Elite

Obsoleto Temporalmente El proyecto padre Covenant ya no requiere una aplicación de cliente. Elite ha quedado temporalmente obsoleto. Utilice en su lugar la interfaz web incluida con el proyecto Covenant. Es posible que Elite se actualice eventualmente para ponerse al día con el proyecto Covenant...

pyrasite

.. image:: docs/logo.png pyrasite .. image:: https://api.travis-ci.org/lmacken/pyrasite.png?branch=develop :target: http://travis-ci.org/lmacken/pyrasite .. image:: https://coveralls.io/repos/lmacken/pyrasite/badge.png?branch=develop :target: https://coveralls.io/r/lmacken/pyrasite?branch=develop...

bad_ducky

Bad Ducky Summary Bad Ducky is yet another Rubber Ducky clone. It is based on CJMCU BadUsb ATMEGA32u4 - Arduino Leonardo clone board with onboard card reader, which you can buy on ebay or aliexpress. My goal was to create something compatible with Rubber Ducky scripts, while having ability to...

uptux

uptux Specialized privilege escalation checks for Linux systems. Implemented so far: Writable systemd paths, services, timers, and socket units Disassembles systemd unit files looking for: References to executables that are writable References to broken symlinks pointing to writeable directories...

vol-rs

vol-rs Un port del framework de análisis forense de memoria Volatility 3 de Python a Rust. Lee las mismas imágenes de memoria, ejecuta los mismos plugins con las mismas opciones e imprime la misma salida, byte por byte, bastante más rápido. Licencia Este proyecto es un port de Volatility 3 y por ...

XposedFridaBridge

XposedFridaBridge 介绍 Introduction A frida script implement XposedBridge & load xposed modules, without installing xposed framwork. 在不安装Xposed Framework的情况下，通过Frida使用Xposed插件。 用法 Usage 准备工作 Preparation 1. 将XposedBridge.jar推入设备中 push XposedBridge.jar into device 2. 安装插件或将插件APK推入设备中 install modules ...

rainmap-lite

rainmap-lite Rainmap Lite - Responsive web application that allows users to launch Nmap scans from their mobiles/tablets/web browsers! Unlike it's predecessor 1, Rainmap-lite does not require special services RabbitMQ, PostgreSQL, Celery, supervisor, etc to make it easy to install on any server...

NimGetSyscallStub

NimGetSyscallStub 从一份全新的 ntdll.dll 副本获取最新的系统调用。本代码可作为已发布的优秀工具 NimlineWhispers 和 NimlineWhispers2（由 @ajpc500 开发）以及 ParallelNimcalls 的替代方案。 动态获取系统调用的优势在于，桩（Stub）的签名不会包含在文件中，并且无需担心 Windows 版本的变化。 要编译 Shellcode 执行模板，请运行以下命令： nim c -d:release ShellcodeInject.nim 结果应如下图所示：...

ralph

Ralph Una implementación funcional de la técnica de bucle autónomo Ralph Wiggum para Claude Code. Antecedentes El plugin oficial ralph-wiggum en el mercado de plugins de Anthropic actualmente no funciona debido a una actualización de seguridad en Claude Code v1.0.20 agosto de 2025. El parche de...

fuel-cms-cve-2018-16763-python3-port

FUEL CMS 1.4.1 Port de compatibilidad con Python 3 Descripción general Este repositorio contiene un port de compatibilidad con Python 3 de la prueba de concepto original de CVE-2018-16763 , que afecta a FUEL CMS 1.4.1. La prueba de concepto original fue escrita por 0xd0ff9. Este repositorio no...

toxy

toxy 当前未积极维护，可能与最新的 Node.js 运行时不兼容 。如果你有兴趣维护 toxy，请提交 issue。 可入侵的 HTTP 代理 ，用于模拟 服务器故障场景 、系统弹性测试 和意外网络状况 ，专为 node.js 构建。 它主要用于抵抗故障测试，在覆盖容错和弹性能力时特别有用，尤其是在容忍延迟网络和面向服务架构中，toxy 可以作为服务间的中间人代理来注入故障。 toxy 允许你插入毒药，可选择通过规则过滤，这些规则可以拦截并按需更改 HTTP 流，在此过程中执行多种恶意操作，例如限制带宽、延迟网络数据包、注入网络抖动延迟或回复自定义错误或状态码。 它主要在 L7...

CVE-2025-6082

CVE-2025-6082 全路径泄露 PoC 作者 : Byte Reaper Telegram : @ByteReaper0 CVE : CVE-2025-6082 漏洞 : 全路径泄露 CWE-200 描述 本概念验证利用 Birth Chart Compatibility WordPress 插件（版本 ≤ 2.0）中的全路径泄露漏洞。PoC 向插件的 index.php 端点发送 HTTP GET 请求，捕获任何 PHP 警告或致命错误，并解析出服务器的文件系统路径（例如 /var/www/html/wp-content/plugins/... 或...

zeek-quic

Analizador/detector de QUIC de Google para Zeek Este analizador puede analizar y detectar la implementación de Google de QUIC llamada GQUIC aquí por simplicidad, utilizando el formato de cable descrito en: https://www.chromium.org/quic. La versión de GQUIC utilizada por Chrome al momento de...

AlmaLinux 9.2 [TuxCare] Security Update: thunderbird Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1787115646)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1787115646 advisory. - Spoofing issue in the WebAuthn component in Firefox for Android. This vulnerability was fixed in Firefox 143 and Thunderbird 143...

AlmaLinux 9.6 [TuxCare] Security Update: pipewire / pipewire-alsa / pipewire-devel / pipewire-doc / etc (ALMALINUX9.6:CLSA-2026:1790174444)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790174444 advisory. - A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak,...

CatSniffer-Firmware

Firmware de CatSniffer Aquí encontrarás los diferentes firmwares para usar esta herramienta. Es importante tener en cuenta qué versión de CatSniffer posees, ya que el microcontrolador principal cambió en la v3.x; necesitábamos mantener un registro de compatibilidad entre los diferentes procesador...

ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgrade

Summary The dashboard reads its authentication credentials from $ESPHOMEUSERNAME and $ESPHOMEPASSWORD. Earlier versions, and the legacy esphome dashboard, read the bare $USERNAME and $PASSWORD instead. When the env vars were renamed the bare names were dropped with no fallback, so an operator who...

GHSA-RRXG-G2PF-6HH4 ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgrade

Summary The dashboard reads its authentication credentials from $ESPHOMEUSERNAME and $ESPHOMEPASSWORD. Earlier versions, and the legacy esphome dashboard, read the bare $USERNAME and $PASSWORD instead. When the env vars were renamed the bare names were dropped with no fallback, so an operator who...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/smc: Avoid data corruption caused by decline. We identified a data corruption issue during testing of SMC-R in Redis applications. The benchmark has a low probability of reporting a strange error, as shown below: “Error:...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ixgbevf: Fixed compatibility issues with the mailbox API by negotiating supported features. There was backward compatibility regarding the mailbox API. Various drivers from different operating systems that support 10G adapters...