React2Shell

RSC Sentinel A Firefox extension for detecting React2Shell vulnerabilities CVE-2025-55182 & CVE-2025-66478 in web applications. 👁️ Overview RSC Sentinel is a Firefox browser extension for security researchers and educators who want to observe React Server Components RSC and Next.js App Router...

cve-2019-2725

Run with python3 1. Place detection targets in the ip.txt file, format: 192.168.1.18:7001 2. Run the script directly; results with vulnerabilities are saved in the ok.txt file...

legion

NOTICE The Legion repository is moving to https://github.com/hackman238/legion. All future releases, updates, etc will occur from there. Big improvements on the way! This repo under this organiztion will no longer be maintained. ✨ About Legion, a fork of SECFORCE's Sparta, is an open source,...

0xsp-Mongoose

Support the project for continuous development ETH 0xf340c15c5e669a4ababab856e9f2bccd659d6e42 0xsp Mongoose RED for Windows Current Release 2.2.0 0xsp mongoose red version is provided to assist your needs during cyber security simulation, by using this version you will be able to audit a targeted...

openclarity

OpenClarity es una herramienta de código abierto para la detección sin agente y la gestión de la lista de materiales de software SBOM de máquinas virtuales, así como de amenazas de seguridad como vulnerabilidades, exploits, malware, rootkits, configuraciones incorrectas y secretos filtrados. Únet...

GoDefender

🛡️ GoDefender 🛡️ A powerful Go-based security toolkit designed to detect and defend against debugging, virtualization, and DLL injection attacks. GoDefender provides comprehensive protection mechanisms to make reverse engineering and analysis significantly more difficult. ⚠️ WINDOWS ONLY - Designed...

Chrono-Drip-Temporal-Viscosity-Exploitation-Framework-CVE-2022-0847

Chrono-Drip: Temporal Viscosity Exploitation Framework CVE-2022-0847 Weaponization via Convergent Time Theory CTT ⚠️ DISCLAIMER FOR RESEARCH AND ACADEMIC PURPOSES ONLY This tool demonstrates the application of fundamental physics discoveries to cybersecurity. All work presented here is theoretical...

cve-2024-38063-detection-mitigation-system

Sistema de Detección y Mitigación de Vulnerabilidades CVE Autor: Rohit Malik | Dominio: Ciberseguridad | Tipo: Proyecto Académico Grupal | Propósito: Portafolio y Educativo Resumen Este proyecto es una implementación de ciberseguridad grupal enfocada en detectar y mitigar una vulnerabilidad críti...

CVE-2021-44228_scanner

CVE-2021-44228scanner Applications that are vulnerable to the log4j CVE-2021-44228 issue may be detectable by scanning jar, war, and ear files to search for the presence of JndiLookup.class. Depending on the platform that you are investigating, the PowerShell or the Python3 script may make more...

CVE-2025-57819-ioc-check

CVE-2025-57819-ioc-check Description CVE-2024-6387-ioc-check is a lightweight, efficient tool designed to identify IoCs on freepbx servers with any of endpoint Users should upgrade to the latest supported versions of FreePBX currently 15, 16, and 17 and confirm that the installed "endpoint" modul...

Serein

Serein | In the Dusk of Rain | Project Updates Suspended Linux English version is online! | Linux English Version is Now Available! http://github.com/W01fh4cker/SereinLinux Disclaimer | Declaration This project is for authorized use only. Any illegal operations using this project are strictly...

ADC-19781

ADC-19781 Several checks for CVE-2019-19781 Module installation Download the two files ADC-19781.psd1 & ADC-19781.psm1 and put them in one of the following locations: C:\Users%USERNAME%\Documents\WindowsPowerShell\Modules\ADC-19781 C:\Program Files\WindowsPowerShell\Modules\ADC-19781 Import Modul...

ms-msdt-vulnerability-pdq-package

ms-msdt-vulnerability-pdq-package You will need all of the files in order for the package to properly run "out of the box". If you do not have PDQ Inventory, Please remove the scan step from the package before running. This package now searches for the search-ms registry key in addition to the...

check-your-pulse

check-your-pulse Esta utilidad puede ayudar a determinar si existen indicadores de compromiso IOC en los archivos de registro de un Pulse Secure VPN Appliance para CVE-2019-11510. La Agencia de Seguridad de Infraestructura y Ciberseguridad CISA ha visto que muchas organizaciones han sido vulnerad...

citrix-ioc-scanner-cve-2023-3519

Indicator of Compromise Scanner for CVE-2023-3519 This repository contains a utility for detecting compromises of Citrix ADC Appliances related to CVE-2023-3519. The utility, and its resources, encode indicators of compromise collected during Mandiant investigations. To learn more, please read th...

Detect-CVE-2017-15361-TPM

Detect Trusted Platform Modules Vulnerable to CVE-2017-15361 This repository provides content for aiding DoD administrators in detecting systems that have an enabled Trusted Platform Module TPM that is vulnerable to CVE-2017-15361 and is a companion to Information Assurance Advisory RSA Key...

ioc-scanner-CVE-2019-19781

Indicator of Compromise Scanner for CVE-2019-19781 This repository contains a utility for detecting compromises of Citrix ADC Appliances related to CVE-2019-19781. The utility, and its resources, encode indicators of compromise collected during FireEye Mandiant investigations. To learn more, plea...

CVE-2017-9798

Check for CVE-2017-9798 This small script checks a shared hosting environment for CVE-2017-9798 and exits with a return code of 1 if a vulnerable .htaccess file has been found. Example usage python check.py --path /var/customers/webs/...

bidi_char_detector

BIDI Character Detector This tool checks your files for existence of Unicode BIDI characters which can be misused for supply chain attacks to mitigate CVE-2021-42574. This tool was written in Rust and is distributed as a small 3MB docker compatible container to allow fast and easy usage. For an...

modsecurity-cve-2018-6389

modsecurity-cve-2018-6389 A ModSecurity ruleset for detecting potential attacks using CVE-2018-6389. For more information, see https://www.rastating.com/protecting-wordpress-against-cve-2018-6389/...