deadfinder

Find dead-links broken links Documentation • Installation • Github Action • Contributing • Changelog Dead link broken link means a link within a web page that cannot be connected. These links can have a negative impact to SEO and Security. This tool makes it easy to identify and modify. Looking f...

rev-dep

Rev-dep Capabilities • Installation • Documentation • Exploratory Toolkit • Newsletter Dependency analysis and optimization toolkit for modern JavaScript and TypeScript codebases. Enforce dependency graph hygiene and remove unused code with a very fast CLI. About 📣 As codebases scale, maintaining...

simplify

Simplify Simplify is a generic Android deobfuscator. It virtually executes Dalvik code, then rewrites each method into code that behaves identically and is easier for a human to read. Its optimizations are generic, so they work regardless of which obfuscator produced the input. Quick Start Buildi...

Syborg

Syborg Syborg is a Recursive DNS Domain Enumerator which is neither active nor completely passive. This tool simply constructs a domain name and queries it with a specified DNS Server. Syborg has a Dead-end Avoidance system inspired from @Tomnomnom's ettu. When you run subdomain enumeration with...

hacks

Hacks Hacky one-off scripts, tests etc...

dump

Dump This repository contains dead/unfinished projects, small scripts or stuff that doesn't deserve a repository of its own. Contents git-gat : post-exploitation script for finding private git repos Infinity dead : find phone number of any Facebook user. json2paths : converts JSON keys to paths f...

tko-subs

tko-subs This tool allows: To check whether a subdomain can be taken over because it has: a dangling CNAME pointing to a CMS provider Heroku, Github, Shopify, Amazon S3, Amazon CloudFront, etc. that can be taken over. a dangling CNAME pointing to a non-existent domain name one or more wrong/typoe...

psobf

PowerShell Obfuscator Its goal is to transform code to hinder analysis and static signatures, useful in labs and authorized Red Team/Pentesting engagements. Supports 6 levels of obfuscation plus a transforms/pipeline architecture that allows stacking techniques such as string tokenization, light...

Tourmaline

Tourmaline I recently stumbled upon a piece of cleverly designed malware that calls itself "Tourmaline". This README is very kindly written by Claude as I was super busy with exams at the time of this repository's inception. Exploiting and decrypting this malware took a huge chunk of my time from...

POC-CVE-2025-6554

CVE-2025-6554 CVE-2025-6554 is a vulnerability in Chrome's V8 Engine JavaScript interpreter Hole Check 'inadequate control in unintended variables within expressions with optional chaining. POC CVE-2025-6554-POC.JS explores a flaw in the "Hole" verification mechanism in variables before use,...

DeadManSwitch

Dead Man Switch Overview Dead Man Switch is a cross-platform security application written in Rust that automatically protects sensitive data in emergency situations. The application monitors multiple trigger mechanisms and executes immediate system lockdown procedures when activated, including...

CVE-2026-105927

A flaw was found in the Apache Pulsar WebSocket service. When a consumer configures a dead letter policy to handle failed messages, the service verifies read permissions on the subscribed topic but fails to check write permissions on the designated dead letter topic. Because messages are forwarde...

CVE-2026-99015

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisock: Serialize dead-device detachment Rebinding an HCI socket after its controller is unregistered can race monitor control replay and crash the kernel. hcisockbind clears hcipisk-hdev and drops the device referenc...

PT-2026-121896

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where hung tasks occur when attempting to unmount a filesystem after its disk has been removed while still in use. During device removal, the function fs bdev mark dead...

Apache Pulsar authorization issue vulnerability

Versions 2.3.0 through 4.0.14 and 4.1.0 through 4.2.5 of Apache Pulsar contain an authorization issue vulnerability. This vulnerability arises because when configuring dead-letter policies via query parameters in the WebSocket service, it only checks whether the connected user has CONSUME...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: exit: prevent preemption of oopsing TASKDEAD task When an already-exiting task oopses, maketaskdead currently calls dotaskdead with preemption enabled. This is forbidden: dotaskdead calls schedule, which has a comment stating...

DEBIAN-CVE-2026-98469

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix AArch32 DBGBXVR handling The consolidation of the breakpoint and watchpoint register accessors switched DBGBXVR from trapbvr to trapdbgwbreg. The latter selects backing storage with demuxwbreg, which only handles...

CVE-2026-98469

A flaw exists in the Linux kernel's KVM subsystem for ARM64 architectures regarding the handling of AArch32 DBGBXVR registers. Due to a consolidation of register accessors, the system switched to a handler that only supports Op2 values 4 through 7 . Because DBGBXVR utilizes Op2 1 , an AArch32 gue...

CVE-2026-98469 KVM: arm64: Fix AArch32 DBGBXVR<n> handling

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix AArch32 DBGBXVR handling The consolidation of the breakpoint and watchpoint register accessors switched DBGBXVR from trapbvr to trapdbgwbreg. The latter selects backing storage with demuxwbreg, which only handles...

CVE-2026-98469 KVM: arm64: Fix AArch32 DBGBXVR<n> handling

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix AArch32 DBGBXVR handling The consolidation of the breakpoint and watchpoint register accessors switched DBGBXVR from trapbvr to trapdbgwbreg. The latter selects backing storage with demuxwbreg, which only handles...