agent-bom

Find vulnerable software behind your AI agents—and trace the exposure evidence. For AppSec and platform engineers responsible for AI agents and MCP servers: scan a repository, correlate its findings with agent and infrastructure context, and prioritize fixes using blast radius and reachability...

jira-mobile-ssrf-exploit

CVE-2022-26135 - Full-Read Server Side Request Forgery in Mobile Plugin for Jira Data Center and Server About Assetnote Assetnote automatically maps your external assets and monitors them for changes and security issues to help prevent serious breaches. This research was performed by Assetnote's...

NativeDump

NativeDump NativeDump allows to dump the lsass process using only NTAPIs generating a Minidump file with only the streams needed to be parsed by tools like Mimikatz or Pypykatz SystemInfo, ModuleList and Memory64List Streams. NTOpenProcessToken and NtAdjustPrivilegeToken to get the...

pywhisker

pyWhisker pyWhisker is a Python equivalent of the original Whisker made by Elad Shamir and written in C. This tool allows users to manipulate the msDS-KeyCredentialLink attribute of a target user/computer to obtain full control over that object. It's based on Impacket and on a Python equivalent o...

STEWS

STEWS: Security Testing and Enumeration of WebSockets STEWS is a tool suite for security testing of WebSockets This research was first presented at OWASP Global AppSec US 2021 Features STEWS provides the ability to: Discover : find WebSockets endpoints on the web by testing a list of domains...

uofw

uOFW This project aims to reverse engineer the basic PSP kernel & hardware to create an up-to-date technical documentation of the system as well as to provide a free and open source vanilla firmware. To learn more about uOFW including examples where it has been used by the PSP community, please...

KDU

KDU Kernel Driver Utility System Requirements x64 Windows 7/8/8.1/10/11; Administrative privilege is required. Purpose and Features The purpose of this tool is to provide a simple way to explore the Windows kernel/components without requiring extensive setup or a local debugger. It features:...

CVE-2023-21554

CVE-2023-21554-PoC CVE-2023-21554 Windows MessageQueuing PoC， The sign of Poc success is the crash of the mqsvc.exe process, and there is no pop-up message, which needs to be seen in a process monitor-like program Execute command in windows terminal or command prompt python poc.py Enter IP addres...

cloudsplaining

Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report Documentation For full documentation, please visit the project on ReadTheDocs. Installation Cheatsheet Example report...

boopkit

================================================================ ██████╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗██╗████████╗ ██╔══██╗██╔═══██╗██╔═══██╗██╔══██╗██║ ██╔╝██║╚══██╔══╝ ██████╔╝██║ ██║██║ ██║██████╔╝█████╔╝ ██║ ██║ ██╔══██╗██║ ██║██║ ██║██╔═══╝ ██╔═██╗ ██║ ██║ ██████╔╝╚██████╔╝╚██████╔╝██║ ██║...

ddisasm

Datalog Disassembly DDisasm is a fast disassembler which is accurate enough for the resulting assembly code to be reassembled. DDisasm is implemented using the datalog souffle declarative logic programming language to compile disassembly rules and heuristics. The disassembler first parses ELF/PE...

PocList

This project is temporarily paused. During later updates, I realized two issues: First, it seems my declaration of the Cybersecurity Law in the repository was insufficient, leading to some results I did not intend. Second, at the initial design stage of this project, I did not consider some...

clients

Bitwarden Client Applications This repository houses all Bitwarden client applications except the mobile applications iOS | android. Please refer to the Clients section of the Contributing Documentation for build instructions, recommended tooling, code style tips, and lots of other great...

BurpSuite_Pro_v1.7.37

Update burpsuiteprov2.0beta.jar Burp Suite 2.0 beta is now available for Professional users. This is a major upgrade with many new features, including: A new crawler that is able to automatically handle sessions, detect changes in application state, handle multiple login captures, and process...

GraphCrawler

GraphCrawler THE GraphQL automated testing tookit Graph Crawler is the most powerful automated testing toolkit for any GraphQL endpoint. Version 1.2 is out!! NEW: Can search for endpoints for you using Escape Technology's powerful Graphinder tool. Just point it towards a domain and add the '-e'...

chef-mysql-hardening

mysql-hardening Chef cookbook Description Provides security configurations for mysql. It is intended to set up production-ready mysql instances that are configured with minimal surface for attackers. This cookbook focus security configuration of mysql and reuses the mysql cookbook for the...

2022

100 Days of YARA Part 2 - Electric Detectaloo Apologies in advance for the terrible naming, but welcome to 100 Days of YARA! This repository will act as the store for all YARA ideas created during this time. Any fun scripts, tools, or rules you write can be committed to this GitHub repository! Fo...

ipv6_frag_escape

IPV6FRAGESCAPE A reliable unprivileged container / jail escape proof of concept for CentOS / RHEL 10. It rides a now fixed IPv6 fragmentation bug in ip6appenddata closed upstream by 38becddc, no CVE, an in-slab linear overflow into the skbsharedinfo at the tail of a packet's own head object. This...

firejail

Firejail Firejail is a lightweight security tool intended to protect a Linux system by setting up a restricted environment for running potentially untrusted applications. More specifically, it is an SUID sandbox program that reduces the risk of security breaches by using Linux namespaces,...

CVE-2023-3640

SCTF2023kernelpwn SCTF 2023 kernel pwn Off-topic: A little advertisement — the author is a 2024 undergraduate graduate student, participating in this year's autumn recruitment. Feel free to contact me sycrop This problem aims to test two points. 1. The starting points of the cpu entry area mappin...