278456 matches found
lowkey
Self-Hosted AI Coding Agents on AWS β OpenClaw, Claude Code, Codex, Kiro, NemoClaw, Hermes βΆοΈ Watch the full walkthrough on YouTube π Read the blog post: "I Gave My Agent Its Own AWS Account" TL;DR β deploy Lowkey: curl -sfL install.lowkey.run | bash Works in bash , zsh , and AWS CloudShell. The...
CVE-2022-29464
CVE-2022-29464 WSO2 RCE CVE-2022-29464 exploit and writeup. Details CVE-2022-29464 is critical vulnerability on WSO2 discovered by Orange Tsai. the vulnerability is an unauthenticated unrestricted arbitrary file upload which allows unauthenticated attackers to gain RCE on WSO2 servers via uploadi...
zafrida-ui
δΈζ | English ZAFrida UI - PyCharm Frida Plugin Current Version: 0.3.6 Project Introduction Frida GUI Tool for PyCharm/IntelliJ ZAFrida UI is a Frida graphical interface plugin integrated into PyCharm and JetBrains IDEs. It aims to solve the complexity of Frida command-line operations and script...
lxd_root
Linux Privilege Escalation via LXD Overview Members of the local lxd group on Linux systems have numerous routes to escalate their privileges to root. This repository contains examples of fully automated local root exploits. A detailed explanation of the vulnerability and an exploit walk-through ...
msdat
Quentin HARDY --- [email protected] [email protected] MSDAT MSDAT M icros oft SQL D atabase A ttacking T ool is an open source penetration testing tool that tests the security of Microsoft SQL Databases remotely. Usage examples of MSDAT: You have a Microsoft database listening remotely...
waf-checker
WAF Checker This project helps you check how well your Web Application Firewall WAF protects your product against common web attacks. It can be run as a Cloudflare Worker with a built-in interactive Web UI or as a standalone Node.js CLI tool. π§ͺ Test Coverage & Status All packages are thoroughly...
ColdWer
A cold war on your endpoint. π₯Ά ColdWer ColdWer leverages WerFaultSecure.exe PPL bypass to freeze EDR/AV processes and dump LSASS memory on modern Windows systems. C O L D W E R βββ΄ββ΄ββ WerFaultSecure βββ΄ββββββββ LSASS Dump βββ΄ββββββββββββ Cold Freeze Freeze your EDR/AV. Extract what you need. Sta...
fides
Securing AI Agents with Information-Flow Control This repository contains a Jupyter notebook to accompany the academic paper "Securing AI Agents with Information-Flow Control". The notebook is structured as a tutorial to walk readers through the concepts introduced in the paper. This illustrates ...
ADTrapper
ADTrapper - Active Directory Security Analysis Platform Professional Active Directory Security Analysis and Threat Detection Platform Transform Windows authentication logs into actionable security insights with advanced threat detection and interactive visualizations Overview ADTrapper is a...
DShield-SIEM
DShield Sensor Log Collection with Elasticsearch Introduction This is fork and a significant update from the initial publication on the ISC Storm Center website by Scott Jensen as a BACS paper and the scripts published in Github. https://github.com/fkadriver/Dshield-ELK...
Evilginx-Phishing-Infra-Setup
Phishing Engagement Infrastructure Setup Guide Note: These are copy of my personal notes. Please Do not completely rely on them. Table of Contents Blogs/Talks Red Team/Phishing Infra Automation Domain Purchase and Categorization Techniques Improve Phishing Email Writing Using Tools Test Email...
hulak
Hulak Your messenger in the terminal. Quick Start β’ GraphQL Explorer β’ Project Layout β’ Documentation Run one request, a whole directory, or stay interactive hulak run ./requests/ Hulak runs request files directly from your project. It supports concurrent directory execution. It falls back to an...
PacketPirate
PacketPirate A headless , scriptable, command-line based MITM proxy designed for network traffic interception, analysis, and modification on Windows systems. It operates similarly to industry-standard GUI proxies but is optimized for automation environments, headless operation, and integration wi...
cryptr
cryptr A simple shell utility for encrypting and decrypting files using OpenSSL. Installation git clone https://github.com/nodesocket/cryptr.git ln -s "$PWD"/cryptr/cryptr.bash /usr/local/bin/cryptr Requirements shred if optionally deleting original file. Bash tab completion Add...
dinkleberry
Dinkleberry π« Are you one of the 92,000+ people1 stuck with a D-Link NAS vulnerable to CVE-2024-3272, and no patch in sight? This tool uses the exploit itself to patch a vulnerable device. 1: See original disclosure in refs What it does Dinkleberry will execute a command to swap out the vulnerabl...
the-art-of-pivoting
The Art of Pivoting Techniques for Intelligence Analysts to Discover New Relationships in a Complex World PDF HTML EPUB Markdown Abstract This book explores how intelligence and cyber-security analysts can uncover hidden links between threat actor infrastructure and ongoing investigations by...
gdbfuzz
GDBFuzz: Debugger-Driven Fuzzing This is the companion code for the paper: 'Fuzzing Embedded Systems using Debugger Interfaces'. A preprint of the paper can be found here https://publications.cispa.saarland/3950/. The code allows the users to reproduce and extend the results reported in the paper...
CVE-2020-14882_ALL
CVE-2020-14882ALL CVE-2020-14882ALL comprehensive exploitation tool, supporting command echo detection, batch command echo, external XML command execution without echo, and other features. Required modules: requests, http.client The tool is only for authorized security testing. Do not use it...
TopazTerminator
TopazTerminator F, Another driver got burned.. I was gatekeeping wsftprm.sys driver for a while ; but since someone posted a public POC, I'm ungatekeeping it. We all know it'll get added to the driver blocklist soon, so here's my implementation for the same β in C This project exploits the...
DIY_WhisperPair
DIY-WhisperPair CVE-2025-36911 Reference Implementation & Vulnerability Verification Toolkit OFFICIAL IMPLEMENTATION NOW LIVE , thanks to the team at KU Leuven Thanks for the shoutout LEGAL NOTICE : This is a security research tool. ReadLEGAL.md before use. Unauthorized access to computer systems...