inspector

MCP Inspector A developer tool for inspecting Model Context Protocol MCP servers. It ships as a single package, @modelcontextprotocol/inspector, that provides three ways to inspect a server: Web — a Vite + React + Mantine single-page app with a Node backend. CLI — a scriptable command-line client...

crlfuzz

CRLFuzz A fast tool to scan CRLF vulnerability written in Go Resources Installation from Binary from Source from GitHub Usage Basic Usage Flags Target Single URL URLs from list from Stdin Method Data Adding Headers Using Proxy Concurrency Silent Verbose Version Library Help & Bugs License Version...

ulexecve

Démarrage rapide Exécutez des binaires ELF Linux dynamiques ou statiquement compilés sans jamais appeler execve. cat /bin/echo | ulexecve - hello hello Introduction Cet outil Python s'appelle ulexecve et signifie userland execve. Il vous permet d'exécuter des binaires ELF arbitraires sur des...

whids

IMPORTANT: this README and other documentation is not updated to reflect the changes made to latest beta releases as a lot of changes happened. All this will be updated in time when a stable version will be released see Roadmap until next release. Feel free to run beta releases on your own and as...

CPENT-iLabs

🛡️ CPENT v2 iLabs — Practical Penetration Testing Vault !Ce...

windiff

WinDiff About WinDiff is an open-source web-based tool that allows browsing and comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the operating system. The binary database is automatically updated to include information from the latest Windo...

Exploits + Shellcode + GHDB

The Exploit Database Git 저장소 이곳은 Offensive Security가 후원하는 프로젝트인 The Exploit Database의 공식 저장소입니다. 저장소 목록은 다음과 같습니다: Exploits & Shellcodes: gitlab.com/exploit-database/exploitdb Binary Exploits: gitlab.com/exploit-database/exploitdb-bin-sploits Papers: gitlab.com/exploit-database/exploitdb-papers T...

snitch

snitch un ss / netstat plus convivial pour les humains. inspectez les connexions réseau avec une tui propre ou des tableaux stylisés. installation homebrew brew install snitch merci à @bevanjkay d'avoir ajouté snitch à homebrew-core go go install github.com/karol-broda/snitch@latest nixpkgs nix-e...

Scanners-Box

English | 简体中文 | Español Introduction The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵 !TIP 📅 Tired of hunting all over the place for AI agent tools? →Scanners-Box Daily AI Tool Picks Contents !IMPORTANT 🤖 AI & Autonomous Agents The...

gcp_scanner

Disclaimer This project is not an official Google project. It is not supported by Google and Google specifically disclaims all warranties as to its quality, merchantability, or fitness for a particular purpose. GCP Scanner This is a GCP resource scanner that can help determine what level of acces...

pingap

pingap Before the pingap version is stable, no pull requests will be accepted. If you have any questions, please create a new issue first. Overview Pingap is a high-performance reverse proxy powered by the Cloudflare Pingora . It simplifies operational management by enabling dynamic, zero-downtim...

TOP

TOP all Top Top TopCodeql TOP All bugbounty pentesting CVE-2022- POC Exp Things Table of Contents 2026 year top total 30 2025 year top total 30 2024 year top total 30 2023 year top total 30 2022 year top total 30 2021 year top total 30 2020 year top total 30 2019 year top total 30 2018 year top...

gosentry

gosentry gosentry is a security-focused fork of the Go toolchain, integrating numerous features for state-of-the-art fuzzing campaigns on Go codebases. If you were using go test -fuzz before, you should use gosentry as a replacement. It comes with various fuzzing improvements and bug detectors th...

ipsw

ipsw Швейцарский армейский нож для исследований iOS/macOS ipsw — это набор инструментов командной строки для исследования и обратной разработки прошивок Apple. Скачивайте и распаковывайте IPSW и OTA, изучайте бинарные файлы Mach-O и общие кэши dyld, анализируйте kernelcache и работайте с...

Formbook-Payload-Extraction-XOR-Decryption-Net-Assembly-Analysis

1. x32dbg – Расшифровка зашифрованной конфигурации и выделение памяти Дамп памяти x32dbg показывает, что Formbook расшифровывает данные своей конфигурации и выделяет для них память с помощью NtAllocateVirtualMemory. Ключевые наблюдения: NtAllocateVirtualMemory – выделяет память для расшифрованной...

shellex

shellex AVERTISSEMENT : le code le plus moche du monde Convertisseur de shellcode C en hexadécimal. Merci de considérer un don : https://github.com/sponsors/therealdreg Outil pratique pour coller et exécuter des shellcodes dans IDA PRO, gdb, windbg, radare2, ollydbg, x64dbg, immunity debugger et...

scannerl

Scannerl Scannerl is a modular distributed fingerprinting engine implemented by Kudelski Security. Scannerl can fingerprint thousands of targets on a single host, but can just as easily be distributed across multiple hosts. Scannerl is to fingerprinting what zmap is to port scanning. Scannerl wor...

sickle-pdk

Sickle - Набор для разработки полезных нагрузок Sickle — это инструмент, который я изначально разработал, чтобы повысить свою эффективность как в разработке, так и в понимании шелл-кода. Однако в процессе разработки и использования он превратился в комплект для разработки полезных нагрузок. Хотя...

magika

Magika Magika est un nouvel outil de détection de type de fichier propulsé par l'IA qui s'appuie sur les avancées récentes de l'apprentissage profond pour fournir une détection précise. Sous le capot, Magika utilise un modèle personnalisé, hautement optimisé, qui ne pèse que quelques Mo, et perme...

frostbyte

FrostByte Progolue: In the past few days I've been experimenting with the AppDomain manager injection technique had a decent success with it in my previous Red Team engagements against certain EDRs. Although, this is really good for initial access vector, I wanted to release a POC which will help...