miasm

What is Miasm? Miasm is a free and open source GPLv2 reverse engineering framework. Miasm aims to analyze / modify / generate binary programs. Here is a non exhaustive list of features: Opening / modifying / generating PE / ELF 32 / 64 LE / BE Assembling / Disassembling X86 / ARM / MIPS / SH4 /...

nono

Built by the team that brought you Sigstore The standard for secure software attestation, used by PyPI, npm, brew, and Maven Central !NOTE In the lead-up to a 1.0 release, APIs are stabilizing. API changes may still occur where necessary, but will be kept to a minimum. !IMPORTANT Organization...

heappy

🙂 Heappy: a happy heap editor Heappy is an editor based on gdb/gef that helps you to handle the heap during your exploitation development. The project should be considered a didactic tool useful to understand the evolution of the heap during the process life cycle. It has been created to simplify...

dnsglobe

dnsglobe 一款面向终端的世界级 DNS 传播检查工具 —— 一个 Rust TUI，它会并行查询全球 34 台公共 DNS 解析器，比较它们的应答，并在世界地图上显示你的记录的传播情况。 可以把 dnschecker.org / whatsmydns.net 想象成就在你的终端里，还带监视模式：启动一次检查后，它会持续重新轮询，直到记录在全球各地都完成传播。 解析器覆盖全球任播网络（Google、Cloudflare、Quad9）、北美、欧洲、俄罗斯、中东、东亚以及南半球（Telstra AU、SafeSurfer NZ、UOL...

trajan

Trajan: CI/CD Security Scanner Trajan scans CI/CD pipelines for security vulnerabilities that attackers use to compromise software supply chains. It supports GitHub Actions, GitLab CI, Azure DevOps, Jenkins, and JFrog. What it does Trajan parses workflow YAML files, builds dependency graphs, runs...

100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer

The Computer Emergency Response Team of Ukraine CERT-UA has identified more than 100 compromised websites that have been injected with malicious JavaScript to serve an information-stealing malware called LunexStealer aka Psychedelic Stealer. The activity, which was observed by the agency in...

Loki

我编写了一个名为 LOKI RS（Rust）的新开源 YARA 扫描器。 LOKI Python 现已正式废弃。 重要说明 该项目现已进入非活跃维护模式。这意味着我会合并针对错误修复和简单问题的拉取请求，但目前没有时间添加新功能或扩展现有功能。多年来，我一直在开发一款更先进的扫描器 THOR，它在很多方面都优于本项目。有一款免费版本 THOR Lite 可供使用；它速度更快、更稳定，并在我们的 CI 环境中经过严格测试——是一个更好的解决方案。您可以在此处找到开源、免费和商业扫描器的对比：此处。 我还开始开发一个基于 Rust 的 LOKI 版本，名为 LOKI...

seekr

A multi-purpose toolkit for gathering and managing OSINT-Data with a neat web-interface. Introduction Seekr is a multi-purpose toolkit for gathering and managing OSINT-data with a sleek web interface. Our desktop view enables you to have all of your favourite OSINT tools integrated in one. The...

x64dbg

x64dbg An open-source binary debugger for Windows, aimed at malware analysis and reverse engineering of executables you do not have the source code for. There are many features available and a comprehensive plugin system to add your own. You can find more information on the blog! Screenshots |...

coraza

Coraza - Web Application Firewall Coraza is an open source, enterprise-grade, high performance Web Application Firewall WAF ready to protect your beloved applications. It is written in Go, supports ModSecurity SecLang rulesets and is 100% compatible with the OWASP Core Rule Set v4. Website:...

CVE-2018-8941

CVE-2018-8941：D-Link DSL-3782 代码执行（概念验证） Adam Simuntis :: https://twitter.com/adamsimuntis Mindaugas Slusnys :: https://twitter.com/mislusnys 缓冲区溢出漏洞发现于 /userfs/bin/tcapi 二进制文件中，该文件在 Web GUI 中作为“诊断”功能的包装器。 认证用户可以通过 set DiagnosticsEntry 函数向 /user/bin/tcapi 二进制文件传递一个过长的缓冲区作为 'Addr' 参数，从而导致内存损坏。...

PyExfil

PyExfil 压力测试检测与创意 PyExfil 最初只是一个概念验证（PoC）和某种游乐场，后来逐渐发展成更有分量的东西。在我看来，它仍然是一个杂乱的 PoC，需要大量工作和测试才能变得“稳定”。PyExfil 的目的是提供尽可能多的外泄技术（现在也包括通信技术），这些技术可能 被各种威胁行为者/恶意软件利用，以绕过各种检测和缓解工具与技术。你可以在官方 GitHub 页面 追踪变更。...

keimpx

Introduction keimpx is an open source tool, released under the Apache License 2.0. It can be used to quickly check for valid credentials across a network over SMB. Credentials can be: Combination of user / plain-text password. Combination of user / NTLM hash. Combination of user / NTLM logon...

moonwalk

moonwalk Cover your tracks during Linux Exploitation / Penetration Testing by leaving zero traces on system logs and filesystem timestamps. 📖 Table of Contents Introduction Features Installation Usage Contribution License ℹ️ Introduction moonwalk is a 400 KB single-binary executable that can clear...

reverse_ssh

Reverse SSH Crédito artístico a https://www.instagram.com/smart.hedgehog.art/ ¿Quieres usar SSH para shells reversas? Ahora puedes. Administra y conéctate a shells reversas con la sintaxis nativa de SSH Reenvío dinámico, local y remoto Implementaciones nativas de SCP y SFTP para recuperar archivo...

Juniper-exploit-CVE-2023-36845

CVE-2023-36845 描述 CVE-2023-36845 是一项值得注意的 PHP 环境变量操纵漏洞，影响 Juniper SRX 防火墙和 EX 交换机。虽然 Juniper 将此漏洞归类为中等严重性，但在本文中，我们将阐述如何利用这一单一漏洞实现远程、未经身份验证的代码执行。 搜索 - Shodan title:"Juniper Web Device Manager" title:"Juniper" http.favicon.hash:2141724739 使用方法 🛠 检测 python3 CVE-2023-36845.py -f targets.txt -o...

Nuclei_Templates

🎯 Nuclei Templates A large personal collection of 50,000+...

gitcolombo

Gitcolombo OSINT tool that extracts identities — names, emails, and links between seemingly unrelated accounts — from git repositories and GitHub. Python CLI gitcolombo.py — clones repos, walks git log, and can call the GitHub API for richer signals. Web version gitcolombo.html — a single static...

xalgorix

Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...

xalgorix

Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...