mvt

Mobile Verification Toolkit !IMPORTANT We recently merged the "v3" branch. This introduced breaking changes. If you relied on mvt output in other scripts They might have broken. More details: https://github.com/mvt-project/mvt/issues/757 Mobile Verification Toolkit MVT is a collection of utilitie...

libsignal

Overview libsignal contains platform-agnostic APIs used by the official Signal clients and servers, exposed as a Java, Swift, or TypeScript library. The underlying implementations are written in Rust: libsignal-protocol: Implements the Signal protocol, including the Double Ratchet algorithm. A...

Vegile

Vegile - Ghost In The Shell Vegile is a tool for Post exploitation Techniques in linux. Post Exploitation techniques will ensure that we maintain some level of access and can potentially lead to deeper footholds into our targets trusted network. Donate If this project is very helpful to your...

ironclaw

IronClaw Your secure personal AI assistant, always on your side English | 简体中文 | Русский | 日本語 | 한국어 Reborn Quick Start • Philosophy • Features • Installation • Configuration • Security • Architecture IronClaw Reborn Quick Start IronClaw Reborn is the standalone runtime on the reborn-integration...

shotlooter

Introduction Shotlooter tool is developed to find sensitive data inside the screenshots which are uploaded to https://prnt.sc/ via the LightShot software by applying OCR and image processing methods. root@kitploit: +-------------------+ IMAGE FILE |!/usr/bin/python | +--------------------+ |...

Andromeda

Andromeda 使得对 Android 应用的初始逆向工程工作更快更简单。与其他替代方案相比，它使用 C/C++ 编写，具有显著的性能优势。 DEMO 该工具处于早期开发阶段 构建 要求 clang：apt install clang libzip：apt install libz-dev openssl：apt install libssl-dev make ./bin/andromeda androidapp.apk 命令 作者 Lasha Khasaia @qazqaz 注意 我对 Android 的经验非常有限，所以如果您有时间，请贡献。 待办事项 编写工具文档...

SharpDPAPI

SharpDPAPI SharpDPAPI is a C port of some DPAPI functionality from @gentilkiwi's Mimikatz project. I did not come up with this logic, it is simply a port from Mimikatz in order to better understand the process and operationalize it to fit our workflow. The SharpChrome subproject is an adaptation ...

seccubus

About Seccubus Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On repeated scan delta reporting ensures that findings only need to be judged when they first appear in the...

Azure-Sentinel

Microsoft Sentinel and Microsoft 365 Defender Welcome to the unified Microsoft Sentinel and Microsoft 365 Defender repository! This repository contains out of the box detections, exploration queries, hunting queries, workbooks, playbooks and much more to help you get ramped up with Microsoft...

binwalk

Binwalk v3 This is an updated version of the Binwalk firmware analysis tool, re-written in Rust for speed and accuracy. What does it do? Binwalk can identify, and optionally extract, files and data that have been embedded inside of other files. While its primary focus is firmware analysis, it...

Osintgram

Osintgram 🔎📸 Osintgram is an OSINT tool on Instagram to collect, analyze, and run reconnaissance. Disclaimer: FOR EDUCATIONAL PURPOSE ONLY! The contributors do not assume any responsibility for the use of this tool. $$\colorredWarning:$$ It is advisable to not use your own/primary account when...

UniBLEed

UniBLEed Unitree G1 RCE PoC & Scripts CVE-2026-76639 / CVE-2026-76640 technical details at boschko.ca/g1-ble-rce/ Use this repository only with robots, accounts, and networks you are authorized to test. The active chains can change the robot's WiFi configuration, stop or restart services, crash...

cve-2025-21479_iqooneo8

CVE-2025-21479 — Qualcomm Adreno GPU privilege escalation exploit SM8475 / iQOO Neo8 Local privilege escalation proof-of-concept for CVE-2025-21479 , targeting the Qualcomm Adreno GPU KGSL on the vivo V2301A iQOO Neo8 / PD2301, Snapdragon 8+ Gen 1 / SM8475, Adreno A730, Android 14, GKI kernel 5.1...

hexstrike-ai

HexStrike AI MCP Agents v6.0 AI-Powered MCP Cybersecurity Automation Platform Advanced AI-powered penetration testing MCP framework with 150+ security tools and 12+ autonomous AI agents 📋 What's New • 🏗️ Architecture • 🚀 Installation • 🛠️ Features • 🤖 AI Agents • 📡 API Reference Follow Our Social...

CVE-2026-9254

TP-Link Archer BE800 V1 — Parental Control LAN RCE CVE: CVE-2026-9254 CVSS: 8.7 High Auth required: None Network position: LAN only Found on version 1.3.2 Build 20251015 rel.106595553 Summary The parental control blocking endpoint /cgi-bin/luci/blocking?form=vercode is reachable from the LAN...

ghostlock-k419-adapter

GhostLock — OnePlus Locked Bootloader Jailbreak Kernel exploit for OnePlus/OPPO/realme devices with locked bootloader. Achieves root + KernelSU installation without unlocking bootloader or modifying boot image. Runtime auto-detection of kernel version with multi-device offset table. Vulnerability...

pagodo

pagodo - 被动式 Google 搜索语法 简介 pagodo 自动化 Google 搜索，寻找互联网上可能存在漏洞的网页和应用。它取代了通过 Web GUI 浏览器手动执行 Google 搜索语法的方式。 该工具包含两个部分。第一部分是 ghdbscraper.py，用于获取最新的 Google 搜索语法；第二部分是 pagodo.py，利用 ghdbscraper.py 收集到的信息。 核心 Google 搜索库现在使用了更灵活的 yagooglesearch，取代了原来的 googlesearch。请查看 yagooglesearch README...

pagodo

pagodo - Passive Google Dork Introduction pagodo automates Google searching for potentially vulnerable web pages and applications on the Internet. It replaces manually performing Google dork searches with a web GUI browser. There are 2 parts. The first is ghdbscraper.py that retrieves the latest...

Dwarf

Dwarf A debugger for reverse engineers, crackers and security analyst. Or you can call it damn, why are raspberries so fluffy or yet, duck warriors are rich as fuck. Whatever you like! Built on top of pyqt5, frida and some terrible code. Known Issues JavaTraceView is distorted JavaTraceView shows...

CVE-2020-9496

CVE-2020-9496 - RCE Because the 2 xmlrpc related requets in webtools xmlrpc and ping are not using authentication they are vulnerable to unsafe deserialization. This issue was reported to the security team by Alvaro Munoz [email protected] from the GitHub Security Lab team. This vulnerabilit...