cve-2021-41773-source-code-analysis

Apache HTTP Server CVE-2021-41773 Source Code Analysis A Python-based static patch analysis tool for studying the root cause and remediation of CVE-2021-41773 Apache HTTP Server Path Traversal by comparing the vulnerable Apache HTTP Server 2.4.49 source code with the patched 2.4.51 implementation...

sbomlyze

sbomlyze git diff for your SBOM. Compare two Software Bills of Materials and see what changed between builds, versions, and releases. sbomlyze compares component hashes, not only version strings. When an attacker swaps a package without bumping its version, sbomlyze flags it. Generators and...

dotenv-diff

dotenv-diff Scan your codebase to detect every environment variable reference. It helps you catch missing, unused, duplicated, and misused variables early, before they cause runtime errors. First class support for SvelteKit, Next.js, and Nuxt. Also works well in modern JavaScript/TypeScript...

burp_global_match_replace

Global Match & Replace GMR Burp Suite Extension Global Match & Replace GMR extends Burp Suite with match/replace rules to apply globally or across multiple tools of your choice Repeater, Intruder, Proxy, etc.. It provides per-request and response diffs so you can see exactly what changed. This...

gitlab-rce-demo

GitLab Oj RCE 演示 该仓库包含一个自包含的演示环境，用于我们研究中描述的 GitLab notebook-diff RCE 漏洞链。它会启动一个全新的 GitLab 18.11.3 容器，通过公开的 HTTP 接口创建一个普通用户，并针对该实例运行 PoC。 技术细节：Going depthfirst：通过两个 Ruby 内存破坏漏洞实现 GitLab RCE 环境要求 基于 x86-64（amd64）架构的 Linux 安装了 Docker Compose v2 的 Docker Engine Bash、Python 3、curl、Git、iproute2 和 netca...

git-clean-filter

This is a documented known issue, but I found this during my research & its pretty useful for RT/PT. Summary: The filter..clean directive in .git/config points at a script and .gitattributes binds that filter to a tracked file. Whenever git renders a real git diff of that file it runs the worktre...

1day-archive

1dayexploit - 存档 近期披露 CVE 的技术深度剖析与根因分析。 关于 本仓库收录近期披露 CVE 的技术分析文章——即补丁发布与大规模利用之间的 1-day 窗口期。 每篇分析包含： 受影响的产品、厂商及版本范围 补丁差异与根因分析 演示该漏洞的 PoC 面向防御者的检测指引 原始披露的参考链接 分析...

jsmon

JSMon JSMon - BugBounty向けJavaScript変更監視ツール このスクリプトを使用すると、監視したいWebサイト上のJavaScriptファイルを複数設定できます。スクリプトを実行するたびに、これらのファイルを取得し、以前のバージョンと比較します。変更があった場合、Telegram経由で通知され、スクリプトへのリンク、変更されたファイルサイズ、変更を簡単に確認できる差分ファイルを含むメッセージが送信されます。 インストール JSMonのインストール: root@kitploit: git clone https://github.com/robre/jsmon.g...

DiffCatcher

Support Development If this project helps your work, support ongoing maintenance and new features. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. A Rust CLI tool that recursively discovers Git repositories, captures state changes,...

diff

diff Simply diff for CVE-2017-0785...

zairo

zairo Diff 安全扫描器会遗漏变更带来的影响，Zairo 会找出这些影响并寻找漏洞。 Zairo 会结合上下文扫描你代码中的变更，为你生成一个子图供查看，并使用你选择的 LLM 查找漏洞。 安装 root@kitploit: pipx install zairo 用法 root@kitploit: 扫描你尚未提交的所有内容 zairo . 扫描 PR/分支差异 zairo . --base main --target HEAD 如果出现任何高危问题，则使构建失败 zairo . --base main --target HEAD --fail-on high...

CVE-2026-50013

Hoverfly is an open source API simulation tool. Prior to version 1.12.8, when Hoverfly is running in Diff mode, the AddDiff function writes to the shared responsesDiff map without any synchronization no mutex. When multiple proxy requests are processed concurrently the normal case for any proxy,...

CVE-2026-50013 Hoverfly: Process Crash via Concurrent Map Write Race Condition in Diff Mode

Hoverfly is an open source API simulation tool. Prior to version 1.12.8, when Hoverfly is running in Diff mode, the AddDiff function writes to the shared responsesDiff map without any synchronization no mutex. When multiple proxy requests are processed concurrently the normal case for any proxy,...

CVE-2026-50013

Hoverfly (an open-source API simulation/proxy tool by SpectoLabs) is affected by an unsynchronized concurrent map write in its Diff mode . Prior to version 1.12.8 , the AddDiff() function writes to the shared responsesDiff map without a mutex. Because Hoverfly processes proxy requests concurrentl...

CVE-2026-50013 Hoverfly: Process Crash via Concurrent Map Write Race Condition in Diff Mode

Hoverfly is an open source API simulation tool. Prior to version 1.12.8, when Hoverfly is running in Diff mode, the AddDiff function writes to the shared responsesDiff map without any synchronization no mutex. When multiple proxy requests are processed concurrently the normal case for any proxy,...

Vlun-Agent-X

VulnAgent-X Research Prototype VulnAgent-X is a research-focused multi-agent prototype for bug and vulnerability detection. It takes a local repository or diff as input, and outputs structured findings, evidence chains, localization, confidence, and experiment logs. Core Capabilities Inputs: repo...

CVE-2026-33718

CVE-2026-33718 OpenHands is Vulnerable to Command Injection through its Git Diff Handler Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker...

CVE-2026-41044

CVE-2026-41044 注意：仅供教育目的使用 从公告到根因分析只需一个下午：AI 如何压缩 N-day 分析时间 一篇简短、诚实的 CVE-2026-41044（Apache ActiveMQ）演练，使用补丁前后的精确代码。 CVE-2026-41044 于 2026 年 4 月 24 日披露。这是 Apache ActiveMQ Classic 中的一个远程代码执行漏洞，由 jsjcw 发现，已在 5.19.6 和 6.2.5 版本中修复。不是我发现的。 我想展示的是，一个从未接触过 ActiveMQ 的人如何在一个下午内为 N-day...

patch-diff-CVE-2023-22527

此存储库没有 README。...

binfinder

binfinder Find binary files not installed through package manager Prerequisites Software go version = 1.12 docker version = 19 How to build and run binfinder Build root@kitploit: $ make build Once the build is complete, you can run bindfinder by running: root@kitploit: $ ./binfinder --images...