39003 matches found
SkyProfile
SkyProfile SkyProfile is a PyQt5 desktop app for querying ADSBexchange globe history for single or multiple aircraft, detecting multi-leg flights, and exporting KML/CSV/JSON/Excel with rich analytics airports, routes, time buckets, callsigns, FAA metadata. Key Features Date-range query by ICAO he...
NORM-EDR
NORM-EDR NORM Normal EDR is an experimental kernel-mode EDR research project focused on explainable detection rather than silent blocking. Instead of assigning scores or killing processes, NORM answers one question: Why does this binary look suspicious? This project is built step-by-step in publi...
duo-agentflow-auditor
Duo AgentFlow Auditor AI Code Security ā catching what SAST misses in AI-generated code Built on the GitLab Duo Agent Platform 40-62% of AI-generated code contains security vulnerabilities. Traditional SAST catches CVEs. We catch what SAST misses ā prompt injection, LLM output execution, unsafe M...
NotProxyShellHunter
NotProxyShellHunter Check for NotProxyShell CVE-2022-40140 & CVE-2022-41082...
POC-CVE-2018-7600
POC-CVE-2018-7600 Drupal vulnerable to CVE-2018-7600 Drupalgeddon2 Scanner CVE-2018-7600 Simple Python scanner to detect Drupal servers potentially vulnerable to CVE-2018-7600 Drupalgeddon2. The script does not exploit or open a shell , it only: 1. Sends a request to the user/password flow. 2...
cfengine-CVE-2016-2118
+Title: CVE-2016-2118 Inventory and Remediation +SETUPFILE: /src/org-html-themes/setup/theme-readtheorg.setup file:./media/badlock.png This policy detects hosts vulnerable to https://vulners.com/cve/CVE-2016-2118CVE-2016-2118 commonly known as http://badlock.orgBadlock by checking if a known...
CVE-2020-9484-Scanner
This repository does not have a README...
zeek-spicy-openvpn
zeek-spicy-openvpn Questo ĆØ un analizzatore di protocollo che rileva il traffico OpenVPN. Per usare questo pacchetto ĆØ necessario installare Spicy. Blog e webinar che descrivono lo sviluppo di questo analizzatore di protocollo: https://zeek.org/2021/03/16/a-zeek-openvpn-protocol-analyzer/...
zeek-spicy-stun
STUN Session Traversal Utilities for NAT STUN Questo ĆØ un analizzatore di protocollo Zeek che rileva STUN basato su Spicy. Devi installare Spicy per usare questo pacchetto. Questo pacchetto creerĆ due log: stun.log - Questo log contiene ogni messaggio STUN. stunnat.log - Questo log contiene le...
CVE-2024-0235
Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2024-0235 Run bellow command to check CVE-2024-0235 -h Configurations 2. We integrated with the Telegram API to receive...
CVE-2024-29973
CVE-2024-29973 Exploiter a Vulnerability detection and Exploitation tool for CVE-2024-29973 with Asychronous Performance. Installation: git clone https://github.com/RevoltSecurities/CVE-2024-29973 pip install -r requirements.txt python3 exploit.py --help Usage: python3 exploit.py -h / / / / / / /...
React2Shell-CVE-2025-55182-Detector
Prerequisites Access to the project root directory containing package.json One of the following runtimes, depending on the script used: Python Javascript PowerShell Bash with jq installed Usage All scripts must be executed from the root directory of the target project where the package.json file ...
sysmon-config
Sysmon ATT&CK Configuration The file provided should function as a great starting point for system monitoring in a self-contained package. This configuration and results should give you a good idea of what's possible for Sysmon. Please beware that you may need to fine tune and add exclusions...
persistence-info.github.io
The repository tries to gather an information about Windows persistence mechanisms to make the protection/detection more efficient. Most of the information is well known for years, being actively used within various scenarios. Expect more. I am doing my best to add new entries each day. How it...
s3cXSSer
s3cXSSer This extension will help you to detect GET/POST based XSS vulnerability in any website easily , S3C - XSSER - Chrome extension How to add it to chrome or brave browser 1- Go to brave://extensions/ or chrome://extensions/ 2- enable Developer mode and click Load unpacked 3- locate the fold...
YARA_Rules
Yara Rules BY MALGAMY This project contains a collection of Yara rules that can be used to identify and classify various types of files. Table of Contents Overview Installation Usage Contributing Overview Yara is a tool that allows users to create their own rules for identifying and classifying...
CanaryHunter
Canary Hunter Summary While executing multiple red team engagements over the past few years there have been multiple times where I have run up against Canary Tokens which could potentially alert the SOC to actions taken. As such I spent some time running down the rabbit hole discovering if there...
AMSI-ETW-Patch
AMSI-ETW-Patch this repo contains information to patch AMSI and ETW using a single byte patch for both. The idea was to limit detection of the patch itself since it's a single byte. AMSI patch-amsi-x64.c The idea is that AMSI perform a lot of validation check before hitting the critical AMSI...
2022
100 Days of YARA Part 2 - Electric Detectaloo Apologies in advance for the terrible naming, but welcome to 100 Days of YARA! This repository will act as the store for all YARA ideas created during this time. Any fun scripts, tools, or rules you write can be committed to this GitHub repository! Fo...
WonkaVision
WonkaVision WonkaVision is a proof of concept POC tool to analyze Kerberos tickets and attempt to determine if they are forged. This tool was created by Charlie Clark and Andrew Schwartz. It should be noted that this POC is not intended to be a production-ready enterprise application, but rather ...