steamer

Steamer Import, manage, search public dumps. Do you have massive amounts of CSV, .sql, .txt, that have credentials, passwords, and hashes inside? Use Steamer to manage them! Load them into a MongoDB database, and either use the console directly, or just use the handy web interface complete with...

applepie

applepie, a hypervisor implementation for Bochs Hello! Welcome to applepie! This is a tool designed for fuzzing, introspection, and finding bugs! This is a hypervisor using the Windows Hypervisor Platform API present in recent versions of Windows specifically this was developed and tested on...

dumpulator

dumpulator Nota: Questo è un prototipo in fase di sviluppo, trattatelo come tale. Le pull request sono benvenute! Potete iniziare conbuone prime issue Una libreria facile da usare per emulare codice in file minidump. Ecco alcuni link a post/video che utilizzano dumpulator: Video introduttivo con...

ExtAnalysis

Funktionen • Installation • Verwendung • Verwendete Module • Screenshots • Lizenz Mit ExtAnalysis können Sie : Erweiterungen herunterladen und analysieren von: Chrome Web Store Firefox Addons Installierte Erweiterungen analysieren von: Google Chrome Mozilla Firefox Opera Browser Bald verfügbar...

web-hacking-playground

Web Hacking Playground Beschreibung Web Hacking Playground ist eine kontrollierte Web-Hacking-Umgebung. Sie besteht aus Schwachstellen, die in realen Fällen gefunden wurden, sowohl bei Pentests als auch bei Bug-Bounty-Programmen. Ziel ist es, dass Benutzer damit üben und lernen, sie zu erkennen u...

web-hacking-playground

Web Hacking Playground Description Web Hacking Playground is a controlled web hacking environment. It consists of vulnerabilities found in real cases, both in pentests and in Bug Bounty programs. The objective is that users can practice with them, and learn to detect and exploit them. Other topic...

chepy

Chepy Chepy is a python library with a handy cli that is aimed to mirror some of the capabilities of CyberChef. A reasonable amount of effort was put behind Chepy to make it compatible to the various functionalities that CyberChef offers, all in a pure Pythonic manner. There are some key advantag...

chepy

Chepy Chepy è una libreria Python con una pratica CLI che mira a rispecchiare alcune delle capacità di CyberChef. È stato investito un ragionevole sforzo per rendere Chepy compatibile con le varie funzionalità offerte da CyberChef, tutto in puro stile Python. Ci sono alcuni vantaggi e svantaggi...

so-crates

SO-CRATES Security Onion Containerized Rapid Analysis of Threats, Evil, and Sus A standalone web application for analyzing pcap files, log files, and binary files. Features include Suricata network analysis, YARA binary scanning, Sigma rule detection for logs, and a single-page UI for browsing...

CVE-2025-3616

Metasploit-Modul: Greenshift WordPress Plugin – Beliebiges Datei-Upload CVE-2025-3616 Dieses Repository enthält ein Metasploit-Modul zur Ausnutzung von CVE-2025-3616 , einer Schwachstelle für beliebiges Datei-Upload im Greenshift WordPress Plugin Versionen 11.4 bis 11.4.5. Der Exploit ermöglicht...

React-site-CVE-2025-55182

React-Website – CVE-2025-55182 README: Angreifbares Next.js-Projekt React RSC Landingpage Dieses Repository enthält ein Beispiel einer mehrseitigen Corporate-Landingpage mit Next.js 15.0.0 + React 19.0.0. Die Seite simuliert eine Struktur ähnlich wie t1.ru: Startseite, Produkte, Fallstudien,...

CVE-2023-28252

Da febbraio 2022 è stato segnalato un nuovo ransomware che sembra sfruttare una vulnerabilità 0-day di Windows, secondo la ricerca condotta da Trend Micro. Maggiori informazioni su questo ransomware si trovano a questo link. Secondo l'analisi di Kaspersky, il gruppo ransomware Nokoyawa ha...

CVE-2024-37054-PoC

Beschreibung Proof of Concept für CVE-2024-37054, eine kritische Deserialisierungsschwachstelle in MLflow-Versionen 0.9.0 bis 2.14.1. Wenn ein bösartiges pyfunc-Modell über mlflow.pyfunc.loadmodel geladen wird, führt das gepicklete Payload beliebigen Code aus. Dateien exploit.py — vollständiger...

Dnstracer-1.9-Fix

Dnstracer-1.9-Fix dnstracer dnstracer ermittelt, woher ein bestimmter Domain Name Server DNS seine Informationen für einen bestimmten Hostnamen bezieht, und folgt der Kette von DNS-Servern bis zur autoritativen Antwort zurück. Problem Ein stack-basierter Pufferüberlauf in dnstracer bis Version 1....

pyghidra-mcp

PyGhidra-MCP - Ghidra Model Context Protocol Server Overview pyghidra-mcp is a command-line Model Context Protocol MCP server that brings the full analytical power of Ghidra, a robust software reverse engineering SRE suite, into the world of intelligent agents and LLM-based tooling. It bridges...

ai-ublock-blacklist

AI uBlock Origin Blacklist Eine persönliche Liste für uBlock Origin zum Blockieren von KI-Inhaltsfarmen. Pull Requests willkommen. Installation Sie können hier klicken, um diese Liste automatisch zu abonnieren. Dieser Link funktioniert nur, wenn Sie uBlock Origin installiert haben. Alternativ...

idacode

IDACode IDACode semplifica l'esecuzione e il debug di script Python nel tuo ambiente IDA senza lasciare Visual Studio Code. L'estensione VS Code è disponibile sul marketplace. IDACode è ancora in una fase molto preliminare e sono previsti bug. Per favore apri una nuova issue se incontri problemi...

CVE-2024-34102

CVE-2024-34102 POC per CVE-2024-34102 : XXE non autenticato su Magento e bypass del WAF, Otterrai una connessione http sul tuo webhook root@kitploit: POST /rest/V1/guest-carts/1/estimate-shipping-methods HTTP/2 Host: example.com Accept: application/json, text/javascript, /; q=0.01 Content-Length:...

domato

Domato 🍅 Un fuzzer per il DOM Scritto e mantenuto da Ivan Fratric, [email protected] Copyright 2017 Google Inc. Tutti i diritti riservati. Concesso in licenza secondo l'Apache License, Versione 2.0 la "Licenza"; non è consentito usare questo file se non in conformità con la Licenza. È...

domato

Domato 🍅 A DOM fuzzer Written and maintained by Ivan Fratric, [email protected] Copyright 2017 Google Inc. All Rights Reserved. Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License ...