InvisibilityCloak

InvisibilityCloak Proof-of-concept obfuscation toolkit for C post-exploitation tools. This will perform the below actions for a C visual studio project. Change the tool name Change the project GUID Obfuscate compatible strings in source code files based on obfuscation method entered by user Remov...

pentest-guide

Penetration Test Guide based on the OWASP + Extra This guide is for the penetration testers seeking for the appropriate test cases required during a penetration test project. I rearranged the OWASP Testing Guide v4 from my point of view including 9 Test Classes and each class has several Test Cas...

Gepetto

Gepetto Gepetto is a Python plugin which uses various large language models to provide meaning to functions decompiled by IDA Pro ≥ 7.6. It can leverage them to explain what a function does, and to automatically rename its variables. Here is a simple example of what results it can provide in mere...

yaralyzer

THE YARALYZER Visually inspect all of the regex matches and their sexier, more cloak and dagger cousins, the YARA matches found in binary data and/or text. See what happens when you force various character encodings upon those matched bytes. With colors. Quick Start pipx install yaralyzer Scan...

NetworkAssessment

NetworkAssessment: Network Compromise Assessment Tool The Network Compromise Assessment Tool is designed to analyze pcap files to detect potential suspicious network traffic. This tool focuses on spotting abnormal activities in the network traffic and searching for suspicious keywords. Features D...

TIGMINT

TIGMINT : Twitter, Instagram and Geo-Tagging Media Intelligence Introduction An OSINT Open Source Intelligence software framework with an objective of making cyber investigations more convinient by implementing abstraction mechanisms to hide the background technical complexity also bundling...

secureboot_objects

Secure Boot Objects This repository is used to hold the secure boot objects recommended by Microsoft. For documentation visit our Wiki! Versioning This repository follows semantic versioning .., which is a versioning scheme that conveys meaning about the underlying changes. Version Components Maj...

mkchain

mkchain Open source tool to help you build a valid SSL certificate chain. Description • How To Use • Parameters • How it works • Requirements • Other • License Description Is an open source tool to help you build a valid SSL certificate chain. Also can help you fix the incomplete chain and downlo...

catalyst

Catalyst Speed up your reactions Website - The Catalyst Handbook Documentation - Demo Catalyst is an incident response platform. It can help to automate your alert handling and incident response procedures. Features Ticket Alert & Incident Management Tickets are the core of Catalyst. They...

jok3r

.. raw:: html .. image:: ./pictures/logo.png .. raw:: html .. image:: https://img.shields.io/badge/python-3.6-blue.svg :target: https://www.python.org/downloads/release/python-366/ :alt: Python 3.6 .. image:: https://readthedocs.org/projects/jok3r/badge/?version=latest :target:...

trellis-cve-2018-6389

trellis-cve-2018-6389 Mitigate CVE-2018-6389 WordPress load-scripts / load-styles attacks. Goal Why? Mitigation Why Not? Requirements Installation Trellis WordPress FAQs Can I use this on managed hosting? It looks awesome. Where can I find some more goodies like this? This isn't on wp.org. Where...

CVE-2025-70886

CVE-2025-70886 A Proof of Concept PoC exploit for CVE-2025-70886, a persistent denial-of-service vulnerability in Halo CMS v2.22.4 and earlier that allows remote attackers to crash the admin comment interface by submitting malformed payloads. Basic Information Product Vendor: 凌霞软件 Vendor Website:...

professional-services

Professional Services Common solutions and tools developed by Google Cloud's Professional Services team. Disclaimer This repository and its contents are not an officially supported Google product. License All solutions within this repository are provided under the Apache 2.0 license. Please see t...

freeradius-server

The FreeRADIUS server BuildStatusLink !Coverity statusCoverityStatusCoverityStatusLink !OSS-Fuzz statusOssFuzzOssFuzzLink Introduction The FreeRADIUS Server Project is a high performance and highly configurable multi-protocol policy server, supporting RADIUS, DHCPv4 DHCPv6, DNS, TACACS+ and VMPS...

owasp-java-encoder

OWASP Java Encoder Contextual output encoding for Java 8+. Choose an encoder for the parser context receiving untrusted text: HTML, JavaScript, CSS, XML or a URL component. The core has no runtime dependencies; optional JSP and Jakarta adapters provide view-layer bindings. Encoding is one part of...

domainim

DOMAINIM Features • Usage • Installation • Usage • Contributing • Additional Notes Domainim is a fast domain reconnaissance tool for organizational network scanning. The tool aims to provide a brief overview of an organization's structure using techniques like OSINT, bruteforcing, DNS resolving...

ida-pro-mcp

IDA Pro MCP !IMPORTANT I recommend using theOfficial Hex-Rays IDA MCP Server instead! See the announcement blog post for more information. Simple MCP Server to allow vibe reversing in IDA Pro. https://github.com/user-attachments/assets/6ebeaa92-a9db-43fa-b756-eececce2aca0 The binaries and prompt...

slowql

SlowQL The fastest offline SQL static analyzer. Built in Rust for zero false positives. Catch SQL injection, performance regressions, missing indexes, unbounded queries, compliance violations, and 282+ more issues before they reach production. No database connection required. What SlowQL Does...

CVE-2018-6389

CVE-2018-6389 WordPress DoS CVE-2018-6389 Reference https://baraktawily.blogspot.jp/2018/02/how-to-dos-29-of-world-wide-websites.html How to DoS Start WordPress $ docker-compose up -d Pulling wordpress wordpress:4.9.3... 4.9.3: Pulling from library/wordpress e7bb522d92ff: Pull complete...

boringssl

BoringSSL BoringSSL is a fork of OpenSSL that is designed to meet Google's needs. Although BoringSSL is an open source project, it is not intended for general use, as OpenSSL is. We don't recommend that third parties depend upon it. Doing so is likely to be frustrating because there are no...