apm

APM A better local password manager for everyone. APM is a fast, zero-knowledge CLI password manager written in Go and Rust. It stores 25+ structured secret types in a single encrypted vault — from passwords and TOTP codes to SSH keys, medical records, photos, and binary files. Two binaries ship...

cve-2025-55182-test-lab-windows

CVE-2025-55182 React2Shell 测试 ⚠️ 警告 : 包含实际可用的远程代码执行RCE漏洞。 📋 目录 概述 漏洞信息 快速开始 实际攻击演示 测试环境 WAF防御规则 文件结构 参考资料 法律声明 概述 CVE-2025-55182 React2Shell 漏洞测试的容器测试环境。 主要特点 ✅ 真实漏洞复现 - React 19.1.0 / Next.js 15.1.0 环境 ✅ RCE攻击成功 - 已确认实际命令执行 ✅ WAF防御测试 - NGINX及Apache ModSecurity规则配置 ✅ 补丁版本对比 - 有漏洞版本 vs 已修补版本测试 ✅...

BridgeHead

BridgeHead Acceso nativo en C++ a Active Directory a través de ADWS, sin .NET, sin WCF, sin pila HTTP. BridgeHead es una librería estática en C++20 que implementa la pila completa del protocolo Active Directory Web Services ADWS directamente sobre TCP. Nombrado en honor al servidor puente de AD, ...

binlex

| Binlex - Un framework lexer de rasgos genéticos binarios Si los maldevs creen que su binario es FUD, están a punto de tener una crisis existencial. ---|--- Binlex extrae instrucciones, bloques básicos y funciones de binarios y emite rasgos JSON buscables para flujos de trabajo de ingeniería...

ToolsFx

ToolsFx English|中文 前言 为什么开发这个工具? 每次加解密需要找在线工具进行处理,效率低 在线工具支持的功能不全或者某些处理结果不对 如查错网AES CFB/OFB 加密错误 大部分工具不支持文件加密 第三方PC端工具功能不全,体验不好,不支持跨平台 如PYG密码工具箱 主要功能 编解码 wiki base64 urlBase64 base16/32/36/45/58/62/85/91/92/100 base58check UrlEncode Unicode js hex\x61/js octal\140 binary/octal/decimal/hex...

rehex

Reverse Engineers' Hex Editor A cross-platform Windows, Linux, macOS, BSD hex editor for reverse engineering, and everything else. An online copy of the manual can be accessed here: solemnwarning.net/rehex/manual/. Features Large 1TB+ file support Decoding of integer/floating point value types...

awesome-threat-intelligence

awesome-threat-intelligence Una lista curada de recursos increíbles de Threat Intelligence Una definición concisa de Threat Intelligence: conocimiento basado en evidencia, incluidos contexto, mecanismos, indicadores, implicaciones y consejos prácticos, sobre una amenaza o peligro existente o...

machofile

machofile machofile es un módulo para analizar archivos binarios Mach-O, con un enfoque en el análisis de malware y la ingeniería inversa. Inspirado en el pefile de Ero Carrera, este módulo pretende ofrecer capacidades similares pero para binarios Mach-O. El material de referencia y la...

faraday v5.25.0

Open Source Vulnerability Manager Security has two difficult tasks: designing smart ways of getting new information, and keeping track of findings to improve remediation efforts. With Faraday, you may focus on discovering vulnerabilities while we help you with the rest. Just use it in your termin...

shellnoob

ShellNoob Writing shellcodes has always been super fun, but some parts are extremely boring and error prone. Focus only on the fun part, and use ShellNoob! For a quick overview, check the slides for the Black Hat Arsenal talk: link Want to contribute? Feature request? Bug report? Swears? All...

decomp2dbg

decomp2dbg 逆向工程涉及静态（反编译器）和动态（调试器）分析，然而我们经常使用这些分析却没有在两者之间共享知识。在对静态二进制文件进行逆向时，在调试器汇编和你在反编译中还原的符号之间进行上下文切换可能效率低下。 decomp2dbg旨在通过引入一个通用的API用于反编译器到调试器的符号同步，缩短反编译器和调试器之间的上下文切换差距。实际上，它赋予了逆向工程师使用调试器的能力，同时拥有他们在反编译器中恢复的符号和反编译行。 想看看decomp2dbg实际应用的样子？请观看在CactusCon...

gau

getallurls gau getallurls gau fetches known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, Common Crawl, and URLScan for any given domain. Inspired by Tomnomnom's waybackurls. Resources Usage Installation ohmyzsh note Usage: Examples: $ printf example.com | gau $ cat domains.tx...

wa-tunnel

wa-tunnel - TCP Tunneling through Whatsapp This is a Baileys based piece of code that lets you tunnel TCP data through two Whatsapp accounts. This can be usable in different situations, for example network carriers that give unlimited whatsapp data or airplanes where you also get unlimited social...

netwatch

NetWatch Network diagnostics in your terminal. netwatch --view dense. Four boxes, no chrome, every keybind on a border. Download grows up from the axis, upload grows down. One binary, no config. sudo netwatch and you have live capture with L7 decode, process attribution where available, and a...

CVE-2025-55182

🚨 CVE-2025-55182 — React2Shell CVE-2025-55182 是一个影响 React Server Components RSC 的严重远程代码执行 RCE 漏洞。 📌 概述 此漏洞允许未经身份验证的攻击者 在易受攻击的服务器上执行任意代码。 问题源于 React Server Component 服务器函数端点的不安全反序列化 。 验证不当导致特制请求能够执行恶意负载。 🧨 影响 🌍 可网络利用 🔓 无需认证 ⚡ 低攻击复杂度 💥 可能完全控制服务器 📈 CVSS 评分：10.0（最高严重性） 由于基于 React 的框架广泛部署，攻击面极大。 📦...

secretlint

Secretlint Secretlint es una herramienta de linting conectable para evitar la confirmación de credenciales. Características Escáner : Encuentra credenciales en un proyecto y las reporta Amigable con el proyecto : Fácil de configurar en tu proyecto e integrar con servicios de CI Hook de Pre-Commit...

Lucky-Spark

LUCKY-SPARK ⟪ LUCKY-SPARK ⟫ is a stager designed for shellcode payloads staged with http/https like sliver or on github raw. It uses modern obfuscation and evaion methods like sliding window just-in-time decryption of the payload and cpu instruction patching. By default it creates an executable...

katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

whitelist-bypass

Omisión de Lista Blanca Tuneliza el tráfico de internet a través de plataformas de videollamadas VK Call, Yandex Telemost, WB Stream para eludir la censura de listas blancas gubernamentales. Configuración Guía de configuración paso a paso en ruso: docs/SETUP.md Cómo funciona Hay dos modos de túne...

udp2raw

Udp2raw-tunnel udp2raw tunnel，通过raw socket给UDP包加上TCP或ICMP header，进而绕过UDP屏蔽或QoS，或在UDP不稳定的环境下提升稳定性。可以有效防止在使用kcptun或者finalspeed的情况下udp端口被运营商限速。 支持心跳保活、自动重连，重连后会恢复上次连接，在底层掉线的情况下可以保持上层不掉线。同时有加密、防重放攻击、信道复用的功能。 English udp2raw+kcptun stepbystep教程 udp2raw+finalspeed stepbystep教程 udp2raw wiki 提示：...