rop-tool

rop-tool v2.4.2 A tool to help you write binary exploits OPTIONS rop-tool v2.4.2 Help you make binary exploits. Usage: rop-tool OPTIONS Commands : gadget Search gadgets patch Patch the binary info Print info about binary heap Display heap structure disassemble Disassemble the binary search Search...

OverRide

OverRide Explore disassembly, binary exploitation & reverse-engineering through 10 little challenges. In the folder for each level you will find: flag - password for next level README.md - how to find password source.c - the reverse engineered binary dissasemblynotes.md - notes on asm See the...

CVE-2024-4577-RCE

PHP CGI Argument Injection CVE-2024-4577 RCE 📜 Description In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command...

riotpot

📢 ATTENTION!!! --- This repository has been moved to the Honeynet Project : RIoTPot RIoTPot is a hybrid interaction honeypot, primarily focused on the emulation IoT and OT protocols, although, it is also capable of emulating other services. In essence, RIoTPot acts as a proxy service for other...

LeitWacht Agent

leitwacht-agent https://leitwacht.eu — source of truth: https://gitlab.com/leitwacht/leitwacht-agent. Issues, MRs, and discussions live on GitLab. Pre-1.0. The 0.x series is pre-stable; minor releases may carry breaking changes to APIs, env-var names, helm values.yaml keys, and rule-file schema...

pixma

What is this? Some little tools to unpack firmware of Canon PIXMA series for analysis. Motivation Some Pixma printer is unable to reset the Waste Ink counter and refuses to print now, even though waste ink container has been swapped out. So I was curious about the inner workings of the firmware t...

tengu

Tengu — Pentesting MCP Server "In Japanese mythology, the Tengu is a fierce mountain spirit — master strategist, warrior, and trainer of samurai. In cybersecurity, it guides you through every phase of the hunt." From recon to report — AI-assisted pentesting in one command. Tengu is an MCP server...

CVE-2024-9264

CVE-2024-9264 - Grafana SQL Expressions DuckDB LFI/RCE PoC Python proof of concept for CVE-2024-9264, a Grafana SQL Expressions vulnerability that can allow authenticated local file inclusion and command execution when duckdb is available in the Grafana process PATH. For authorized testing and...

troll-a

Troll-A Troll-A is a command line tool for extracting secrets such as passwords, API keys, and tokens from WARC Web ARChive files. Troll-A is an easy-to-use , comprehensive , and fast solution for finding secrets in web archive. Features Protocols: Supports retrieving web archives directly from a...

nosqli

NoSQL Injector A fast NoSQL scanner and injector. For finding sites vulnerable to NoSQL injection, Mongo in particular. About Nosqli I wanted a better nosql injection tool that was simple to use, fully command line based, and configurable. To that end, I began work on nosqli - a simple nosql...

nuclearpond

Nuclear Pond Nuclear Pond is used to leverage Nuclei in the cloud with unremarkable speed, flexibility, and perform internet wide scans for far less than a cup of coffee. It leverages AWS Lambda as a backend to invoke Nuclei scans in parallel, choice of storing json findings in s3 to query with A...

evilqr

Evil QR Toolkit demonstrating another approach of a QRLJacking attack, allowing to perform remote account takeover, through sign-in QR code phishing. It consists of a browser extension used by the attacker to extract the sign-in QR code and a server application, which retrieves the sign-in QR cod...

teampcp-supply-chain-attack

TeamPCP 공급망 공격: 기술 분석 및 탐지 가이드 CVE-2026-33634 CVSS 9.4 — 2026년 현재까지 가장 영향력이 큰 CI/CD 공급망 공격. 2026년 3월 19일부터 25일 사이, 위협 행위자 TeamPCPDeadCatx3, PCPcat, ShellForce, CanisterWorm으로도 추적됨는 GitHub Actions, Docker Hub, OpenVSX, npm, PyPI 등 5개 생태계에 걸친 연쇄적 공급망 손상을 실행했습니다. 불완전하게 순환된 단일 GitHub PAT에서 시작된 이 캠페인은...

sh4d0wup

sh4d0wup % docker run -it --rm ghcr.io/kpcyrd/sh4d0wup:edge -h Usage: sh4d0wup OPTIONS Commands: bait Start a malicious update server front Bind a http/https server but forward everything unmodified infect High level tampering, inject additional commands into a package tamper Low level tampering,...

sh4d0wup

sh4d0wup % docker run -it --rm ghcr.io/kpcyrd/sh4d0wup:edge -h Usage: sh4d0wup OPTIONS Commands: bait Start a malicious update server front Bind a http/https server but forward everything unmodified infect High level tampering, inject additional commands into a package tamper Low level tampering,...

CVE-2024-4577-PHP-RCE

PHP RCE PoC CVE-2024-4577: Argument Injection in PHP-CGI Overview This repository contains scripts to check for the CVE-2024-4577 vulnerability, an argument injection issue in PHP-CGI. You can use the provided Bash, Go, and Python scripts to test a list of domains for this vulnerability. I've als...

waf-tester

🛡️ WAF Tester Enterprise WAF Evaluation Tool — Real attack payloads. Real results. Compliance-ready reports. WAF Tester evaluates Web Application Firewalls by sending real attack payloads to a user-supplied URL and reporting whether they are blocked. Available as a Windows desktop app Electron and...

Veritensor

🛡️ Veritensor: AI Data & Artifact Security Veritensor is the Anti-Virus for AI Artifacts and the ultimate Firewall for RAG pipelines. It secures the entire AI Supply Chain by scanning the artifacts that traditional SAST tools miss: Models, Datasets, RAG Documents, and Notebooks. Veritensor shift...

vxlang-page

VxLang Contents Docs What is VxLang? Supported File Formats Preview Virtualization Preview Dual-Mode Preview Obfuscation Preview Code-Flattening Preview Tutorial Usage & Guide-Code Precautions How to get the full version Donate and Subscription Patreon Link Event 2026 June Event Extension-Codes a...

CVE-2026-41089

CVE-2026-41089 — Windows Netlogon CLDAP Stack Buffer Overflow RCE Exploit CVE-ID: CVE-2026-41089 CVSS: 9.8 Critical CWE: CWE-121 Stack-based Buffer Overflow Attack Vector: UDP/389 CLDAP SearchRequest Impact: Remote Code Execution RCE / Denial of Service DoS Affected Versions: Windows Server 2012 ...