CVE-2023-27997-Check

CVE-2023-27997-Check Fofa Query : app="FORTINET-SSLVPN" Install $ git https://github.com/imbas007/CVE-2023-27997-Check.git $ cd CVE-2023-27997-check $ pip3 install -r requirements.txt Usage usage: CVE-2023-27997.py -h -u URL | -f FILELIST options: -h, --help show this help message and exit -u URL...

HARDE

HARDE: Optimizing Agent Harnesses for Runtime Risk Detection and Execution Control Code release for HARDE: Optimizing Agent Harnesses for Runtime Risk Detection and Execution Control. The repository contains two complementary entry-point families: domains/: the Meta-Harness baseline and the two...

debugHunter

debugHunter Discover Hidden Debug Endpoints & Development Environments The essential Chrome extension for bug bounty hunters and penetration testers Passively detect debug parameters, sensitive headers, and exposed paths while you browse. Why debugHunter? Finding debug endpoints and exposed...

Steganography

Steganography Table of Contents Installation Byte Sequence Manipulation WavSteg LSBSteg StegDetect If you are unfamiliar with steganography techniques, I have also written a basic overview of the field in Steganography: Hiding Data Inside Data. Installation This project is on PyPI and can be...

Apkx-Hunter

APKX-Hunter v3.0.0 -- Debian Package APKX-Hunter at Black Hat Arsenal Europe 2026 View APKX-Hunter on Black Hat Europe Arsenal APKX-Hunter is an open-source Android Static Analysis Framework written entirely in C , purpose-built for Android security assessments, reverse engineering, malware...

vaas

Verdict-as-a-Service Verdict-as-a-Service VaaS is a cloud service that provides capabilities to scan files for malware and other threats. It allows you to easily integrate malware detection in your application with a few lines of code. You can use VaaS to secure any scenario where a file is...

nuclei-templates-ai

AI-Generated Nuclei Templates 👾 This project is an implementation of our vision detailed in From CVE to Template: The Future of Automating Nuclei Templates with AI This repository demonstrates the power of AI in automating security template generation for vulnerability detection. Using...

slack-watchman

Slack Watchman Monitoring and enumerating Slack for exposed secrets About Slack Watchman Slack Watchman is an application that uses the Slack API to find potentially sensitive data exposed in a Slack workspace, and to enumerate other useful information for red, blue and purple teams. More...

smbeagle

/ \ / // / / / // / / / / / ///\ / / / / / / / / / / / / / / // / / / / , / / / // // / / / / // // / // ,// ///||////,// ///, / PRESENTS // SMBeagle SMBeagle is a cross-platform SMB fileshare auditing tool that hunts out all files it can see in the network and reports if the file can be...

CitrixADC-CVE-2020-8300

Detect Citrix ADC SAML action or SAML iDP Profile config vulnerable to CVE-2020-8300 using Citrix ADC NITRO API EXAMPLE & '.\CitrixADC-CVE-2020-8300.ps1' -NSIPProtocol http -NSIP 10.10.10.10 -user nitro -pass "SshhhItsASecret" If this proves useful to anyone I will develop further with the...

CVE-2020-10199_CVE-2020-10204

MaiMeng CVE-2020-10199、CVE-2020-10204 Vulnerability Detection Tool Tool Introduction I wrote this small tool in Java in my spare time. It supports one-click detection of CVE-2020-10199 and CVE-2020-10204 vulnerabilities with a graphical interface. To ensure detection stability, random numbers are...

efiguard-detected

efiguard-detect dumbest possible way to check if EfiGuard killed your patchguard or not. how it works efiguard leaves a SetVariable backdoor at runtime - we just poke it from usermode asking to read 2 bytes at ntoskrnl base. if we get back MZ - the backdoor is alive, efiguard did its thing, pg is...

scriptkiddi3

Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using shell script and open source tools. How it works • Installation • Install with Docker • Usage • MODES • Important Notes | Webhook configurations • For Develope...

logdata-anomaly-miner

logdata-anomaly-miner This tool parses log data and allows to define analysis pipelines for anomaly detection. It was designed to run the analysis with limited resources and lowest possible permissions to make it suitable for production server use. Requirements In order to install...

2026

100 Days of YARA 2026 Welcome to 100 Days of YARA! This repository will act as the store for all YARA ideas created during this time. Any fun scripts, tools, or rules you write can be committed to this GitHub repository! For now, any associated blogging, walkthroughs, or other musing can be hoste...

copy-fail-CVE-2026-31431-detection-probe

Linux Kernel LPE Probe Suite — Copy Fail & Dirty Frag Safe detection tooling for two related Linux kernel local privilege escalation vulnerability families — Copy Fail CVE-2026-31431 and Dirty Frag CVE-2026-43284 / CVE-2026-43500 — both affecting all major distributions since 2017, both exploitab...

FalconEye

FalconEye: Real-time detection software for Windows process injections FalconEye is a windows endpoint detection software for real-time process injections. It is a kernel-mode driver that aims to catch process injections as they are happening real-time. Since FalconEye runs in kernel mode, it...

RayHunter-Web-Flasher

◈ RayHunter Install Wizard Interactive step-by-step guide to flashEFF's Rayhunter IMSI catcher detector on an Orbic RC400L hotspot. Auto-detects your OS. 🚀 Launch the Wizard 👉Open the Install Wizard What is Rayhunter? Rayhunter is the Electronic Frontier Foundation's open-source tool for detectin...

bugbounty_tools

bugbountytools Collection of scripts and tools used during bug bounty work. This will be the location of my automation scripts created for my own personal use, and occassionally public released Contact: For questions, comments or request make a psot to my X account not in DM and I will do what I...

guardd

Guardd Behavioral anomaly detection for Linux, powered by eBPF and machine learning. Guardd learns how a Linux host normally behaves and flags activity that differs from that baseline. Kernel sensors collect process executions and outbound TCP connection attempts; an Isolation Forest scores the...