OpenSSL-CCS-Inject-Test

OpenSSL CCS Inject Test This script is designed for detection of vulnerable servers CVE-2014-0224. in a wide range of configurations. It attempts to negotiate using each affected protocol version SSLv3, TLSv1, TLSv1.1, and TLSv1.2 advertising a comprehensive set of ciphers. Changes: v0.1 - Update...

sandmap

sandmap Description • How To Use • Command Line • Configuration • Requirements • Other • Contributing • License • Wiki Description sandmap is a tool supporting network and system reconnaissance using the massive Nmap engine. It provides a user-friendly interface, automates and speeds up scanning...

sandmap

sandmap Descripción • Cómo Usar • Línea de Comandos • Configuración • Requisitos • Otros • Contribuir • Licencia • Wiki Descripción sandmap es una herramienta que apoya el reconocimiento de redes y sistemas utilizando el masivo motor de Nmap. Proporciona una interfaz amigable, automatiza y aceler...

prismor v1.51.0

Prismor Runtime security for Claude Code, Codex, Langchain and other AI agents frameworks/harness. Prismor is highly customizable based on user's own policies. Observe or enforce mode to see agent activity in a local self-serve dashboard Website • Onboard with Skill !Kimi...

go_parser

Otro analizador de binarios Golang para IDAPro Inglés |中文 NOTA : Ahora la última rama master es la versión de Python3. La rama master anterior se ha cambiado a la rama py2 , y temporalmente no se mantiene. Instrucciones para la rama Python3 Esta versión se desarrolla y prueba en macOS/Windows,...

xepor

Xepor Xepor pronunciado /ˈzɛfə/ , céfiro es un framework de enrutamiento web para ingenieros inversos e investigadores de seguridad. Proporciona una API similar a Flask para que los hackers intercepten y modifiquen solicitudes y/o respuestas HTTP en un estilo de codificación amigable para los...

xepor

Xepor Xepor pronounced /ˈzɛfə/ , zephyr is a web routing framework for reverse engineers and security researchers. It provides a Flask-like API for hackers to intercept and modify HTTP requests and/or HTTP responses in a human-friendly coding style. This project is meant to be used with mitmproxy...

CVE-2025-5777

CVE-2025-5777 AKA CitrixBleed 2 Is an OOB read in the login process of Citrix Gateway. This is a Proof of Concept exploiting the OOB CVE-2025-5777 to obtain memory data from a vulnerable Citrix Gateway instance, possibly leading to cookies/credentials theft. Usage I highly recommend using a venv...

CVE-2014-3704

Code Conversion to Python 3 This code is taken from "Drupal 7.0 7.31 - 'Drupalgeddon' SQL Injection Add Admin User" and was converted to Python 3 to suit the exercise in Academy for Module "Attacking Commoon Applications" and section "Attacking Drupal". The original code was written in Python 2,...

CVE-2021-1675-PrintNightmare

CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | June 1, 2021 CVE-2021-1675 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution...

attackintel

ACTUALIZACIÓN 26 de noviembre de 2018 MITRE ha dejado obsoleta la funcionalidad de la API de ATT&CK y pronto la eliminará por completo. Han migrado a utilizar STIX. Mi código estará disponible como referencia, pero puedes echar un vistazo a mi aplicación web ATT&CK Intel, que está en fases...

log4j-cve-2021-44228

Log4j-CVE-2021-44228 detector scanner playbook Ansible playbook to verify target Linux hosts using the official Red Hat Log4j detector script for Log4Shell CVE-2021-44228. Red Hat version 1.3 detector 2022-01-10. The result is saved in a txt file under detectordir default: /opt/cve-2021-44228/...

log4j-cve-2021-44228

Log4j-CVE-2021-44228 检测器扫描器 playbook 使用官方 Red Hat Log4j 检测器脚本验证目标 Linux 主机的 Ansible playbook，用于 Log4Shell（CVE-2021-44228）。 Red Hat 版本 1.3 检测器 2022-01-10。 结果保存在 detectordir（默认：/opt/cve-2021-44228/）下的 txt 文件中。 Ansible Galaxy 角色 代码也可作为 Ansible Galaxy 角色使用：lucab85.ansiblerolelog4shellbash...

subcrawl

SubCrawl SubCrawl es un framework desarrollado por Patrick Schläpfer, Josh Stroschein y Alex Holland del equipo de Threat Research de HP Inc. SubCrawl está diseñado para encontrar, escanear y analizar directorios abiertos. El framework es modular, compuesto por cuatro componentes: módulos de...

CVE-2020-6514

CVE-2020-6514 The exploit When writing the exploit, I originally altered the SCTP packets sent to the target device by altering the source of WebRTC and recompiling it. This wasn’t practical for attacking closed source applications, so I eventually switched to using Frida to hook the binary of th...

pythia

Introduction / tl;dr This tool scans an executable file for Delphi data, including RTTI and virtual function tables. It outputs a JSON file with information about identified classes and functions, which can be used for additional analysis, for example: Generate a class tree. Generate names &...

Email-Vulnerability-Checker

Email Vulnerability Checker v2.1 Verify whether the domain is vulnerable to spoofing by Email-vulnerablity-checker Features of Version 2.1 Added Support to save output on a file using -o flag Added more checks that will accurately tell you the Vulnerability Status. Updated the code completely wit...

apk.sh

🕹️ apk.sh apk.sh は Android アプリのリバースエンジニアリングを容易にする Bash スクリプトで、APK のプル、デコード、リビルド、パッチ適用といった繰り返し作業を自動化します。 機能 apk.sh は基本的に apktool を使用してリソースの逆アセンブル、デコード、リビルドを行い、一部の bash で frida ガジェット注入プロセスを自動化します。 また、アプリバンドル/スプリット APK もサポートしています。 🍄 起動時に frida-gadget.so をロードするための APK パッチ適用。 🆕...

CVE-2026-38427

CVE-2026-38427: Integer Wraparound → Heap Buffer Overflow in Tasmota fetchjpg CVE: CVE-2026-38427 Severity: Critical CVSS 9.8 Product: Arendst Tasmota Affected Version: = 15.3.0.3 File: tasmota/tasmotaxdrvdriver/xdrv10scripter.ino Function: fetchjpg — case 2 MJPEG frame fetch Author: Saidakbarxon...

CVE-2026-47101-PoC

CVE-2026-47101 — LiteLLM Privilege Escalation via /key/generate + /user/update LiteLLM v1.82.6 before v1.83.14 /key/generate endpoint allows low-privileged internaluser to request an API key with wildcard routes "/", and then elevate their own role to proxyadmin via the /user/update endpoint,...