539 matches found
m3
m3 A simple and scalable Android bot emulation framework. A detailed explanation can be found here. This project was first published at Black Hat Europe 2021's Arsenal. Aside from the documentation in the code both in-line and as JavaDoc, one can learn more about extending the framework here. The...
gerobug
Gerobug: The First Open Source Bug Bounty Platform. Gerobug The first open source self-managed bug bounty platform. Are you a company, planning to have your own bug bounty program, with minimum budget? WE GOT YOU! We are aware that some organizations have had difficulty establishing their own bug...
antisquat
AntiSquat AntiSquat leverages AI techniques such as natural language processing NLP, large language models ChatGPT and more to empower detection of typosquatting and phishing domains. How to use Clone the project via git clone https://github.com/redhuntlabs/antisquat. Install all dependencies by...
arya
Arya - The Reverse YARA Arya is a unique tool that produces pseudo-malicious files meant to trigger YARA rules. You can think of it like a reverse YARA because it does exactly the opposite - it creates files that matches your rules. You can read more about Arya and how it works in our blog. Intro...
cdf
CDF – crypto differential fuzzing CDF is a tool to automatically test the correctness and security of cryptographic software. CDF can detect implementation errors, compliance failures, side-channel leaks, and so on. CDF implements a combination of unit tests with "differential fuzzing", an approa...
jsql-injection
Description jSQL Injection is a lightweight application used to find database information from a server. It's free , open source and cross-platform for Windows, Linux and Mac, and it works with Java from version 21 to 25. jSQL Injection is also part of the official penetration testing distributio...
Certify
Certify Certify is a C tool to enumerate and abuse misconfigurations in Active Directory Certificate Services AD CS. @harmj0y and @tifkin are the primary authors of Certify and the the associated AD CS research blog and whitepaper. Table of Contents Certify Usage Defensive Considerations Compile...
fuzzable
Fuzzable Framework for Automating Fuzzable Target Discovery with Static Analysis Introduction Vulnerability researchers conducting security assessments on software will often harness the capabilities of coverage-guided fuzzing through powerful tools like AFL++ and libFuzzer. This is important as ...
shellnoob
ShellNoob Escribir shellcodes siempre ha sido muy divertido, pero algunas partes son extremadamente aburridas y propensas a errores. ¡Concéntrate solo en la parte divertida y usa ShellNoob! Para una visión rápida, consulta las diapositivas de la charla en Black Hat Arsenal: link ¿Quieres...
blackhat-python3
Python 3 "Black Hat Python" Source Code Source code for the book "Black Hat Python" by Justin Seitz. The code has been fully converted to Python 3, reformatted to comply with PEP8 standards and refactored to eliminate dependency issues involving the implementation of deprecated libraries. Althoug...
HackSysExtremeVulnerableDriver
HackSys Extreme Vulnerable Driver root@kitploit: ooooo ooooo oooooooooooo oooooo oooo oooooooooo. 888' 888' 888' 8 888. .8' 888' Y8b 888 888 888 888. .8' 888 888 888ooooo888 888oooo8 888. .8' 888 888 888 888 888 " 888.8' 888 888 888 888 888 o 888' 888 d88' o888o o888o o888ooooood8 8' o888bood8P'...
Blackhat-USA-2022-Materials
Materiales de Presentación de Black Hat USA 2022 Materiales de presentación para mis charlas Briefing y Arsenal de Black Hat USA 2022 Black Hat USA Briefing - Controlling the Source: Abusing Source Code Management Systems Descripción...
My-Presentation-Slides
Le Mie Slide di Presentazione Le slide delle presentazioni pubbliche di Orange Tsai. Puoi trovarmi su: Blog: https://blog.orange.tw/ Email: [email protected] Twitter: @orange8361 2024 WorstFit: Svelare i Transformer nascosti in Windows ANSI! Black Hat Europe DEVCORE CONF 2025 Confusion...
PoC-public
PoC-public Este repositório reúne código de PoC que publicamos em várias conferências de segurança. Black Hat EU 2020 CODE BLUE 2021 Black Hat Asia 2023 CODE BLUE 2023...
DakshSCRA v0.38-beta
Daksh SCRA Source Code Review Assist root@kitploit: Author: - Debasis Mohanty [email protected] - Twitter / X: @coffeensecurity - www.coffeeandsecurity.com About Daksh SCRA Daksh SCRA Source Code Review Assist tool is built to enhance the efficiency of the source code review process, providi...
XPRTestSuite
XProtect Remediator Test Suite Eine Sammlung von Skripten und Dokumenten, die zukünftige Forschung zu XProtect Remediator XPR unterstützen soll, vorgestellt auf der Black Hat USA 2025 Über dieses Repository Dieses Repository enthält: Die Skripte zur Erstellung harmloser minimaler Dateien und...
GitHunt
BHEU Demos Dieses Repository enthält drei Demonstrationen für den Black Hat Europe 2025-Vortrag The Forensic Trail On GitHub: Hunting For Supply Chain Activity 1. potentialattacksdemo : Eine Flask-Webanwendung, die eine Demonstration zur Identifizierung und Untersuchung eines Angriffs auf Basis d...