anteater

Anteater - CI/CD Gate Check Framework Description Anteater is an open framework to prevent the unwanted merging of nominated strings, filenames, binaries, depreciated functions, staging enviroment code / credentials etc. Anything that can be specified with regular expression syntax, can be sniffe...

CVE-2023-33731

CVE-2023-33731 — eScan 管理控制台：反射型跨站脚本（XSS） -orange 目录 概述 漏洞详情 严重程度与 CVSS 评分 受影响产品 技术分析 概念验证 影响 缓解与修复措施 披露时间线 参考资料 作者 概述 在 Microworld Technologies 开发的 eScan 管理控制台 （版本 14.0.1400.2281）中发现了一个 反射型跨站脚本（XSS） 漏洞。该漏洞存在于 仪表盘详情 （DashBoardDetails）端点，其中多个查询字符串参数被直接反射到 HTML 响应中，未经适当的净化或输出编码。未认证的远程攻击者可以构造恶意...

Sourcetrail

Sourcetrail Important Note: This project was archived by the original autors and maintainers of Sourcetrail by the end of 2021. If you want to know more about this decision, read more on our blog. Sourcetrail is a free and open-source cross-platform source explorer that helps you get productive o...

thethe

The Threat Hunting Environment You are a Threat Hunter. While investigating, did you find yourself with more than 20 tabs opened in your browser, scattered .txt files with data and some terminals showing up in the background? theTHE centralizes all the information on an investigation in a single...

XSpear

XSpear XSpear is XSS Scanner on ruby gems !IMPORTANT XSpear Repository Archived This repository has been archived and is now read-only. XSpear is no longer actively maintained. Try Dalfox instead 🌙🦊 A faster, more powerful XSS scanner with advanced features. → https://github.com/hahwul/dalfox Key...

InjuredAndroid

InjuredAndroid - CTF A vulnerable Android application with ctf examples based on bug bounty findings, exploitation concepts, and pure creativity. Now available on Google Play! https://play.google.com/store/apps/details?id=b3nac.injuredandroid Setup for a physical device 1. Download the latest...

HRShell

HRShell: An advanced HTTPS Reverse Shell built with Flask HRShell is an HTTPS/HTTP reverse shell built with flask and is compatible with python 3.x. The client.py has been successfully tested on: Linux ubuntu 18.04 LTS, Kali Linux 2019.3 macOS Mojave/Catalina Windows 7/10 while the server.py is...

RiskAssessmentFramework

The OWASP Risk Assessment Framework Codacy Badge !GSOC...

Cmulator

Cmulator - Scriptable x86 RE Sandbox Emulator v0.3 Beta Cmulator is x86 - x64 Scriptable Reverse Engineering Sandbox Emulator for shellcode and PE binaries Based on Unicorn & Capstone Engine & javascript . 💬 This is the last supported Pascal version and new code base C/C++ will be in here Cmulato...

Obfuscapk

!IMPORTANT This project is archived and no longer maintained. Some of the most common questions are answered in FAQ and troubleshooting. A black-box obfuscation tool for Android apps. Obfuscapk is a modular Python tool for obfuscating Android apps without needing their source code, since apktool ...

kirjuri

Kirjuri has been deprecated. I have started a new project that covers most of the use cases that Kirjuri handles and a lot more. Check out the DFIRe case management application for all your case and evidence management needs. SECURITY UPDATE 7.5.2021 As this project has been inactive for years, i...

VulnWhisperer

Createactionable data from your vulnerability scans VulnWhisperer is a vulnerability management tool and report aggregator. VulnWhisperer will pull all the reports from the different Vulnerability scanners and create a file with a unique filename for each one, using that data later to sync with...

CVE-2026-7473---Arista-EOS-Tunnel-Decapsulation-Bypass

README.md markdown CVE-2026-7473 - Arista EOS Tunnel Decapsulation Bypass ⚠️ WARNING This code is ONLY for educational purposes and authorized security testing. 📋 Description CVE-2026-7473 is a vulnerability in Arista EOS where a switch configured as a tunnel endpoint VXLAN, GRE, decap-groups...

mig

MIG: Mozilla InvestiGator MIG is Mozilla's platform for investigative surgery of remote endpoints. ⚠️ Deprecation Notice ⚠️ Mozilla is no longer maintaining the Mozilla InvestiGator MIG project. Mozilla is also no longer making use of this code internally. You are welcome to use this code as is...

apparatus

ASTo - Apparatus Software Tool Archive Notice - After the completion of my research degree the repository has been archived. ASTo has made a significant impact to my research. I want to express my gratitude to everyone that helped make it better. However, this is not the end. Active development...

Debinject

Debinject Inject malicious code into .debs MAINTAINERS Alisson Moretto | Twitter: @UndeadSec Github: @UndeadSec VIDEO DEMO CLONE root@kitploit: git clone https://github.com/UndeadSec/Debinject.git RUNNING root@kitploit: cd Debinject root@kitploit: python debinject.py PREREQUISITES python 2.x dpkg...

watcher

Anti Reverse Shell Hello my name is themoon also known shalev, i created this project to help people who run servers with lower security. You can use this project to protect your computer from attackers who may try to reverse shell your computer Informations on this project You can view how this...

CVE-2025-1661

CVE-2025-1661 - HUSKY – Products Filter Professional for WooCommerce 中的未认证本地文件包含（LFI） 描述 WordPress 的 HUSKY – Products Filter Professional for WooCommerce 插件在所有版本中（最高至 1.3.6.5 ，含该版本）存在 本地文件包含（LFI） 漏洞，该漏洞可通过 wooftextsearch AJAX 动作的 template 参数触发。 该漏洞允许未认证的攻击者 在服务器上包含并执行任意文件，可能导致以下后果： 绕过访问控制 提取敏感数据...

super

SUPER Android Analyzer Secure, Unified, Powerful and Extensible Rust Android Analyzer SUPER is a command-line application that can be used in Windows, MacOS X and Linux, that analyzes .apk files in search for vulnerabilities. It does this by decompressing APKs and applying a series of rules to...

securitybot

Securitybot Distributed alerting for the masses! Securitybot is an open-source implementation of a distributed alerting chat bot, as described in Ryan Huber's blog post. Distributed alerting improves the monitoring efficiency of your security team and can help you catch security incidents faster...