ch55x_firmware_extractor

CH55x firmware extractor The CH55x firmware extractor is used to read out firmware from CH55x integrated circuits. There is no in-built support in the devices for directly reading out the firmware through the bootloader. However, there is a functionality to verify the firmware contents 8 bytes at...

waf-checker

A powerful web application to test how well your Web Application Firewall WAF protects against common attack vectors. → waf-checker.com ← Features Security Testing 19+ attack categories out of the box: SQL Injection, XSS, Path Traversal, Command Injection, SSRF, NoSQL Injection, LFI, LDAP...

CVE-2026-90829

GNU Binutils 2.47 is affected by a null pointer dereference in the function bfd_elf_set_group_contents within the file bfd/elf.c , part of the SHT_GROUP Section Handler component. The flaw is triggered by local manipulation and results in low impact on confidentiality, integrity, and availability...

ALHacking

Autor: 4lbH4cker Versión 4 Herramientas de Hacking Herramientas para ayudarte con el hacking ético, hackeo de redes sociales, información telefónica, ataque a Gmail, ataque a número de teléfono, descubrimiento de usuarios, hackeo de cámara web • ¡¡Potente herramienta de ataque DDOS!! Video de...

dockerscan

DockerScan v2.0 The Most Comprehensive Docker Security Scanner | |...

OSTE-Web-Log-Analyzer

OSTE-Web-Log-Analyzer Automate the process of analyzing web server logs with the Python Web Log Analyzer. This powerful tool is designed to enhance security by identifying and detecting various types of cyber attacks within your server logs. Stay ahead of potential threats with features that...

ClipGuard

ClipGuard Real-time detection of ClickFix clipboard injection attacks on Windows. ClipGuard monitors clipboard activity and intercepts suspicious paste operations before they can execute — specifically targeting the ClickFix technique where fake verification pages trick users into pasting malicio...

MAAD-AF

MAAD Attack Framework MAAD-AF es una herramienta de ataque en la nube de código abierto para entornos de Microsoft 365 y Entra ID Azure AD. MAAD-AF ofrece pruebas de seguridad simples, rápidas y efectivas. Valide los controles en la nube de Microsoft y pruebe las capacidades de detección y...

gotestwaf

GoTestWAF GoTestWAF es una herramienta para la simulación de ataques API y OWASP que admite una amplia gama de protocolos API, incluyendo REST, GraphQL, gRPC, SOAP, XMLRPC y otros. Fue diseñada para evaluar soluciones de seguridad de aplicaciones web, como proxies de seguridad API, cortafuegos de...

safe-npm

safe-npm A security-focused npm installer that protects your projects from newly compromised packages. Why does this exist? Supply chain attacks on npm packages are a growing threat. Attackers sometimes compromise legitimate packages by: Stealing maintainer credentials Publishing malicious update...

CVE-2004-2271

CVE-2004-2271 Minishare 1.4.1 Remote Buffer Overflow...

FecalFace

Description | Installation | Website | Issues FecalFace Descripción Fecalface nace del concepto "Balde de caca" donde la idea es tratar de pudrir los datos que tienen acerca de nosotros. Especificamente, el proyecto se relaciona con la detección y reconocimiento de rostros. La motivación de este...

CVE-2026-90828

A null pointer dereference vulnerability in GNU Binutils 2.47 , specifically in the function elf_orphan_compatible within the file ld/ldelf.c (ELF Orphan Section Handler component), allows a local attacker to cause a denial of service with partial impact on confidentiality and integrity. A public...

Android-Projector-C2-Malware

Pre-installed C2 Infrastructure and RAT Payload on Android Projectors Technical Analysis Report — Security Research Affected Devices: Multiple Android projectors of beamer brands like the Nonete e.g., Model HY260Pro likely also several projectors from Magcubic, Hotack, Huyukang and many more, as...

proxmark3

Iceman Fork - Proxmark3 The Proxmark3 is the swiss-army tool of RFID, allowing for interactions with the vast majority of RFID tags on a global scale. Originally built by Jonathan Westhues, the device is now the goto tool for RFID Analysis for the enthusiast. Iceman repository is considered to be...

fas-judgement-oss

FAS Judgement Prompt Injection Attack Console Test your AI's defenses before someone else does. Install | Game Mode | Leaderboard | Demo Target | Features | Elite | Contributing Why Judgement?...

CVE-2025-26465

CVE-2025-26465 The OpenSSH client contains a logic error between versions 6.8p1 to 9.9p1 inclusive that makes it vulnerable to an active MitM attack if the VerifyHostKeyDNS option is enabled, allowing a malicious interloper to impersonate a legitimate server when a client attempts to connect to i...

ntlm_theft

ntlmtheft A tool for generating multiple types of NTLMv2 hash theft files. ntlmtheft is an Open Source Python3 Tool that generates 21 different types of hash theft documents. These can be used for phishing when either the target allows smb traffic outside their network, or if you are already insi...

CVE-2026-90827

GPAC 26.07.0 contains a use after free vulnerability in the function gf_node_deactivate_ex within the file scenegraph/base_scenegraph.c of the MP4Box component. The flaw is exploitable via a local attack with low complexity and low privileges required, resulting in a low impact on availability (C...

CVE-2020-3580

CVE-2020-3580 Additional exploits for XSS in Cisco ASA devices discovered by PTSwarm Usage Stage address change me Demonstrate Logon to Cisco ASA WebVPN Visit staged malicious page Recover your credentials Patch ; Example / Result...