tarian

Tarian We want to maintain this as open-source to fight against the attacks on our favorite Kubernetes ecosystem. We can fight threats together as a community, by continuous contribution. Protect your Applications running on Kubernetes from malicious attacks by pre-registering your source code...

CVE-2018-10933

libSSH-Authentication-Bypass Spawn to shell without any credentials by using CVE-2018-10933 Exploit-DB : https://www.exploit-db.com/exploits/45638 Information about CVE-2018-10933 by libSSH : https://www.libssh.org/security/advisories/CVE-2018-10933.txt Bugfix Release by libSSH :...

skylift

SkyLift SkyLift 是一款实验性的 Wi-Fi/BT 地理定位欺骗设备，使用 ESP8266 或 ESP32 开发板广播 Wi-Fi 信标帧或蓝牙广播，以模拟远程/目标位置的无线基础设施。上面的示例展示了通过 DataPools 项目（2018）成功地将地理位置定位到 Peter Thiel 位于夏威夷的度假屋。 移动设备（即 iOS 和 Android）在基于太空的 GPS 信号较弱时（常见于城市区域或地下室类空间）依赖这些信息进行核心地理定位服务。 该项目在户外使用多个 SkyLift 设备，将其放置在与真实（目标）路由器相似的位置时最为成功，能够压制现有的 Wi-Fi...

CVE-2026-87158

Oracle E-Business Suite – Order Management (Enterprise Command Center) in version V16 is affected by a network-based vulnerability exploitable via HTTP by a low-privileged attacker . The attack requires no user interaction and has low complexity , making it easily exploitable. Successful exploita...

EUVD-2026-79813

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite component: Enterprise Command Center. The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management...

gixy

GIXY Overview Gixy is a tool to analyze Nginx configuration. The main goal of Gixy is to prevent security misconfiguration and automate flaw detection. Currently supported Python versions are 2.7, 3.5, 3.6 and 3.7. Disclaimer: Gixy is well tested only on GNU/Linux, other OSs may have some issues...

CVE-2026-83356

Oracle E-Business Suite (version V16 ) is affected through its Enterprise Command Center Framework component (Security). The flaw allows a low-privileged attacker with network access via HTTP to compromise the framework, resulting in unauthorized access to critical data or complete access to all ...

EUVD-2026-79709

Vulnerability in the Enterprise Command Center Framework product of Oracle E-Business Suite component: Security. The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Command Center...

CVE-2026-83341

A vulnerability in the Oracle Applications Manager component Command Line - RapidClone of Oracle E-Business Suite (versions 12.2.3 through 12.2.15 ) allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all Oracle Applic...

EUVD-2026-79694

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Command Line - RapidClone. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

scopeblind-gateway

⚠️ This repository has moved. Active development continues at ScopeBlind/scopeblind-gateway. This personal fork may be behind the canonical repository. Please use the org repo for issues, pull requests, and the latest code. protect-mcp Security gateway for MCP servers. Shadow-mode logs by default,...

vcamper

VCamper VCamper "Version Camper" is a proof-of-concept CLI that reviews a Git commit range for likely silent security fixes. Security fixes often reach public Git history before the advisory trail catches up. A maintenance-looking commit can carry enough evidence for a reviewer to infer the bug...

nimrm

nimrm 使用 Nim 编写的原生 WinRM Shell 客户端 版本 1.2.0 · 作者 Chokri Hammedi blue0x1 · 许可证 MIT 法律声明 nimrm 旨在对您拥有或已获得明确访问许可的系统进行合法的管理、安全测试和研究。作者不对因使用本工具而造成的滥用或损害负责。 目录 概述 功能特性 环境要求 安装 构建 性能 用法 选项 交互命令 会话管理 示例 注意事项 许可证 概述 nimrm 提供了一个紧凑且快速的 WinRM Shell，并带有实用的身份认证、命令执行、传输和报告辅助功能。它构建为原生 Nim 二进制文件，不依赖任何 Nim 软件包。 功能...

Impost3r

Impost3r Impost3r is a tool that aim to steal many kinds of linux passwordsincluding ssh,su,sudo written by C Attackers can use Impost3r to make a trap to steal the legal user's passwords XD This tool is limited to security research and teaching, and the user bears all legal and related...

Deep-Live-Cam

Deep-Live-Cam 2.1.6 Real-time face swap and video deepfake with a single click and only a single image. Disclaimer This deepfake software is designed to be a productive tool for the AI-generated media industry. It can assist artists in animating custom characters, creating engaging content, and...

go-get-RCE

go-get-RCE This is the exploit of CVE-2018-6574: go get RCE This vulnerability impacts Golang go get command and allows an attacker to gain code execution on a system installing their malicious library. This is a good example of a vulnerability that can be exploited using typosquatting to gain co...

rizin-notebook

Rizin Notebook A notebook for binary analysis with rizin. Keep notes, commands, and scripts organized per binary. Requires rizin 0.7.0 or later. What it does Each notebook page is tied to one binary. It stores the binary itself, its SHA-256 hash, and a list of cells : command cells - a rizin...

SQLRecon

SQLRecon SQLRecon is a Microsoft SQL Server toolkit that is designed for offensive reconnaissance and post-exploitation. For detailed information on how to use each technique, refer to the wiki. You can download a copy of SQLRecon from the releases page. Alternatively, feel free to compile the...

CVE-2026-83158

CVE-2026-83158 affects Oracle Applications Manager (component: Command Line – RapidClone ) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with local logon to the infrastructure where Oracle Applications Manager executes can exploit this vulnerability ...

EUVD-2026-79484

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Command Line - RapidClone. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...