembly JIT code page as f64.const immediates — no ROP, no VirtualProtect, no external toolchain. Verified working against the...

activemq-lockbit-analysis

This repository does not have a README...

OsintCase

OSINTCase Based onOSINTMapper by Geistnigma. This project is a modified and extended version of OSINTMapper with additional features and changes focused on investigation case management, intelligence analysis and evidence handling. A browser-based OSINT investigation and case mapping tool. Organi...

scan

Atomdrift Scan Atomdrift Scan is a modern ML-based malware scanner designed to detect 0-day attacks against the software supply-chain. It's designed to be deterministic, fast, and flexible, and embeddable in any workflow or security tool you have in mind, and can operate against files, archives,...

SentinelThread-Forensics

🛡️ Sentinel Thread Pro The High-Speed Windows Forensic Triage Platform 📋 The Mission In modern SOC operations, manual EVTX analysis is a death sentence for your MTTR Mean Time to Respond. Sentinel Thread Pro is built to bridge the gap between massive raw event logs and actionable forensic...

qvm-tool

Driver scripts These are the analysis drivers used to produce the measurements quoted in the README and in the case notes. They are argument-driven and reusable : each takes the PE path and output paths on the command line. Run from the repository root, e.g.: python scripts/extendedcensus.py...

xyntia

This repository does not have a README...

malware-research

malware-research General malware analysis stuff...

CVE-2026-64633

CVE-2026-64633 Analysis Payloads Files payloads/ — generated payload documents treatment + control variants payloads/manifest.json — payload manifest with pids / pairs...

QR-Exploit-Rdy7d3r

QR-Exploit-Rdy7d3r Pegasus QR-EXPLOIT — A cybersecurity resear...

AuraBorealisApp

AuraBorealis: Do You Know What's In Your Python Packages? About AuraBorealis is a web application for visualizing anomalous and potentially malicious code in Python package registries. It uses security audit data produced by scanning the Python Package Index PyPI via Aura, a static analysis...

gokart

GoKart - Go Security Static Analysis GoKart is a static analysis tool for Go that finds vulnerabilities using the SSA single static assignment form of Go source code. It is capable of tracing the source of variables and function arguments to determine whether input sources are safe, which reduces...

XSpear

XSpear XSpear is XSS Scanner on ruby gems !IMPORTANT XSpear Repository Archived This repository has been archived and is now read-only. XSpear is no longer actively maintained. Try Dalfox instead 🌙🦊 A faster, more powerful XSS scanner with advanced features. → https://github.com/hahwul/dalfox Key...

CVE-2015-10034

CVE-2015-10034 This repository was created for the demonstration of the J-TAS Action. The workout-organizer-2aaedb7f69ea398a0217493fefe8f19b31ee0775 folder contains the vulnerable application related to CVE-2015-10034. We have included the SARIF file with the results of the analysis performed by...

quarantyne

=== THIS PROJECT IS ARCHIVED === Quarantyne · Modern Web Firewall 🛃 Automated web security made simple TL;DR Quarantyne is a reverse-proxy that protects web applications and APIs from fraudulent behavior, misuse, bots and cyber-attacks in real-time. Requirements Presentation Features Coverage...