CVE-2026-58566

Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

python-haystack

python-haystack memory forensics |travis| |coverage| |landscape| |pypi| |docs| Quick Start: Quick usage guide in the docs/ folder. Haystack-reverse CLI in the docs/ folder. More documentation Introduction: python-haystack is an heap analysis framework, focused on searching and reversing of C...

jwtear

Jwtear A modular command-line tool to parse, create and manipulate JSON Web TokenJWT tokens for security testing purposes. Features Complete modularity. All commands are plugins. Easy to add new plugins. Support JWS and JWE tokens. Easy interface for plugins. follow the template example Flexible...

ST3GG

root@kitploit: ███████╗████████╗██████╗ ██████╗ ██████╗ ██╔════╝╚══██╔══╝╚════██╗██╔════╝ ██╔════╝ ███████╗ ██║ █████╔╝██║ ███╗██║ ███╗ ╚════██║ ██║ ╚═══██╗██║ ██║██║ ██║ ███████║ ██║ ██████╔╝╚██████╔╝╚██████╔╝ ╚══════╝ ╚═╝ ╚═════╝ ╚═════╝ ╚═════╝ ⊰•-•✧ THE ULTIMATE STEGANOGRAPHY TOOLKIT ✧•-•⊱ Hi...

seer

Introduction Seer - a gui frontend to gdb for Linux. Ernie Pasveer [email protected] This project is actively worked on. The aim is a simple, yet pleasing gui to gdb. Please report any bugs or desired features to my email or create a task in my GitHub project page. Installation Seer can be...

opa

Open Policy Agent Open Policy Agent OPA is an open source, general-purpose policy engine that enables unified, context-aware policy enforcement across the entire stack. OPA is proud to be a graduated project in the Cloud Native Computing Foundation CNCF landscape. For details read the CNCF...

blackjump

blackjump 简体中文 | English Legal Disclaimer: This tool is only intended for legally authorized enterprise security construction activities. When using this tool for testing, you should ensure that the behavior complies with local laws and regulations and has obtained sufficient authorization. Do no...

libptrace

libptrace libptrace is an event driven process/thread debugging, tracing, and manipulation framework. It is written in C and has Python 2.7 and 3.7 bindings. It is meant to be used as a library. The API has been designed with cross-platform support in mind. Although the current version only runs ...

pe_to_shellcode

petoshellcode Converts PE so that it can be then injected just like a normal shellcode. At the same time, the output file remains to be a valid PE. Supports both 32 and 64 bit PEs Authors:@hasherezade & @hh86 Objective The goal of this project is to provide a possibility to generate PE files that...

aws-iam-authenticator

AWS IAM Authenticator for Kubernetes A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster. The initial work on this tool was driven by Heptio. The project receives contributions from multiple community engineers and is currently maintained by Heptio and Amazon EKS OSS...

sandfly-entropyscan

What is sandfly-entropyscan? sandfly-entropyscan is a utility to quickly scan files or running processes and report on their entropy measure of randomness and if they are a Linux/Unix ELF type executable. Some malware for Linux is packed or encrypted and shows very high entropy. This tool can...

hcxtools

hcxtools A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper. These tools are 100% compatible with Hashcat and John the Ripper and are endorsed by Hashcat. Brief Description The main purpose of hcxtools is to detect weak points within...

changeme

changeme 一个默认凭证扫描器。 关于 changeme 接续商业扫描器停止的地方。它专注于检测默认和后门凭证，而不一定检测常见凭证。它的默认模式是扫描 HTTP 默认凭证，但也支持其他凭证。 changeme 设计为可以轻松添加新凭证，而无需编写任何代码或模块。changeme 将凭证数据与代码分离。所有凭证都存储在 yaml 文件中，因此它们既易于人类阅读，也便于 changeme 处理。凭证文件可以通过使用 ./changeme.py --mkcred 工具并回答几个问题来创建。 changeme 支持...

changeme

changeme A default credential scanner. About changeme picks up where commercial scanners leave off. It focuses on detecting default and backdoor credentials and not necessarily common credentials. It's default mode is to scan HTTP default credentials, but has support for other credentials. change...

CVE-2022-0482_exploit

CVE-2022-0482 Vulnerability Exploitation Introduction This document outlines the detailed analysis of CVE-2022-0482, a critical security vulnerability identified in the Easy!Appointments scheduling software. This flaw, related to Incorrect Authorization under CWE-863, allows unauthorized access t...

drozer

drozer drozer is a security testing framework for Android. drozer allows you to search for security vulnerabilities in apps and devices by assuming the role of an app and interacting with the Android Runtime, other apps' IPC endpoints and the underlying OS. drozer provides tools to help you use,...

awesome-osint-arsenal

🔍 AWESOME OSINT ARSENAL El conjunto de herramientas OSINT y de seguridad de código abierto más completo 751+ herramientas · 50 categorías · Instaladores multi-distro · OSINT Georgiano · Soporte para Termux El conjunto de herramientas OSINT y de seguridad más completo de internet — cada herramient...

misp-dashboard

misp-dashboard A dashboard showing live data and statistics from the ZMQ feeds of one or more MISP instances. The dashboard can be used as a real-time situational awareness tool to gather threat intelligence information. The misp-dashboard includes a gamification tool to show the contributions of...

pefile

pefile pefile 是一个跨平台的 Python 模块，用于解析和处理可移植可执行 PE 文件。PE 文件头中包含的大部分信息均可访问，所有节的详细信息和数据也是如此。 Windows 头文件中定义的结构将作为 PE 实例中的属性访问。字段/属性的命名将尽量遵循这些头文件中的命名约定。仅为了方便而添加的快捷方式才会偏离该约定。 pefile 需要对 PE 文件的布局有一些基本了解——有了它，就可以探索 PE 文件格式的几乎所有功能。 安装 通过 pip 安装 pefile： pip3 install pefile 功能特性 pefile 可以实现的一些任务包括： 检查头部 分析节...

nmapAutomator

nmapAutomator A script you can run in the background! Summary The main goal for this script is to automate the process of enumeration & recon that is run every time, and instead focus our attention on real pentesting. This will ensure two things: 1. Automate nmap scans. 2. Always have some recon...