sshamble

sshamble SSHamble is a research tool for SSH implementations that includes: Interesting attacks against authentication Post-session authentication attacks Pre-authentication state transitions Authentication timing analysis Post-session enumeration This project is a work-in-progress and likely to...

scallion

2020 Project Update Scallion was a hobby project to learn OpenCL and RSA. We are not currently maintaining scallion. It has bitrotted in two important ways: 1. Tor has moved on to v3 Onion addresses, which scallion does not support. Old v2 addresses will stop working in October of 2021. The new...

OneNoteAnalyzer

OneNoteAnalyzer A C based tool for analyzing malicious OneNote documents Description Recently we came across few malicious OneNote Documents been distributed in-the-wild by various threat actors. This gave us an idea to develop "OneNoteAnalyzer" which would help in analysing such malicious OneNot...

isowall

isowall This is a mini-firewall that completely isolates a target device from the local network. This is for allowing infected machines Internet access, but without endangering the local network. Building This project depends upon libpcap, and of course a C compiler. On Debian, the following shou...

flare-emu

flare-emu flare-emu marries a supported binary analysis framework, such as IDA Pro or Radare2, with Unicorn’s emulation framework to provide the user with an easy to use and flexible interface for scripting emulation tasks. It is designed to handle all the housekeeping of setting up a flexible an...

SigLens

SigLens Windows Artifact Analysis & Multi-Engine Security Scanner Created by St0rn / CybersecurIT Static PE analysis, YARA correlation, Windows AMSI, multi-engine AV scanning, PDB/source mapping, prefix-based detection-boundary narrowing, structural script analysis and forensic reporting. What is...

CVE-2025-5548

🛠️ Environment Setup Target platform: Windows This guide details all the tools required to perform vulnerability analysis and fuzzing of the binary. Follow the steps in order to ensure everything is set up correctly. 🐍 Python 3 Download: python.org/downloads/windows Python 3 is the language we wil...

dnstake

DNSTake A fast tool to check missing hosted DNS zones that can lead to subdomain takeover. What is a DNS takeover? DNS takeover vulnerabilities occur when a subdomain subdomain.example.com or domain has its authoritative nameserver set to a provider e.g. AWS Route 53, Akamai, Microsoft Azure, etc...

CVE-2021-30357_CheckPoint_SNX_VPN_PoC

CVE-2021-30357CheckPointSNXVPNPoC Proof-of-Concept for privileged file read through CheckPoint SNX VPN Linux Client. Affected Version CheckPointVPNSNXLinux800007075.sh MD5 Checksum: 4372e9936e2dfb1d1ebcef3ed4dd7787 Exploit To exploit just load any file as SNX config using the -f paremeter. If the...

pbtk

pbtk - Ingeniería inversa de aplicaciones Protobuf Protobuf es un formato de serialización desarrollado por Google y utilizado en un número creciente de aplicaciones Android, web, de escritorio y más. Consiste en un lenguaje para declarar estructuras de datos , que luego se compila a código u otr...

SignHere

SignHere Introduction CVE-2017-11882 - The unique vulnerability identifier of Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allows an attacker to run code in the context of the current user without...

nuclei-burp-plugin

Plugin de Burp para Generar Plantillas de Nuclei Un plugin de Burp Suite diseñado para ayudar con la generación de plantillas de nuclei. Características Generación de matchers para plantillas Creación de matchers Word y Binary utilizando fragmentos de respuesta seleccionados del historial de Prox...

ssl-kill-switch2

SSL Kill Switch 2 Blackbox tool to disable SSL/TLS certificate validation - including certificate pinning - within iOS and macOS applications. Second iteration of https://github.com/iSECPartners/ios-ssl-kill-switch . Description Once loaded into an iOS or macOS application, SSL Kill Switch 2 will...

Clutch

Clutch Clutch is a high-speed iOS decryption tool. Clutch supports the iPhone, iPod Touch, and iPad as well as all iOS version, architecture types, and most binaries. Clutch is meant only for educational purposes and security research. Clutch requires a jailbroken iOS device with version 8.0 or...

CVE-2017-16995

Okay, here's an example README.md that matches the repository in the image: CVE-2017-16995 This repository contains 2 exploit programs in C from ExploitDB for privilege escalation on Ubuntu 16.04 by exploiting the CVE-2017-16995 vulnerability. 📂 File List - 44298.c - 45010.c Both are exploits usi...

CVE-2025-53632

CVE-2025-53632 This repository contains an exploit of CVE-2025-53632 affecting Chall-Manager !WARNING The way Chall-Manager deals with scenarios, it is still completly exploitable without the zip slip: simply tamper the pulumi binary from the scenario such that the next execution runs your...

CVE-2025-8088

Technical Deep Dive: CVE-2025-8088 - The Resilient Path Traversal Disclaimer: This content is for educational and research purposes only. Do not use this information for any malicious activities. Today, we're taking a deep dive into a fascinating path traversal vulnerability, tracked as...

external_tcpdump_CVE-2018-14469

tcpdump To report a security issue please send an e-mail to [email protected]. To report bugs and other problems, contribute patches, request a feature, provide generic feedback etc please see the file CONTRIBUTING in the tcpdump source tree root. TCPDUMP 4.x.y Now maintained by "The Tcpdump...

AD-description-password-finder

AD description password finder The purpose of this tool is to check if passwords are stored in clear text in the description of Active Directory accounts. The requirements are : having a copy of the ntds.dit and SYSTEM hive If you don't have python, you can use the .exe version of the scripts in...

test-your-sysadmin-skills

:star: "A great Admin doesn't need to know everything, but they should be able to come up with amazing solutions to impossible projects. " - cwheeler33 ServerFault :star: "My skills are making things work, not knowing a billion facts. ... If I need to fix a system I’ll identify the problem, check...