gh-safe-repo

gh-safe-repo Create GitHub repositories with safe defaults applied automatically. Replaces the five-minute post-creation settings checklist with a single command. gh-safe-repo create Branch protection, immutable tags, Dependabot, restricted Actions permissions, and secret scanning with push...

androguard

Androguard Androguard: Reverse engineering and pentesting for Android applications Androguard 5 is a Python toolkit for Android reverse engineering: open an APK, inspect the manifest and DEX, disassemble or decompile code, hunt references and vulnerabilities, and optionally patch or analyze nativ...

androguard

Androguard Androguard: Reverse engineering and pentesting for Android applications Androguard 5 is a Python toolkit for Android reverse engineering: open an APK, inspect the manifest and DEX, disassemble or decompile code, hunt references and vulnerabilities, and optionally patch or analyze nativ...

witcher

witcher Implémenter et surveiller les contrôles Appsec à grande échelle. Prérequis NodeJS 20.13 Testé sur Mac Ubuntu Comment installer $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ npm i Construire une image Docker $ git clone [email protected]:mf-labs/witcher.git $ c...

witcher

witcher Implement and monitor Appsec control at scale. Requirements NodeJS 20.13 Tested on Mac Ubuntu How to install $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ npm i Build a Docker image $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ docker build ...

launchd-portrep

launchd-portrep launchd-portrep는 macOS의 초기 사용자 공간 프로세스이자 서비스 관리 데몬인 launchd의 포트 교체port replacement 취약점을 이용한 익스플로잇입니다. 공격자는 조작된 Mach 메시지를 bootstrap 포트로 보냄으로써, 자신도 송신 권한을 가진 임의의 Mach 포트에 대한 launchd의 송신 권한이 할당 해제되도록 강제할 수 있습니다. 이를 통해 공격자는 조회할 수 있는 모든 launchd 서비스를 시스템의 나머지 부분에게 사칭할 수 있습니다. 취약점 Launch...

hacktricks-cloud

HackTricks Cloud Hacktricks logos & motion designed by @ppieranacho .1 Run HackTricks Cloud Locally The workflow below follows Git's documented clone, checkout, and pull operations and the repository's published language branches and container setup.238910 Download latest version of hacktricks...

CVE-2026-23744

CVE-2026-23744 — MCPJam Inspector: неаутентифицированное удалённое выполнение кода PoC для неаутентифицированного удалённого выполнения кода через CVE-2026-23744. MCPJam Inspector 1.4.2 и более ранние версии открывают функциональность через /api/mcp/connect, которая позволяет запустить управляему...

kekeo

kekeo kekeo is a little toolbox I have started to manipulate Microsoft Kerberos in C and for fun ASN.1 library In kekeo, I use an external commercial library to deal with Kerberos ASN.1 structures: OSS ASN.1/C http://www.oss.com/asn1/products/asn1-c/asn1-c.html It was the only code...

wifite2

Wifite This repo is a complete re-write of wifite, a Python script for auditing wireless networks. Wifite runs existing wireless-auditing tools for you. Stop memorizing command arguments & switches! Wifite is designed to use all known methods for retrieving the password of a wireless access point...

safe-chain

Aikido Safe Chain ✅ Block malware on developer laptops and CI/CD ✅ Supports npm and PyPI more package managers coming ✅ Blocks packages newer than 48 hours without breaking your build ✅ Tokenless, free, no build data shared Need protection beyond npm & PyPI? Aikido Device Protection builds on Saf...

CVE-2026-102256

A post-authentication OS Command Injection vulnerability (CWE-78) exists in the SonicWall SMA1000 appliance . This flaw allows a remote authenticated attacker with administrator privileges to execute arbitrary OS commands under specific conditions, leading to remote code execution (RCE). The vuln...

CVE-2026-102256

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 appliance which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS...

CVE-2026-102256

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 appliance which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS...

EUVD-2026-94325

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 appliance which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS...

hulak

Client API natif Git avec secrets chiffrés. REST · GraphQL · OAuth Démarrage rapide • Explorateur GraphQL • Structure du projet • Documentation Exécutez une requête, tout un répertoire, ou restez en mode interactif hulak run ./requests/ Hulak exécute les fichiers de requêtes directement depuis...

filebuster

Filebuster An extremely fast and flexible web fuzzer What is it? Filebuster is a HTTP fuzzer / content discovery script with loads of features and built to be easy to use and fast! It uses one of the fastest HTTP classes in the world of PERL - Furl::HTTP. Also the thread modelling is optimized to...

cve-2019-1040-scanner

Сканер CVE-2019-1040 Проверяет уязвимость CVE-2019-1040 через SMB. Скрипт устанавливает соединение с целевым хостом хостами и отправляет недопустимую аутентификацию NTLM. Если она принимается, хост уязвим к CVE-2019-1040, и вы можете выполнить атаку MIC Remove с помощью ntlmrelayx. Обратите...

deepce

deepce . == === /"""""""""""""""""/ === / ===- \ X / \ \ / \/ / / / / / / / / \ ENUMERATE / // / / / // / / / ESCALATE ,/// ./// ESCAPE // Веб-сайт Перечисление Docker, повышение привилегий и побег из контейнеров DEEPCE Чтобы обеспечить совместимость с максимальным числом контейнеров,...

CBM

Car Backdoor Maker Le Car Backdoor Maker est un logiciel permettant de créer des modèles d'attaque et de les charger dans The Bicho. Avant de commencer, veuillez lire comment obtenir le matériel The Bicho. Capture d'écran Installation et utilisation Ce projet a son wiki où vous trouverez la...