chatter

2023年4月9日 废弃软件 - 抱歉 - 忙别的事去了。如果有人出大价钱，我会用跨平台语言从头重写。 2021年10月6日 这可能很快就不再是废弃软件了。目前它非常不稳定 。我想从头重写它。 描述 Chatter 是一个概念验证型 OSINT 监控 Telegram 机器人，适用于 Windows（理想情况下是服务器）。它监控推文内容、Reddit 提交标题和 4chan 帖子内容，查找特定关键词以及引号内的短语。它会根据你的配置，将近实时发现的内容推送到你的 Telegram 群组。这是一个早期测试版，功能有限。 如有疑问，请联系 [email protected] 如何运...

user-agent-desktop

This project is discontinued. We recommend to use Ghostery Tracker and Ad Blocker in Firefox. Ghostery Private Browser The Ghostery Desktop Browser is a minimal fork of Firefox optimised for privacy. The main extra features are: The Ghostery Privacy Blocker extension is included and enabled by...

PortGuard

Port-Guard Port-Guard 是一款专为 Debian 设计的 USB 端口管理与安全防护工具 。 它可以控制 USB 设备的访问权限 、维护一份自定义白名单 ，并在后台执行自动扫描 以检测任何未授权的连接。 ⚠️ 测试版 ：该软件可以正常使用，但仍可能存在意外行为。如发现任何错误或异常，请通过 Git 仓库的 issues 进行反馈。 许可证： GNU GPL v3 作者： k3rnix 🧩 功能特性 🔒 锁定/解锁 所有 USB 端口。 📜 白名单管理 （添加、删除、清理）。 🛰️ 自动扫描守护进程 （portguard.service）。 🖥️ 清晰且带引导的 CLI...

Baskerville

Baskerville 从文件或接口读取数据，并写入指定目录中的文件，文件名基于 每个文件中第一个数据包的 Unix 时间戳。 某些协议可以被抑制，在这种情况下 只有前 N 个数据包会被记录到磁盘。 这减少了磁盘占用，保存了 价值不大的数据，如 TLS 或 VPN。 依赖 libtrace libflowmanager libprotoident 这些都可以从 http://research.wand.net.nz/software/ 下载 建议调用方式 baskerville -d pcapfile:/data/pcap -f 100M -l 10 -s HTTPS,OpenVPN...

CVE-2025-6440

CVE-2025-6440 plantilla de nuclei para CVE-2025-6440 VERSIÓN BETA, se actualizará...

USTP-Secure

USTP USTP means UDP Speedy Transmission Protocol. USTP keeps the same authenticated transport model, but the project name is now simply USTP again. By default, USTP uses AEAD for DATA. It also supports an optional negotiated cleartext + HMAC mode for DATA, where payload bytes are visible on the...

ish

iSH A project to get a Linux shell running on iOS, using usermode x86 emulation and syscall translation. For the current status of the project, check the issues tab, and the commit logs. App Store page TestFlight beta Discord server Wiki with help and tutorials README中文 如若未能保持最新，请提交PR以更新 Hacking...

gitlab-profile

测试状态 : ↳ 核心编排器测试器 ↳ 文档测试器 创建日期: 2025-10-24 09:50 PM ↳ Alberto Marangelo - @theGlitched !WARNING ⚠️ 此项目处于测试阶段！ 🎉 是的！我们很高兴宣布测试版即将完成！从版本 0.153 开始，所有针对首次 V1 发布流程的测试已启动！ root@kitploit: ░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ ░░█▀▀░▀█▀░█▀█░█░█░▀█▀░█▀▀░░░░░░░░░░░░░░ ░░▀▀█░░█░░█░█░▄▀▄░░█░░▀▀█░░░░░░░░░░░░░...

pig_CS4.4

注：仅供安全研究与学习之用，若将工具做其他用途，由使用者承担全部法律及连带责任，作者及发布者不承担任何法律及连带责任。 Cobalt Strike 4.4 猪猪版 该版本为预发布内测版本,公开版本即将在五月底发布 1. 去暗桩 2. 更改认证头 COOKIE改为Authentication 3. 更改get请求 与POST请求地址 4. 使用geacon二次开发版 替换beacon,可实现免杀实测火绒 360. 大概五月底发布 5. 更改为json相应包和请求包 6. CVE-2022-39197补丁 7. 修改ja3和ja3s特征...

strapi CMS <3.0.0-beta.17.5 - Admin Password Reset

strapi CMS before 3.0.0-beta.17.5 allows admin password resets because it mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-permissions/controllers/Auth.js. id: CVE-2019-18818 info: name: strapi CMS 3.0.0-beta.17.5 - Admin Password Reset...

reconftw v5.0.0-beta.1

reconFTW reconFTW is a powerful automated reconnaissance tool designed for security researchers and penetration testers. It streamlines the process of gathering intelligence on a target by performing subdomain enumeration, vulnerability scanning, OSINT and more. With a modular design, extensive...

EUVD-2026-68803

Missing Authorization vulnerability in WPExperts Post SMTP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Post SMTP: from 4.0.0 through beta.1...

wifit3 v0.0.5

wifit3 A standalone USB Wi-Fi auditor for Linux, Windows, and macOS. At least one of the supported USB adapters is required. Why? Cross-Platform: Runs identically on Linux, macOS, and Windows. Wireless Driver Heaven: Built-in wireless stack avoids kernel driver versioning hell and Windows' NDIS...

Malicious code in @hd-team/app-dnpkg-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5be2650e129e66738602f02b893ba443ffbd9a47df685f76bd4ae84b885529 The tarball contains only package.json and index.js. index.js is not JavaScript source: it is a base64-encoded JSON blob that decodes to a...

MAL-2026-14569 Malicious code in @hd-team/app-dnpkg-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5be2650e129e66738602f02b893ba443ffbd9a47df685f76bd4ae84b885529 The tarball contains only package.json and index.js. index.js is not JavaScript source: it is a base64-encoded JSON blob that decodes to a...

WordPress Post SMTP plugin 4.0.0-beta.1 - Settings Change vulnerability

Settings Change vulnerability discovered by mad4cyber in WordPress Plugin Post SMTP versions 4.0.0-beta.1...

Astra Linux – Vulnerability in openexr

There is a flaw in OpenEXR’s scanline input file functionality in versions before 3.0.0-beta. An attacker who can submit a crafted file for processing by OpenEXR could consume excessive system memory. The most significant impact of this flaw is on system availability...

Astra Linux – Vulnerability in freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. This issue only affects clients. An integer underflow can lead to a Denial of Service DOS vulnerability, for example, an abort due to WINPRASSERT with default compilation flags. When an...

Astra Linux – Vulnerability in openexr

A flaw was discovered in OpenEXR’s B44 uncompression functionality in versions prior to 3.0.0-beta. An attacker who can submit a crafted file to OpenEXR could trigger shift overflows, potentially affecting the availability of the application...

@nocobase/devtools (>=2.0.0-alpha.2, <=2.1.0-beta.44), @nocobase/test (>=2.0.0-alpha.2, <=2.1.0-beta.44) potentially affected by unknown CVE via @nocobase/server (>=2.0.0, <=2.1.0-beta.44)

@nocobase/server NPM version =2.0.0, =2.0.0-alpha.2, =2.0.0-alpha.2, =2.1.0-beta.44 Source cves: unknown CVE Source advisory: OSV:GHSA-GHVF-QF6H-G8X5...