voltron

Voltron Voltron is an extensible debugger UI toolkit written in Python. It aims to improve the user experience of various debuggers LLDB, GDB, VDB and WinDbg by enabling the attachment of utility views that can retrieve and display data from the debugger host. By running these views in other TTYs...

peach

Peach Fuzz - Vulnerability Scanning Framework This tool aims to look through files in a given directory to detect any unsafe, vulnerable, or dangerous function calls. It is designed to be extensible and easy to understand; you can "plug-and-play" modules that specify criteria on which types of...

boofuzz

.. image:: https://github.com/jtpereyda/boofuzz/raw/master/artwork/boo-logo-dark.svg :width: 60% :alt: boofuzz logo boofuzz: Network Protocol Fuzzing for Humans .. image:: https://github.com/jtpereyda/boofuzz/actions/workflows/test.yml/badge.svg?branch=master :target:...

tsunami-security-scanner

Tsunami Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence. To learn more about Tsunami, visit our documentation. Tsunami relies heavily on its plugin system to provide basic scanning capabilities...

jvmxray

JVMXRay: Java Application Security Monitoring Duke history Documentation | Changes from Upstream | Project Blog JVMXRay monitors Java applications in real-time via bytecode injection, detecting vulnerabilities and suspicious activity without code changes. 19 modular sensors track file access,...

combobulator

Dependency Combobulator Dependency Combobulator is an Open-Source, modular and extensible framework to detect and prevent dependency confusion leakage and potential attacks. This facilitates a holistic approach for ensuring secure application releases that can be evaluated against different sourc...

caddy

a project Every site on HTTPS Caddy is an extensible server platform that uses TLS by default. Releases · Documentation · Get Help...

cypheroth

Cypheroth Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets. Description This is a bash script that automates running cypher queries against Bloodhound data stored in a Neo4j database. I found myself re-running the same...

armory

root@kitploit: dM. ,MMb d'YM. ,P Mb MM 6MM MM 6MMb 6MMb 6MMMMMb MM 6MM MM M' d' YM. MM69 " MM69 MM69 Mb 6M' Mb MM69 " Mb d' ,PMbMMMMMMMMMMMMMMYM.,P d' YM. MM MM MM MM MM MM MM MM M \ ,MMMMMMMMbMMMMMMMMMMMMMMMbd'\ d' YM. MM MM MM MM YM. ,M9 MM YMP dM dMMMM MM MM MM YMMMMM9 MM M d' 8,P YMM Описание...

toolkit

English | Español Indetectables Toolkit Задуманный как швейцарский нож, этот тщательно подобранный набор инструментов бесценен для аналитиков вредоносного ПО, кракеров и экспертов по кибербезопасности. Он создан для поддержки как новичков, так и опытных пользователей. Этот набор дополняет...

ofrak

OFRAK OFRAKOpen Firmware Reverse Analysis Konsole은 바이너리 분석 및 수정 플랫폼입니다. OFRAK은 다음과 같은 기능을 결합합니다: 다양한 바이너리 형식을 식별 하고 언팩 합니다 현장 검증된 리버스 엔지니어링 도구로 언팩된 바이너리를 분석 합니다 강력한 패치 전략으로 바이너리를 수정 하고 리팩 합니다 OFRAK은 사용자 공간 실행 파일 외에도 다양한 임베디드 펌웨어 파일 형식을 지원합니다. 예를 들어: 압축 파일 시스템 압축 및 체크섬된 펌웨어 부트로더 RTOS/OS 커널 OFRAK은...

voltron

Voltron Voltron — это расширяемый набор инструментов для отладчика, написанный на Python. Он направлен на улучшение пользовательского опыта различных отладчиков LLDB, GDB, VDB и WinDbg за счёт возможности подключения вспомогательных представлений, которые могут получать и отображать данные из хос...

vigolium

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision Vigolium provides two complementary scanning modes: Native Scan vigolium scan: Deterministic, multi-phase scanning with 317 modules across content discovery, browser/SPA spidering, and...

paimei

PaiMei는 여러 확장 가능한 구성 요소로 이루어진 리버스 엔지니어링 프레임워크입니다. 이 프레임워크는 본질적으로 리버스 엔지니어의 스위스 아미 나이프라고 생각할 수 있으며, 퍼저 지원, 코드 커버리지 추적, 데이터 흐름 추적 등 다양한 정적 및 동적 작업에 효과적임이 입증되었습니다. 자세한 내용은 docs\index.html을 참조하세요...

LAST

L.A.S.T. Linux Automated Security scanning Tool the LAST tool you will ever use! This tool is used to automate the recon proces of Red Team Excercises. It gathers all the information and reports it back in an easy to read format. The script is made so it is possible for everyone to include his ow...

super

SUPER Android Analyzer Secure, Unified, Powerful and Extensible Rust Android Analyzer SUPER is a command-line application that can be used in Windows, MacOS X and Linux, that analyzes .apk files in search for vulnerabilities. It does this by decompressing APKs and applying a series of rules to...

bettercap

This repository is DEPRECATED, bettercap developementmoved here and every version 2.0.0 is considered LEGACY and NOT SUPPORTED...

Astra Linux – Vulnerability in wpa

Implementations of EAP-pwd in hostapd before version 2.10 and wpasupplicant before version 2.10 are vulnerable to side-channel attacks due to cache access patterns. NOTE: This issue exists because of an incomplete fix for CVE-2019-9495...

Astra Linux – Vulnerability in exempi

The XMP Toolkit SDK version 2020.1 and earlier is affected by a stack-based buffer overflow vulnerability that may lead to arbitrary code execution within the context of the current user. Exploitation requires user interaction—that is, the victim must open a specially crafted file...

Astra Linux – Vulnerability in libxml2

A flaw was discovered in the xmlBuildQName function of libxml2. Integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue may result in memory corruption or a denial of service when processing malicious input...