18389 matches found
zelos
Zelos Zelos Z eropoint E mulado L igero O perativo S istema es una plataforma de emulación de binarios basada en Python. Un uso de zelos es evaluar rápidamente el comportamiento dinámico de binarios mediante la línea de comandos o scripts de Python. Todas las llamadas al sistema se emulan para...
mal_unpack
malunpack Динамический распаковщик на основе PE-sieve 📖 Подробнее . Он запускает упакованный вредоносный файл, ожидает, пока тот распакует полезную нагрузку, снимает её дамп и завершает исходный процесс. !CAUTION Этот распаковщик запускает исходный вредоносный код. Используйте его только на...
svg_phishing_tools
SVG Security Analysis Toolkit - Tool Documentation This toolkit contains specialized Python tools for analyzing potentially malicious SVG files and detecting security mechanisms. Overview The toolkit consists of four main tools: 1. extract.py - Static analysis for obfuscated URL extraction 2...
webvulscan
WebVulScan Synopsis WebVulScan is a web application vulnerability scanner. It is a web application itself written in PHP and can be used to test remote, or local, web applications for security vulnerabilities. As a scan is running, details of the scan are dynamically updated to the user. These...
Langflow-CVE-2025-3248-Multi-target
⚠️ Langflow RCE Exploit Scanner CVE-2025-3248 This Python-based scanner automates the detection of unauthenticated Remote Code Execution RCE vulnerabilities in Langflow instances via CVE-2025-3248. It uses a proof-of-concept payload that abuses the /api/v1/validate/code endpoint to execute...
whonow
Serveur DNS Whonow Un serveur DNS malveillant pour exécuter des attaques de rebinding DNS à la volée. whonow vous permet de spécifier dynamiquement les réponses DNS et les règles de rebinding en utilisant les requêtes de domaine elles-mêmes. respond to DNS queries for this domain with 34.192.228....
CVE-2023-32571-POC
Dynamic Linq injection to RCE - CVE-2023-32571 About Dynamic Linq injection to RCE CVE-2023-32571 Recently, members of the NCC Group discovered a vulnerability in Dynamic Linq that allows attackers to call C functions through a Linq Injection, thus making it possible to obtain RCE. Even with the...
sh00t
A Testing Environment for Manual Security Testers Sh00t is a task manager to let you focus on performing security testing provides To Do checklists of test cases helps to create bug reports with customizable bug templates Features: Dynamic Task Manager to replace simple editors or task management...
l4srs
l4srs Rust implementation of the Log 4 Shell log 4 j - CVE-2021-44228 to build run cargo +nightly build This version will let you build command classes, dynamically serve a mini meterpreter that runs in a thread of the exploited Java app, and runs the LDAP and HTTP servers. This version servers...
iblessing
☠️ ██╗██████╗ ██╗ ███████╗███████╗███████╗██╗███╗ ██╗ ██████╗ ██║██╔══██╗██║ ██╔════╝██╔════╝██╔════╝██║████╗ ██║██╔════╝ ██║██████╔╝██║ █████╗ ███████╗███████╗██║██╔██╗ ██║██║ ███╗ ██║██╔══██╗██║ ██╔══╝ ╚════██║╚════██║██║██║╚██╗██║██║ ██║ ██║██████╔╝███████╗███████╗███████║███████║██║██║...
MobileApp-Pentest-Cheatsheet
Mobile Application Penetration Testing Cheat Sheet The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics and checklist, which is mapped OWASP Mobile Risk Top 10 for conducting pentest. Mobil...
proxychains-ng
ProxyChains-NG версия 4.17 README ProxyChains — это UNIX-программа, которая перехватывает сетевые функции libc в ДИНАМИЧЕСКИ СВЯЗАННЫХ программах через предварительно загружаемую DLL dlsym, LDPRELOAD и перенаправляет соединения через прокси SOCKS4a/5 или HTTP. Она поддерживает только TCP без...
DynamicDotNet
DynamicDotNet A collection of various and sundry code snippets that leverage .NET dynamic tradecraft Purpose To showcase offensive and defensive tooling and POCs that leverage .NET dynamic loading, staging, bootstrapping, types, objects, functions, etc. Contribute Source Code & Text Documents All...
magisk-renef
MagiskRenef Un module Magisk / KernelSU / APatch qui empaquette et exécute automatiquement renef — un kit d'instrumentation dynamique pour Android. Inspiré par magisk-frida. Prérequis Appareil Android rooté Magisk / KernelSU / KernelSU Next / APatch ARM64 uniquement — renef ne prend en charge que...
jackhammer
Jackhammer: Un outil d'évaluation/gestion des vulnérabilités de sécurité pour résoudre tous les problèmes de l'équipe sécurité. Qu'est-ce que Jackhammer ? Jackhammer est un outil de collaboration conçu pour combler le fossé entre l'équipe sécurité et les équipes de développement et QA, et pour...
functrace
functrace - Un traceur de fonctions functrace est un outil qui aide à analyser un fichier binaire avec instrumentation dynamique en utilisant DynamoRIO http://dynamorio.org/. Voici quelques fonctionnalités implémentées basées sur DynamoRIO : désassembler tout le code exécuté désassembler une...
leaky-vessels-dynamic-detector
ВНИМАНИЕ Этот репозиторий заархивирован. В код больше не будут вноситься обновления, и к моменту прочтения этого уведомления он может быть небезопасным или даже неработоспособным. Рассматривайте его только в исторических целях и обращайтесь с ним осторожно. Leaky Vessels Dynamic Detector В этом...
DInvoke
DInvoke Dynamic replacement for PInvoke on Windows. DInvoke contains powerful primitives that may be combined intelligently to dynamically invoke unmanaged code from disk or from memory with careful precision. This may be used for many purposes such as PE parsing, intelligent dynamic API...
clroxide
ClrOxide ClrOxide is a rust library that allows you to host the CLR and dynamically execute dotnet binaries. I wanted to call it Kepler for no particular reason, but there's already a package named kepler in cargo. : I have been working on hosting CLR with rust on and off for 2 years now, and...