lua-ffi-libinjection

Name lua-resty-libinjection - LuaJIT FFI bindings for libinjection Status This library is in active development and is production ready Description This library provides FFI bindings for libinjection, a SQL/SQLi and XSS tokenizer and analyzer. Installation Install this library as you would any...

barf-project

BARF : Framework de Análisis Binario e Ingeniería Inversa El análisis de código binario es una actividad crucial en muchas áreas de las ciencias de la computación y disciplinas de ingeniería de software, que abarcan desde la seguridad del software y el análisis de programas hasta la ingeniería...

Sudo-Privilege-Escalation-Linux-CVE-2025-32463-and-CVE-2025-32462

⚠️ CVE‑2025‑32463 & CVE‑2025‑32462 – Sudo Privilege Escalation Flaws in Linux 🧠 TL;DR In July 2025, two newly disclosed vulnerabilities in the sudo utility—CVE-2025-32463 and CVE-2025-32462 —have put numerous Linux distributions at risk. The more severe of the two, CVE‑2025‑32463 , carries a CVSS...

React2Shell-CVE-2025-55182-Testing-Environment

React2Shell CVE-2025-55182 Testing Environment A containerized testing environment for CVE-2025-55182, a critical 10.0 CVSS Remote Code Execution vulnerability in React Server Components. ⚠️ WARNING This environment is intentionally vulnerable and should ONLY be used for: Security research and...

vulhunt

VulHunt Community Edition VulHunt ist ein Framework zur Schwachstellensuche, das vom Research-Team von Binarly entwickelt wurde. Es soll Sicherheitsforschern und -praktikern dabei helfen, Schwachstellen in Software-Binärdateien und UEFI-Firmware zu identifizieren. VulHunt basiert auf Binarlys...

trivy-db

trivy-db Panoramica trivy-db è uno strumento CLI e una libreria per gestire il database di Trivy. Libreria Trivy usa trivy-db internamente per gestire il database delle vulnerabilità. Questo database contiene informazioni sulle vulnerabilità provenienti da NVD, Red Hat, Debian, ecc. CLI Lo...

afrog v3.5.8

A Security Tool for Bug Bounty, Pentest and Red Teaming English • 中文 What is afrog afrog is a high-performance security scanning toolkit built for bug bounty, pentest, and red team workflows. It combines fast target probing, built-in vulnerability checks, custom PoC authoring, and SDK-driven...

pwninit

pwninit Ein Tool zur Automatisierung des Starts von Binary-Exploit-Challenges Funktionen Challenge-Binary als ausführbar markieren Einen Linker ld-linux.so. herunterladen, der die bereitgestellte libc ohne Segfault laden kann Debug-Symbole herunterladen und die libc entstrippen Das Binary mit...

refinery

Binary Refinery docs tests codecov pypi High Octane Triage Analysis || || || || || | / / / \ || ==||=====|| | / |/ \ /==| / \ ===| '======|| | \ | | \ | \ /| | || || /||/ / | | | || =========''====/=========/ /==||=====||======' \ / / Il Binary Refinery™ è una raccolta di script Python che...

semgrep-rules

semgrep-rules "The attack surface is the vulnerability. Finding a bug there is just a detail." -- Mark Dowd "Some details are more important than others." -- Fedor G. Pikus Una raccolta delle mie regole Semgrep per facilitare la ricerca di vulnerabilità. Articoli del blog...

alterx

AlterX Funzionalità • Installazione • Utilizzo • Eseguire AlterX • Unisciti a Discord Generatore di wordlist di sottodomini veloce e personalizzabile tramite DSL. Funzionalità Veloce e personalizzabile Arricchimento automatico delle parole Variabili predefinite Pattern configurabili Pattern Minin...

yolo-cage

yolo-cage: autonomous coding agents that do no harm You're a responsible engineer. You'd never just let an AI run roughshod through your most sensitive systems and codebases. That's why you'd never just shut off the safeguards for a tool like Claude Code. It asks permission for every dangerous...

ablation

Ablation is a self-contained reverse engineering framework. It depends on neither legacy tools nor an MCP server, which removes the attack surface associated with MCP. When used with Codex or Claude Code, it operates as an autonomous reverse engineering system. Capabilities Analysis: semantic...

community-id-spec

Hashing dei flussi Community ID Quando si elaborano dati di flusso da una varietà di applicazioni come Zeek e Suricata, è spesso desiderabile spostarsi rapidamente da un dataset all'altro. Sebbene le informazioni sulla tupla di flusso richieste siano solitamente presenti nei dataset, i dettagli d...

recomposer

Recomposer.py ¿Alguna vez has tenido esa sensación de inseguridad al subir tus binarios de malware a VirusTotal u otros sitios de antivirus porque se pueden buscar binarios por sus hashes? Ejemplo: https://github.com/mubix/vt-notify ¡Siéntete un poco más seguro con Recomposer! Recomposer tomará t...

CVE-2024-32258

Overview CVE ID : CVE-2024-32258 Type : Path Traversal Vendor : FCEUX Products : FCEUXNetPlay Version : 2.7.0 Fix : 48b48e7c13be1b949074f42660a33c7ef57135e1 Description FCEUX is a NES Emulator that can take us back to our childhood. It provides multiple interesting features, such as two players...

CVE-2024-26574

CVE-2024-26574 Wondershare Filmora v.13.0.51 - Insecure Permissions Privilege Escalation Description: Insecure Permissions vulnerability in Wondershare Filmora and versions below allows a local unprivileged attacker to execute arbitrary code as SYSTEM via a crafted script to the controlable path...

CVE-2023-0386-OverlayFS

CVE-2023-0386 - OverlayFS / FUSE Original CVE source written by xkaneiki: https://github.com/xkaneiki/CVE-2023-0386/tree/main Rewritten so the exploit can be run in 1 shell original exploit requires 2 shells. Compile make all Create mount point for fuse filesystem mkdir -p /tmp/fusepwn/lower Star...

CVE-2025-14174-analysis

CVE-2025-14174 Analysis: ANGLE Metal Staging Buffer Out-of-Bounds Write Technical analysis and proof-of-concept for CVE-2025-14174 | ---|--- CVE| CVE-2025-14174 Severity| High Exploited ITW| Yes - targeted attacks on iOS 26 Affected| iOS Safari, macOS Chrome/Chromium/Electron not macOS Safari...

jscd

jscd Reverse bytenode-compiled .jsc files back to JavaScript. Static parsing only: one pure-Rust binary — no patched V8, no Node runtime, no network. Supports Node 8.0.0 → 26.10.0 510 releases / 36 V8 minors; ≈ 25k.jsc files pass the tests with 0 failures 31 Node lines × 41 fixtures, compiled wit...