be-a-hacker

Introduction Hacking is the art of using things in unintended ways. For example, if a software's trial is about to expire, you might be able to extend it by changing your computer's date to the previous week. That's hacking. There's no 'one right way' to learn hacking because it is a very broad...

bumblebee

Threat Intelligence Exposure Catalogs Maintained exposure catalogs for recent supply-chain campaigns, built from public threat-intelligence reporting with Perplexity Computer and updated via PRs as fresh campaigns are reported. Pass a catalog to a scan with --exposure-catalog . Review the entries...

columbo

Columbo Columbo is a computer forensic analysis tool used to simplify and identify specific patterns in compromised datasets. It breaks down data to small sections and uses pattern recognition and machine learning models to identify adversaries behaviour and their possible locations in compromise...

OSXAuditor

OS X Auditor OS X Auditor is a free Mac OS X computer forensics tool. OS X Auditor parses and hashes the following artifacts on the running system or a copy of a system you want to analyze: the kernel extensions the system agents and daemons the third party's agents and daemons the old and...

rbcd-attack

Abusing Kerberos Resource-Based Constrained Delegation TL;DR This repo is about a practical attack against Kerberos Resource-Based Constrained Delegation in a Windows Active Directory Domain. The difference from other common implementations is that we are launching the attack from outside of the...

skyvern

🐉 Automate Browser-based workflows using LLMs and Computer Vision 🐉...

skyvern

🐉 Automatiza flujos de trabajo basados en navegador usando LLMs y Visión por Computadora 🐉...

papers-we-love

Papers We Love PWL es una comunidad construida en torno a la lectura, el debate y el aprendizaje de artículos académicos de ciencias de la computación. Este repositorio sirve como un directorio de algunos de los mejores artículos que la comunidad puede encontrar, reuniendo documentos dispersos po...

CVE-2022-32883

CVE-2022-32883 利用Apple Maps将你的电脑变成GPS追踪器...

CVE-2024-12970

CVE-2024-12970 CVE-2024-12970 describe una vulnerabilidad de OS Command Injection Inyección de Comandos del Sistema presente en el software My Computer del sistema operativo Pardus. Esta vulnerabilidad permite a un usuario inyectar comandos del sistema a través del parámetro de nombre de archivo,...

forensicscanner

This repository does not have a README...

cua-kit

CUA-Kit 一个用于在 Windows 和 macOS 系统上枚举和与计算机使用代理交互的工具包。 工具 工具| 描述| 输出 ---|---|--- cua-enum| 枚举计算机使用代理配置 Claude Code, Codex CLI, Cursor, Gemini CLI| .exe, .x64.o cua-exec| 通过包装器或直接 API 执行计算机使用代理 CLI 命令 Claude, Codex, Gemini, Cursor| .exe, .x64.o cua-poison| 用伪造的紧凑摘要毒化 Claude Code 会话| .exe, .x64.o 快速开始...

StepJack

StepJack: Benchmarking Computer-Use Agent Safety Against Multi-Step Indirect Prompt Injection Setup 1. Python Environment Setup First, install all dependencies and ensure you’re running Python 3.10. root@kitploit: conda create -n stepjack python=3.10 conda activate stepjack pip install -r...

Netryx-OpenSource-Next-Gen-Street-Level-Geolocation

NETRYX 开源街道级地理定位引擎 上传任意街道照片，获取精确GPS坐标。 精度低于50米，无需地标，完全运行在你的硬件上。 演示 · 工作原理 · 快速开始 · 用法 · 常见问题 此版本已过时，请改用以下版本 新仓库 什么是Netryx？ Netryx是一款本地优先的地理定位工具，能够识别任意街道照片的精确GPS坐标。与反向图像搜索（比对已上传的网络图像）不同，Netryx针对系统性爬取的街景全景图 进行比对——这意味着它能够处理任何随机街道角落、且零网络存在的照片。 核心管道结合了三种最先进的计算机视觉模型： CosPlace ：用于全局视觉地点识别（检索） ALIKED/DIS...

CVE-2024-51793

CVE-2024-51793 利用工具文档 📋 概述 CVE-2024-51793 是 Computer Repair Shop WordPress 插件（3.8116 版本之前）中存在的一个未经验证的任意文件上传漏洞。该漏洞允许攻击者无需认证即可上传任意文件（包括 PHP webshell），从而在存在漏洞的 WordPress 站点上实现远程代码执行。 🚨 漏洞详情 CVE ID：CVE-2024-51793 漏洞类型：未经验证的任意文件上传 受影响插件：Computer Repair Shop WordPress 插件 受影响版本： 3.8116 风险等级：严重（CVSS...

Pachine

Pachine 针对 CVE-2021-42278（Active Directory 权限提升）的 Python 实现。 安装 root@kitploit: $ pip3 install impacket 用法 root@kitploit: Impacket v0.9.23 - Copyright 2021 SecureAuth Corporation usage: pachine.py -h -scan -spn SPN -impersonate IMPERSONATE -domain-netbios NETBIOSNAME -computer-name...

CUAHarm

Medición de la nocividad de los agentes que usan computadoras 🤗 Hugging Face 📄 Paper 📋 Introducción CUAHarm es un punto de referencia diseñado para evaluar los riesgos de seguridad de los Agentes que Usan Computadoras CUAs, por sus siglas en inglés: agentes de IA que pueden controlar computadoras...

CVE-2026-89178

WeenyGenius , a computer lab management system by Howyar Technologies , suffers from an Origin Validation Error that allows unauthenticated attackers on the same network to spoof the teacher workstation and send broadcast packets, causing student computers to attempt to establish a connection wit...

CVE-2026-89176

WeenyGenius is a computer lab management system developed by Howyar Technologies that suffers from a Missing Authentication vulnerability. Unauthenticated attackers on the same network can spoof student or teacher endpoints. Impersonating a student can disrupt normal classroom operations, while i...

rekall

Rekall discontinuation This project is no longer maintained. In December 2011, a new branch within the Volatility project was created to explore how to make the code base more modular, improve performance, and increase usability. This branch was later forked to become Rekall. The modularity allow...