CVE-2026-21045_and_CVE-2026-21048

CVE-2026-21045 & CVE-2026-21048 — सैमसंग libimagecodec.quram.so OOB राइट PoC अवलोकन इस रिपॉजिटरी में अवधारणात्मक प्रूफ-ऑफ-कॉन्सेप्ट PoC फ़ाइलें हैं जो सैमसंग एंड्रॉइड डिवाइसों पर उपयोग होने वाली Quramsoft इमेज कोडेक लाइब्रेरी libimagecodec.quram.so में आउट-ऑफ-बाउंड OOB राइट कमजोरियों को प्रदर्शित...

Internet-Scanner

Scanneur de réseau local Une interface graphique Tkinter qui scanne un réseau IPv4 local ARP + sondage nmap, affiche les appareils, permet d'exécuter des scans de ports complets et d'exporter les résultats. Aperçu rapide Scan ARP pour découvrir les appareils sur le LAN. Sondages nmap améliorés po...

Bring Your Own CA: Introducing the Thales Imperva SSL Integration Center, Featuring DigiCert Trust Lifecycle Manager

Somewhere in your estate right now, a certificate is counting down to its expiry date. Today you probably know which one, because renewals still come around annually and someone owns the calendar. The industry is taking that comfort away: the CA/Browser Forum has voted to cut the maximum TLS...

SeekYou

विकास का समर्थन करें यदि यह प्रोजेक्ट आपके काम में मदद करता है, तो निरंतर रखरखाव और नई सुविधाओं का समर्थन करें। ETH दान वॉलेट 0x11282eE5726B3370c8B480e321b3B2aA13686582 QR कोड स्कैन करें या उपरोक्त वॉलेट पता कॉपी करें। SeekYou 15 स्रोतों पर एकीकृत होस्ट इंटेलिजेंस — तत्काल सुरक्षा स्थिति, बुनियाद...

metabigor

Metabigor - OSINT power without API key hassle What is Metabigor? Metabigor maps a target's infrastructure without asking you to register for a single API key. Network ranges, certificates, related domains, exposed ports, CDN vendors, and code leaks - all from free sources, all pipeable into each...

haruspex

haruspex "Hacking is the discipline of questioning all your assumptions all of the time." -- Dave Aitel Haruspex is a blazing fast IDA headless plugin that extracts pseudocode generated by IDA's decompiler in a format that should be suitable to be imported into an IDE, or parsed by static analysi...

droidlysis

DroidLysis DroidLysis is a pre-analysis tool for Android apps : it performs repetitive and boring tasks we'd typically do at the beginning of any reverse engineering. It disassembles the Android sample, organizes output in directories, and searches for suspicious spots in the code to look at. The...

cicd-sensor

🚧 Pre-release: Active development. cicd-sensor is currently in pre-release and under active development. Feedback is very welcome. cicd-sensor Think EDR, but for CI/CD Pipelines. Open-source eBPF-powered runtime security sensor for GitHub Actions and GitLab CI/CD. → Full documentation Demo ---...

CVE-2026-39875-macOS-CUPS-LPE

CVE-2026-39875-macOS-CUPS-LPE Unprivileged user to root via CUPS vulnerability affecting macOS Tahoe, Sequoia, and Sonoma prior to macOS 26.6 / 15.7.8 / 14.8.8. Proof of Concept Demonstrations macOS Tahoe 26.4.1 macOS Sequoia 15.7.5 macOS Sonoma 14.8.5 Root Cause The vulnerability arises from two...

tird

🏠 होम 📑 विनिर्देश 📜 मैन पेज 📄 इनपुट विकल्प 📖 ट्यूटोरियल ❓ सामान्य प्रश्न 📥 स्थापित करें tird & tirdFS tird /tɪrd/ यह "यह यादृच्छिक डेटा है" का संक्षिप्त रूप है एक फ़ाइल एन्क्रिप्शन उपकरण है जो मेटाडेटा को न्यूनतम करता है और एन्क्रिप्टेड डेटा को छिपाता है। tird के साथ, आप यह कर सकते हैं: 1. कंटेनर...

graphw00f

Credits to Nick Aleks for the logo! graphw00f - GraphQL Server Fingerprinting Table of Contents How does it work? Detections GraphQL Threat Matrix Prerequisites Installation Configuration Example Usage Fingerprinting GraphQL Detecting & Fingerprinting GraphQL Support & Issues Resources How does i...

mosh

Mosh: the mobile shell Mosh is a remote terminal application that supports intermittent connectivity, allows roaming, and provides speculative local echo and line editing of user keystrokes. It aims to support the typical interactive uses of SSH, plus: Mosh keeps the session alive if the client...

nomore403

NoMore403 nomore403 is a command-line tool for testing HTTP access-control bypasses and parser inconsistencies around 401, 403, and related responses. The tool is designed for practical web security work: bug bounty, penetration testing, security reviews, and regression testing of access-control...

mssqlbof

mssqlbof Um conjunto de Beacon Object Files para Microsoft SQL Server que fala TDS 7.4 diretamente no fio, em C. Sem msodbcsql.dll, sem sqloledb.dll, sem .NET CLR, sem PowerShell. Um COFF por arquitetura, carrega em qualquer beacon que honre a API Beacon canônica. Porquê O SQL Server aparece em...

Crow-Eye

Crow-Eye — Windows 取证引擎 Windows 取证时间机器。 Crow-Eye 不只是 检测 ——它会在时间线上重建实际发生的事件 ，从取证采集一直到可溯源至原始记录的证据判定。 目录 概述 ✨ 亮点 👥 Crow-Eye 面向的用户 🧭 子系统概览 🏗️ 架构 📥 下载与安装 🚀 快速开始 📂 支持的取证对象 🔧 分析模式 📎 导入证据（第三方数据） 🧠 用户行为分析（UBA） 🧩 关联引擎 👁️ Eye — 取证人工智能助手 📖 Eye-Describe — 字节级取证对象知识库 🧪 质量与验证 🔬 研究平台 🛠️ 技术说明 📸 截图 🚧 路线图 📚 文档 🤝 贡献 🌐...

assless-chaps

assless-chaps Crack MSCHAPv2/NTLMv1 challenge/responses quickly using a database of NT hashes Introduction Assless CHAPs is an efficient way to recover the NT hash used in a MSCHAPv2/NTLMv1 exchange if you have the challenge and response e.g. from a WiFi EAP WPE attack. It requires a database of ...

sicat

SICAT - The useful vulnerability and exploit finder SICAT is a powerful tool designed to aggregate and search for vulnerabilities and exploits from multiple high-profile sources. It simplifies the reconnaissance phase by automatically checking reputable databases based on keywords, Nmap scan...

agent-bom v0.102.0

Open security scanner and self-hosted control plane for AI, MCP, and cloud infrastructure. 15 package ecosystems · 16 compliance surfaces · 77 MCP tools · no account required Quick start · Live demo · Docs What it is agent-bom scans repositories, images, and cloud accounts, then correlates what i...

vuke

vuke Ferramenta de pesquisa para analisar e reproduzir geração vulnerável de chaves Bitcoin. Funcionalidades Arquitetura modular - fontes e transformações conectáveis Múltiplas fontes de entrada Intervalos numéricos testar sementes fracas Listas de palavras análise de brainwallet Carimbos de...

knowsmore

Knows More KnowsMore officially supports Python 3.8+. Main features Import NTLM Hashes from .ntds output txt file generated by CrackMapExec or secretsdump.py Import NTLM Hashes from NTDS.dit and SYSTEM Import Cracked NTLM hashes from hashcat output file Import BloodHound ZIP or JSON file BloodHou...