imR0T

imR0T cryp·tog·ra·phy imR0T: Send a quick message with simple text encryption to your whatsapp contact and , basically in ROT13 with new multi encryption based algorithm on ASCII and Symbols Substitution Donate If this project is very helpful to your penetration testing and u want to support me ,...

nray

nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...

Learn-about-cve-2025-31133-poc

Learn-about-cve-2025-31133-poc Overview A proof-of-concept demonstration and learning environment for CVE-2025-31133 , a security vulnerability in runc that allows bypassing maskedPaths protection through a race condition. maskedPaths are designed to prevent containers from accessing sensitive ho...

Malicious code in tailwind-animate-final (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7961570b88f7d462fa4b80912aacfa2cd239ecb3e00700d1431f2fcb7d8ceb26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18479 Malicious code in tailwind-animate-final (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7961570b88f7d462fa4b80912aacfa2cd239ecb3e00700d1431f2fcb7d8ceb26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18478 Malicious code in tailwind-animate-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d1257b54849808aed2580131f3b1fe66fe84e3ea269fa24d9f90aec9d813702 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-animate-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d1257b54849808aed2580131f3b1fe66fe84e3ea269fa24d9f90aec9d813702 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-animatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2a4349effecf9897d6d704e42ba50e80109de5b6533346bc8649e2f442c0700 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18481 Malicious code in tailwind-animatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2a4349effecf9897d6d704e42ba50e80109de5b6533346bc8649e2f442c0700 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-animate-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9525dcfcd1430ec58c7d819289a7136591139ba745b35dde7516d6fd650976b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18482 Malicious code in unjailed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bf8a2313291fe4963179c13770884f15804a098e9c156dd61d19563c730f3b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in unjailed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bf8a2313291fe4963179c13770884f15804a098e9c156dd61d19563c730f3b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18480 Malicious code in tailwind-animate-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9525dcfcd1430ec58c7d819289a7136591139ba745b35dde7516d6fd650976b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More

Some attacks this week didn't need much of a trick. A fake support call, a trusted extension, a shared link, or a device with no password. Small things that people barely think about. Yet each was enough to cause serious trouble. Then there were the bigger messes. Billions stolen, hidden networks...

Malicious code in @mrlegendbot/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a49968dc4de126619a2eb1720e68b38768484995188eda6f8cc7bef6bbb32c95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18474 Malicious code in @mrlegendbot/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a49968dc4de126619a2eb1720e68b38768484995188eda6f8cc7bef6bbb32c95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

mininode

Mininode Mininode is a CLI tool to reduce the attack surface of the Node.js applications by using static analysis of source code. It supports two modes of reduction 1 coarse, 2 fine. Mininode constructs the dependency graph modules and functions used of the application starting from main file, i....

DockerENT

DockerENT DockerENT is activE ruN time application security scanning T ool RAST tool. It is a pluggable framework written in Python. It comes with a CLI application and a clean Web Interface written using StreamLit. DockerENT has been designed to detect weak security misconfigurations in producti...

pcfg_cracker

PCFG = Probabilistic Context Free Grammar PCFG = Pretty Cool Fuzzy Guesser In short: A collection of tools to perform research into how humans generate passwords. These can be used to crack password hashes, but also create synthetic passwords honeywords, or help develop better password strength...

doublehop

Doublehop This tool aims to assist in using PowerShell Remoting / WinRM to execute PowerShell commands on remote hosts through WinRM double hop technique. This tool assumes you have internal network and CLI access. Usage doublehop Usage: -c string Command we are executing. -j string Host we are...