openssl

Welcome to the OpenSSL Project !openssl logowww.openssl.org !github actions ci badgegithub actions ci OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations ar...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-18477 DESCRIPTION: A TOCTOU Time-of-Check Time-of-Use vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a...

blindxss-lite

blindxss-lite A lightweight Blind XSS Cross-Site Scripting collector and payload server built with Flask. It serves a JavaScript payload that captures victim browser data cookies, localStorage, DOM snippets, etc. and forwards it to a SQLite-backed dashboard protected by HTTP Basic Auth. Features...

CVE-2018-7600

Alright boss, I've also added the usage section starting from git clone, so the README is complete. This is the final version that you just need to copy-paste into README.md on your GitHub repo. CVE-2018-7600 - Drupalgeddon2 RCE Exploit This exploit exploits a vulnerability in Drupal 7.56 and som...

personal-security-checklist

Personal Security Checklist The ultimate list of tips to secure your digital life 🌐digital-defense.io 👉 Read the Checklist 👈 Contents The Checklist The Website The API Contributing Credits License The Checklist You can read the full checklist in CHECKLIST.md. To view/edit the raw data, see...

z80-sans

Z80 Sans What's your favourite disassembler? Mine's a font: https://github.com/user-attachments/assets/bb6ceb18-c2fd-40a9-be4f-202321a214d9 This font converts sequences of hexadecimal lowercase characters into disassembled Z80 instructions, by making extensive use of OpenType's Glyph Substitution...

wigle-wifi-wardriving

WiGLE Wireless Wardriving Network stumbling client for Android, from wigle.net. This client provides geolocated detection and logging for WiFi, Bluetooth, and cellular signals using Android devices. As of January 2023, this application supports Android SDK versions 24 Nougat and up. For older...

mylg

myLG, Command line Network Diagnostic Tool myLG is an open source software utility which combines the functions of the different network probes in one network diagnostic tool. Features Popular looking glasses ping/trace/bgp: Telia, Level3, NTT, Cogent, KPN More than 200 countries DNS Lookup...

SUID3NUM

SUID3NUM A standalone python2/3 script which utilizes python's built-in modules to find SUID bins, separate default bins from custom bins, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ͡ʘ ͜ʖ ͡ʘ Description A standalone script supporting both python2 &...

Guardrails

NVIDIA NeMo Guardrails Library LATEST RELEASE / DEVELOPMENT VERSION : The develop branch tracks the latest top of tree development. The latest released version is 0.24.1. ✨✨✨ 📌 The official NeMo Guardrails library documentation is available atdocs.nvidia.com/nemo/guardrails. ✨✨✨ NVIDIA NeMo...

WhatsDump

Rewriting entire project. WIP WhatsDump Extract WhatsApp private key from any Android device Android 7+ supported. This tool spawns a clean Android 6 emulator and attempts to register with your number to extract msgstore private key. NOTE: this tool is in beta stage and might not be stable. You'r...

sessionprobe

SessionProbe 🚀⚡ SessionProbe is a multi-threaded pentesting tool designed to assist in evaluating user privileges in web applications. It takes a user's session token and checks for a list of URLs if access is possible, highlighting potential authorization issues. SessionProbe deduplicates URL...

bxss

Bxss - Blind XSS Scanner 🚀 Description Bxss is a high-performance Blind XSS scanner that automates the detection of blind XSS vulnerabilities in web applications. ✨ Features Injects Blind XSS payloads into custom headers & parameters Supports multiple HTTP methods PUT, POST, GET, OPTIONS High-spe...

ansible-collection-hardening

Ansible Collection - devsec.hardening Description This collection provides battle tested hardening for: Linux operating systems: CentOS Stream 9 AlmaLinux 8/9/10 Rocky Linux 8/9/10 Debian 11/12/13 Ubuntu 22.04/24.04/26.04 Amazon Linux some roles supported Arch Linux some roles supported Fedora...

MiscTools

MiscTools CsExec Command Exec / Lateral movement via PsExec-like functionality. Must be running in the context of a privileged user. CsExec.exe Also see TikiService. CsPosh Command Exec / Lateral Movement via PowerShell. Creates a PowerShell runspace on a remote target. Must be running in the...

HardeningKitty

HardeningKitty This is the stable version of HardeningKitty from the Windows Hardening Project by Michael Schneider. The stable version of HardeningKitty is signed with the code signing certificate of scip AG. Since this is the stable version, we do not accept pull requests in this repo, please...

LinuxCheck

LinuxCheck Linux emergency response/information gathering/vulnerability detection tool, supporting 13 categories and 70+ checks including basic configuration/network traffic/task scheduling/environment variables/user information/Services/bash/malicious files/kernel Rootkit/SSH/Webshell/mining...

cryptoptic

cryptoptic Find the cryptography hiding in your code before quantum computers find it for you. cryptoptic uses CodeQL and GitHub Actions to scan a repository or an entire GitHub organisation and produce an inventory of every cryptographic function in use, the library it comes from, and where it i...

skydive

Skydive Skydive is an open source real-time network topology and protocols analyzer. It aims to provide a comprehensive way of understanding what is happening in the network infrastructure. Skydive agents collect topology information and flows and forward them to a central agent for further...

alibi-detect

Alibi Detect is a source-available Python library focused on outlier , adversarial and drift detection. The package aims to cover both online and offline detectors for tabular data, text, images and time series. Both TensorFlow and PyTorch backends are supported for drift detection. Documentation...