Vol3xp

Vol3xp, Плагины проводника Volatility 3 WinObj - Исследователь объектов ядра Windows - улучшенная версия https://github.com/kslgroup/WinObj для volatility 3 winobj.py WinObj очень похож на WinObj sysinternals Также поддерживает Struct Analyzer и WinObjGui из VolExp. RAMMap - Отображение физически...

pwnedOrNot

Инструмент OSINT для поиска паролей скомпрометированных учетных записей электронной почты Создано Lohitya Pushkar thewhiteh4t. Twitter - Blog Доступен| в| ---|---|--- BlackArch Linux| SecBSD| Tsurugi Linux | | pwnedOrNot работает в два этапа. На первом этапе он проверяет указанный адрес...

bounty-targets-data

bounty-targets-data What's it for This repo contains data dumps of Hackerone and Bugcrowd scopes i.e. the domains that are eligible for bug bounty reports. The files provided are: Main files: domains.txt: full list of domains, without wildcards. wildcards.txt: full list of wildcard domains. Note:...

ProcDump-for-Linux

ProcDump ProcDump is a Linux and Mac reimagining of the classic ProcDump tool from the Sysinternals suite of tools for Windows. ProcDump provides a convenient way for Linux and Mac developers to create core dumps of their application based on performance triggers. ProcDump for Linux and Mac is pa...

snallygaster

snallygaster Finds file leaks and other security problems on HTTP servers. what? snallygaster is a tool that looks for files accessible on web servers that shouldn't be public and can pose a security risk. Typical examples include publicly accessible git repositories, backup files potentially...

autotimeliner

AutoTimeliner Автоматическое извлечение криминалистической временной шкалы из дампов энергозависимой памяти. AutoTimeliner запускает несколько плагинов Volatility3 для образов памяти Windows, Linux и macOS, затем объединяет их вывод в единую отсортированную CSV-временную шкалу: Универсальный плаг...

steamer

Steamer Импорт, управление, поиск публичных дампов. У вас есть огромные объемы CSV, .sql, .txt, содержащие учетные данные, пароли и хэши? Используйте Steamer для управления ими! Загрузите их в базу данных MongoDB и используйте либо консоль напрямую, либо удобный веб-интерфейс с поддержкой экспорт...

rip_raw

Rip Raw Rip Raw is a small tool to analyse the memory of compromised Linux systems. It is similar in purpose to Bulk Extractor, but particularly focused on extracting system Logs from memory dumps from Linux systems. This enables you to analyse systems without needing to generate a profile. This ...

rip_raw

Rip Raw Rip Raw — это небольшой инструмент для анализа памяти скомпрометированных Linux-систем. По назначению он похож на Bulk Extractor, но особенно сосредоточен на извлечении системных журналов из дампов памяти Linux-систем. Это позволяет анализировать системы без необходимости создания профиля...

ShellCodeEmulator

Инструмент эмуляции шеллкода Windows на основе фреймворка Unicorn. ShellcodeEmulator эмулирует шеллкод Windows с помощью дампов памяти процесса windbg. Вы можете предоставить шеллкод для анализа с любым образом дампа процесса Windows. Инструмент эмулирует максимально возможный объем...

kdmp-parser

kdmp-parser 이 C++ 라이브러리는 Windows 커널 full 덤프WinDbg의 .dump /f, BMP 덤프WinDbg의 .dump /ka 및 2022년에 도입된 더 최신 덤프 유형을 파싱합니다. 이 라이브러리는 64비트 덤프 로드를 지원하며 다음과 같은 항목에 대한 읽기 액세스를 제공합니다: 컨텍스트 레코드, 예외 레코드, 버그체크 매개변수, 물리 메모리. 컴파일된 바이너리는 릴리스 섹션에서 제공됩니다. 특별히 감사드립니다: hugsy님의 수많은 기여새로운 Python 바인딩, CI 개선, 새로운 덤프 유형 등,...

mosint

Features • Installation • Services • Usage • Docker • Config • Screen Mosint is an automated email osint tool written in Go that allows you investigate for target emails in a fast and efficient manner. It consolidates numerous services, enabling security researchers to swiftly access a wealth of...

jackdaw

jackdaw gather gather gather What is this? Jackdaw is here to collect all information in your domain, store it in a SQL database and show you nice graphs on how your domain objects interact with each-other an how a potential attacker may exploit these interactions. It also comes with a handy...

CVE-2025-68664

CVE-2025-68664 Всё, что я хочу на Рождество, это ваши секреты: LangGrinch поражает ядро LangChain CVE-2025-68664 Автор: Ярден Порат Исследование Cyata: Уязвимость LangGrinch в LangChain Опубликовано: https://cyata.ai/blog/langgrinch-langchain-core-cve-2025-68664/ Вчера LangChain опубликовал...

DEBIAN-CVE-2026-83550

A flaw was found in postgres-exporter. Due to the blank import of net/http/pprof, debug endpoints are exposed on the unauthenticated metrics listener. A remote attacker within the cluster network can access these endpoints. This allows for information disclosure, potentially revealing process...

CVE-2023-32784-EXPLOIT-REPORT

CVE-2023-32784 漏洞利用演示 项目概述 本仓库演示了 CVE-2023-32784，这是 KeePass 2.54 之前版本中存在的一个严重漏洞。该漏洞可通过内存转储恢复主密码，从而暴露存储的凭据。本文档逐步说明了如何搭建漏洞利用环境、执行 PoC 工具以及理解缓解策略。 漏洞详情 描述 CVE-2023-32784 是 KeePass 2.0 至 2.53 版本中存在的一个内存泄漏漏洞，源于 KeePass 的 Secure Textbox EX 组件对字符串处理不当。主密码中输入的每个字符都会在内存中留下痕迹，从而可通过内存转储恢复密码。 主要特征： 严重性：高...

CVE-2026-67406 RabbitMQ: Federation and Shovel Gen-Servers Lack format_status Callback — Plaintext Credentials Exposed in Crash Dumps and sys:get_status

RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3, 4.2.9, 4.1.14, and 4.0.23, Shovel does not format state logged by the crash reporter and can leave unencrypted credentials in a crash dump file. the shovel worker genserver processes does not implement the formatstatus/2...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: PowerPC: Do not attempt to copy PPR for tasks with NULL pt regs. PowerPC sets up PFKTHREAD and PFIOWORKER with a NULL pt regs, which, according to my arguably very brief checking, is not commonly done for other architectures. Thi...

Astra Linux – Vulnerability in Ceph

A privilege escalation flaw was discovered in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root through a crash dump, thereby exposing privileged information...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: Tracing: Ensure that the traceprintk function can be used as soon as it is available. Currently, the traceprintk function can be used as soon as the earlyTraceinit function is called from startkernel. However, if a crash occurs,...