frostbyte

FrostByte Progolue: In the past few days I've been experimenting with the AppDomain manager injection technique had a decent success with it in my previous Red Team engagements against certain EDRs. Although, this is really good for initial access vector, I wanted to release a POC which will help...

ecapture

eCapture 旁观者 Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. English · 汉字 !IMPORTANT Supports Linux and Android on x8664 kernel 4.18+ and aarch64 kernel 5.5+. The kernel requirement applies per CPU architecture for both Linux and Android. Requires root privileges or...

vault

Vault Please note : We take Vault's security and our users' trust very seriously. If you believe you have found a security issue in Vault, please responsibly disclose by contacting us at [email protected]. Website: developer.hashicorp.com/vault Announcement list: Google Groups Discussion...

Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak System

Summary Multiple vulnerabilities were found in openSSL used by IBM OS Image for Red Hat Enterprise Linux Systems shipped with IBM Cloud Pak System. Vulnerabilities were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details CVEID:CVE-2026-34181 DESCRIPTION: Issue Summary: The...

ABD

Désobfuscation binaire avancée Ce dépôt contient les supports de cours de Désobfuscation binaire avancée au Global Cybersecurity Camp GCC Tokyo et au Security Camp National Workshop en 2020. Résumé du cours Le génie logiciel inversé n'est pas facile, surtout si un code binaire est obscurci. Une...

dockle

Dockle - Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start Dockle helps you: 1. Build Best Practice Docker images 2. Build secure Docker images Checkpoints includes CIS Benchmarks $ brew untap goodwithtech/dockle who use 0.1.16 or older version $ bre...

dockle

Dockle - Linter d'images conteneur pour la sécurité, aidant à construire une image Docker selon les meilleures pratiques, facile à démarrer Dockle vous aide à : 1. Construire des images Docker selon les meilleures pratiques 2. Construire des images Docker sécurisées Les points de contrôle incluen...

libloong

Bibliothèque de sandboxing LoongArch64 libloong est une bibliothèque d'émulation LoongArch 64 bits haute performance conçue pour l'intégration et le scripting à haute fréquence. Construite sur l'architecture de libriscv, elle offre les performances d'interpréteur 64 bits les plus rapides...

k8scout

k8scout Bêta — Un moteur de chemins d'attaque Kubernetes en un seul binaire pour les évaluations de sécurité autorisées. Déposez-le dans un pod compromis, exécutez-le, et obtenez une carte de chaque chemin d'escalade réaliste — de votre point d'appui actuel jusqu'à l'administrateur du cluster,...

Squre

SQURE S ecure Q uality U ncrackable R untime E ncryption - Kit de protection binaire avancé pour les fichiers PE Windows. Fonctionnalités SQURE offre une protection multicouche contre le rétro-ingénierie, le débogage et la falsification : Fonctionnalité| Description ---|--- Nanomite| Remplace les...

CVE-2026-0073-PoC-Exploit

CVE-2026-0073 - Android ADB Wireless Debugging Auth Bypass Zero-Click | Remote Shell | Network Scanner | Educational Security Research Tool ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only...

sandfly-entropyscan

What is sandfly-entropyscan? sandfly-entropyscan is a utility to quickly scan files or running processes and report on their entropy measure of randomness and if they are a Linux/Unix ELF type executable. Some malware for Linux is packed or encrypted and shows very high entropy. This tool can...

tenet

Tenet - A Trace Explorer for Reverse Engineers Overview Tenet is an IDA Pro plugin for exploring execution traces. The goal of this plugin is to provide more natural, human controls for navigating execution traces against a given binary. The basis of this work stems from the desire to research ne...

lava

LAVA: Large Scale Automated Vulnerability Addition Evaluating and improving bug-finding tools is currently difficult due to a shortage of ground truth corpora i.e., software that has known bugs with triggering inputs. LAVA attempts to solve this problem by automatically injecting bugs into...

binbloom

About The purpose of this project is to analyse a raw binary firmware and determine automatically some of its features. This tool is compatible with all architectures as basically, it just does simple statistics on it. Main features: Loading address : binbloom can parse a raw binary firmware and...

dnsdiag

DNS Measurement, Troubleshooting and Security Auditing Toolset Have you ever wondered if your ISP is intercepting your DNS traffic? Have you noticed any unusual behavior in your DNS responses, or been redirected to the wrong address and suspected something might be off with your DNS? We offer a...

spiderfoot

SpiderFoot is an open source intelligence OSINT automation tool. It integrates with just about every data source available and utilises a range of methods for data analysis, making that data easy to navigate. SpiderFoot has an embedded web-server for providing a clean and intuitive web-based...

cloudprober

cloudprober.org | Start Monitoring Now Cloudprober: Reliable System Monitoring, Simplified! Cloudprober supercharges your monitoring with active probes a.k.a. synthetic monitoring to ensure your systems—homelabs, microservices, APIs, websites, or cloud-to-on-prem connections—run smoothly. See thi...

sloppy-joe

Attraper les dépendances hallucinées, typosquattées et non canoniques avant qu'elles n'atteignent la production. cargo install sloppy-joe L'attaque à la chaîne d'approvisionnement LiteLLM mars 2026 a compromis un paquet avec 97 millions de téléchargements mensuels. Les attaquants ont volé des...

Zircolite

Standalone SIGMA-Based Detection Tool for EVTX, Auditd, Sysmon for Linux, XML, CSV, or JSONL/NDJSON Logs Zircolite applies Sigma detection rules to: MS Windows EVTX EVTX, XML, and JSONL formats Auditd logs Sysmon for Linux EVTXtract CSV and XML logs JSON Array logs Key Features Format detection :...