sandfly-entropyscan

What is sandfly-entropyscan? sandfly-entropyscan is a utility to quickly scan files or running processes and report on their entropy measure of randomness and if they are a Linux/Unix ELF type executable. Some malware for Linux is packed or encrypted and shows very high entropy. This tool can...

cracklord

Cracklord http://jmmcatee.github.io/cracklord/ What Is It? CrackLord is a system designed to provide a scalable, pluggable, and distributed system for both password cracking as well as any other jobs needing lots of computing resources. Better said, CrackLord is a way to load balance the resource...

quiver

Quiver : A Meta-Tool for Kali Linux Quiver is an organized namespace of shell functions that pre-fill commands in your terminal so that you can ditch your reliance on notes, copying, pasting, editing, copying and pasting again. Quiver helps you remember how to use every tool in your arsenal and...

roca

ROCA detection tool This tool is related to ACM CCS 2017 conference paper 124 Return of the Coppersmith’s Attack: Practical Factorization of Widely Used RSA Moduli. It enables you to test public RSA keys for a presence of the described vulnerability. Update 4.11.2017 : Python 2.7, 3.4+ supported...

memoro

Memoro Memoro is a highly detailed heap profiler. Memoro not only shows you where and when your program makes heap allocations, but will show you how your program actually used that memory. Memoro collects detailed information on accesses to the heap, including reads and writes to memory and when...

CryKeX

Properties: Cross-platform Minimalism Simplicity Interactivity Compatibility/Portability Application Independable Process Wrapping Process Injection Dependencies: Unix - should work on any Unix-based OS BASH - the whole script root privileges optional Limitations: AES and RSA keys only Fails most...

warberry

This project is no longer maintained by the developer...

kirjuri

Kirjuri 已弃用。 我已启动一个新项目，涵盖了 Kirjuri 处理的大部分用例，甚至更多。请查看 DFIRe 案例管理应用程序，满足您所有的案例和证据管理需求。 安全更新（2021年7月5日） 由于该项目已多年不活跃，部分依赖项不可避免地会过时。所涉及的依赖项中存在多个安全漏洞，并且某些依赖项（如 Twig）与最新版 PHP 不兼容。如果您希望安装并使用 Kirjuri，请手动更新依赖项，并确保在安全环境中安装。最初的建议是在气隙隔离环境中安装，该建议仍然有效。...

aquatone

AQUATONE Aquatone is a tool for visual inspection of websites across a large amount of hosts and is convenient for quickly gaining an overview of HTTP-based attack surface. Installation 1. Install Google Chrome or Chromium browser -- Note: Google Chrome is currently giving unreliable results when...

urh

The Universal Radio Hacker URH is a complete suite for wireless protocol investigation with native support for many common Software Defined Radios. URH allows easy demodulation of signals combined with an automatic detection of modulation parameters making it a breeze to identify the bits and byt...

mnemosyne

Mnemosyne es una herramienta genérica de scraping de memoria basada en Windows. Escanea el espacio de memoria de un proceso en busca de una cadena de búsqueda o expresión regular regex unicode y ascii y, si la encuentra, la envía ya sea a stdout, a un archivo o a un socket hacia un listener remot...

hassh

"HASSH" - a Profiling Method for SSH Clients and Servers. NOTE: This Corelight repository was created so that it can be actively maintained, as per a request from Salesforce whose original repository is not being maintained. "HASSH" is a network fingerprinting standard which can be used to identi...

k4_cve-2023-41064

k4cve-2023-41064 Steps to Run the Project Setup Frontend: Navigate to the frontend folder: bash Copier Modifier cd frontend Install the required Node.js dependencies by running: bash Copier Modifier npm install Setup Backend: Navigate to the backend folder: bash Copier Modifier cd backend Install...

Rocky Linux 8 [CIQ] Security Update: cargo / cargo-debuginfo / clippy / clippy-debuginfo / rust / etc (crlsa-2023_4635)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20234635 advisory. rust-cargo: cargo does not respect the umask when extracting dependencies CVE-2023-38497 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 9 [CIQ] Security Update: cargo / cargo-debuginfo / clippy / clippy-debuginfo / rust / etc (crlsa-2023_4634)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20234634 advisory. rust-cargo: cargo does not respect the umask when extracting dependencies CVE-2023-38497 Tenable has extracted the preceding description block directly from the CIQ...

EUVD-2026-70998

fastify vulnerable to header validation bypass via incomplete schema case normalization...

fastify vulnerable to header validation bypass via incomplete schema case normalization

Impact Fastify lowercases header-schema property names before compiling the schema, because Node.js stores request header names in lowercase. That normalization was incomplete: it lowercased only top-level properties keys and the root required array, and did not lowercase the JSON Schema Draft 7...

are-you-get-tanstack-attack

Escáner de CVE de TanStack Router Una herramienta de escaneo de seguridad para detectar el CVE de TanStack Router | GHSA de TanStack Router en tus proyectos. Resumen Esta herramienta escanea tu código en busca de indicadores de la vulnerabilidad de TanStack Router CVE-2026-45321 /...

agentic-ioc-scanner

agentic-ioc-scanner Escáner de IOC para herramientas de codificación de IA agéntica — detecta Mini Shai-Hulud, Gemini CLI RCE, Cursor CVE-2026-26268 y DPRK PromptMink. Un kit de detección para el compromiso de asistentes de codificación de IA agéntica Claude Code, Gemini CLI, Cursor y las...

kyubisweep

🦊 KyubiSweep Hunt exposed secrets with the cunning of a fox! A lightweight, cross-platform CLI tool that scans your filesystem to detect exposed secrets, API keys, and tokens. Built with Go for maximum performance and zero dependencies. ✨ Features 🔍 30+ Secret Patterns - Detects AWS, Stripe,...