passgen

🔐 passgen — Generate passwords from the terminal A small Go CLI that generates secure random passwords with flexible character sets and exclusions. Uses crypto/rand for cryptographically secure randomness. If no charset flags are provided, all sets are enabled by default. Installation Go...

CaptainHook

Captain Hook What is it ? The purpose of this tool is to trace user inputs, in order to find injection points into sensitive methods like java.lang.Runtime.exec, java.sql.Statement.executeQuery, ... as well as the mutations on these inputs between the injection point and the method call. "Marks"...

CacheData_decrypt

CacheDatadecrypt A simple Toolkit to BF and decrypt Windows EntraId CacheData. root@kitploit: usage: decryptcachedata.py -h pin,password ... CacheData bruteforcer. On a live windows host, to copy the folders with all subfolders and files: xcopy /H /E /G /C as SYSTEM. The script will automatically...

dotNIET

.NIET .NIET is an IDA Pro plugin. Its purpose is to import missing symbols usually few thousands which are resolved at runtime by .NET Native compiled binaries. These symbols lie in SharedLibrary.dll and are not exported by this one. .NIET has been tested on IDA Pro 7.5 using python 3.8 on the...

gh-hijack-runner

gh-hijack-runner A python script to create a fake GitHub runner and hijack pipeline jobs to leak CI/CD secrets. Discover more details in the following blogpost: https://www.synacktiv.com/publications/hijacking-github-runners-to-compromise-the-organization Exploitation If you can obtain a...

erica

Erica A neighbor for the GreatFET One targeting the 315/433/868/915MHz bands. This neighbour is not a design from GreatScottGadgets. So if it does not work, don't blame GSG but me. Name The arms of the plant erica remind me a bit to antennas. And that is what Erica shall be about. A neighbor with...

Apache-Solr-RCE-via-Velocity-template

Apache-Solr-RCE-via-Velocity-template Reference link Vulnerability Cause: 1. When an attacker can directly access the Solr console, they can modify the node's configuration file by sending a POST request similar to /nodename/config. 2. Apache Solr integrates the VelocityResponseWriter plugin by...

nono v0.75.0

Built by the team that brought you Sigstore The standard for secure software attestation, used by PyPI, npm, brew, and Maven Central !NOTE In the lead-up to a 1.0 release, APIs are stabilizing. API changes may still occur where necessary, but will be kept to a minimum. !IMPORTANT Organization...

Malware-analysis-and-Reverse-engineering

Malware-analysis-and-Reverse-engineering Some of my publicly available Malware analysis and Reverse engineering Reports, Tips, Tricks... Reverse engineering KPOT v2.0 Stealer Debugging MBR - IDA + Bochs Emulator CTF example TLS decryption in Wireshark Ryuk Ransomware - API Resolving and Imports...

RP_Import_RCE

Real Player 'external::Import' Arbitrary file download, Directory Traversal Vulnerabilities leads to Remote Code Execution video demo: https://youtu.be/CONlijEgDLc Real Player uses Microsoft Internet Explorer functionality and exposes properties and methods through a special mean which is...

RP_DCP_Code_Exec

Real Player 'DCP://' URI Remote Arbitrary Code Execution Vulnerability video demo: https://youtu.be/AMODp3iTnqY The 'DCP://' URI scheme is an internal protocol used by Real Player to retrieve URLs to display in the Player browser tab. It stands for 'Data Cache Protocol'. It will retrieve files fr...

PowerShell-Suite

PowerShell-Suite There are great tools and resources online to accomplish most any task in PowerShell, sometimes however, there is a need to script together a util for a specific purpose or to bridge an ontological gap. This is a collection of PowerShell utilities I put together either for fun or...

GHSA-8CJ9-R88M-8945 Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation

Summary The password change form is vulnerable to CSRF, allowing an attacker to change a user password even the administrator by tricking a connected user to visit a malicious website. The vulnerability has been tested with version 2.18.20. Details The password change endpoint of Semaphore UI doe...

Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation

Summary The password change form is vulnerable to CSRF, allowing an attacker to change a user password even the administrator by tricking a connected user to visit a malicious website. The vulnerability has been tested with version 2.18.20. Details The password change endpoint of Semaphore UI doe...

sweyntooth_bluetooth_low_energy_attacks

SweynTooth - Unleashing Mayhem over Bluetooth Low Energy This repository is part of a research outcome from theASSET Research Group. SweynTooth captures a family of 18 vulnerabilities across different Bluetooth Low Energy BLE software development kits SDKs of six major system-on-a-chip SoC vendor...

Security Bulletin: MongoDB Enterprised Advanced affected by: Code Injection, Improper Check for Unusual or Exceptional Conditions, Cross-site Scripting (CVE-2026-33937, CVE-2026-33938, CVE-2026-33939, CVE-2026-33940, CVE-2026-33941)

Summary There are vulnerabilities in handlebars-4.7.7.tgz used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-33937, CVE-2026-33938, CVE-2026-33939, CVE-2026-33940, CVE-2026-33941. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-33937 DESCRIPTION:...

Lime-RAT

Outdated. Archive it instead of delete it LimeRAT v0.1.9 Remote Administration Tool For Windows Description Simple yet powerful RAT for Windows machines. This project is simple and easy to understand, It should give you a general knowledge about dotNET malwares and how it behaves. Main Features...

Security Bulletin: MongoDB Enterprised Advanced affected by: Improper Authorization (CVE-2026-33186)

Summary There are vulnerabilities in google.golang.org/grpc-v1.78.0 used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-33186. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-33186 DESCRIPTION: gRPC-Go is the Go language implementation of gRPC. Versions pri...

RAT-via-Telegram

RAT-via-Telegram Windows Remote Administration Tool via Telegram now in Python 3.7! | Originally created by Ritiek Why another one? The current Remote Administration Tools in the market face 2 major problems: Lack of encryption. Require port forwarding in order to control from hundreds of miles...

iOSForensic

iOSForensic iosForensic is a python tool to help in forensics analysis on iOS. It get files, logs, extract sqlite3 databases and uncompress .plist files in xml. Installation Simply clone this git repository and install dependencies. Dependencies Linux OpenSSH sshpass sqlite3 python = 2.6...