112651 matches found
Manalyze
Manalyze Introduction Manalyze is a static analysis tool for PE files that you can use to conduct primary assessment on an executable or set of executables. It collects weak signals that could indicate malicious behavior and displays information that can help a subsequent manual analysis. If you...
rehex
Reverse Engineers' Hex Editor A cross-platform Windows, Linux, macOS, BSD hex editor for reverse engineering, and everything else. An online copy of the manual can be accessed here: solemnwarning.net/rehex/manual/. Features Large 1TB+ file support Decoding of integer/floating point value types...
truegaze
truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...
tachyon
Tachyon Tachyon is a fast web application security reconnaissance tool. It is specifically meant to crawl a web application and look for left over or non-indexed files with the addition of reporting pages or scripts leaking internal data. User Requirements Linux Python 3.6+ User Installation...
pe_tree
PE Tree PE Tree is a Python module for viewing Portable Executable PE files in a tree-view using pefile and PyQt5. It can also be used with IDA Pro, Ghidra, Volatility, Rekall and minidump to view and dump in-memory PE files, as well as perform import table reconstruction. Table of contents 1...
hacksguard
Hacksguard 0.2 - Blazing Fast TUI Malware Analysis Tool π‘οΈ Hacksguard is a blazingly fast, multi-threaded Terminal UI TUI static analysis tool designed for SOC analysts, threat hunters, and reverse engineers. Built entirely in Rust, it provides an intuitive dashboard for quick triage and deep...
DIAFAN.CMS Unrestricted File Upload Code Execution
The vulnerability in the DIAFAN.CMS content management system is related to unrestricted upload of malicious files. Exploitation of this vulnerability may allow a remote attacker to upload arbitrary files...
osv-scanner
Use OSV-Scanner to find existing vulnerabilities affecting your project's dependencies. OSV-Scanner provides an officially supported frontend to the OSV database and CLI interface to OSV-Scalibr that connects a projectβs list of dependencies with the vulnerabilities that affect them. OSV-Scanner...
tcpflow
TCPFLOW 1.7.0 Downloads: https://github.com/simsong/tcpflow/releases CI and releases The Autotools build is the supported CI and release path. Run checks from a checkout with make -f Makefile.ci bootstrap native; distcheck also rebuilds, tests, installs and uninstalls the generated source...
urlbuster
βββ ββββββββββ βββ βββββββ βββ βββββββββββββββββββββββββββββββββββ βββ ββββββββββββββ βββββββββββ ββββββββββββββββββββββββββββββββββββ βββ ββββββββββββββ βββββββββββ βββββββββββ βββ ββββββ ββββββββ βββ ββββββββββββββ βββββββββββ βββββββββββ βββ ββββββ ββββββββ ββββββββββββ...
LOLBAS
Living Off The Land Binaries and Scripts and now also Libraries All the different files can be found behind a fancy frontend here: https://lolbas-project.github.io thanks @ConsciousHacker for this bit of eyecandy and the team over at https://gtfobins.github.io/. This repo serves as a place where ...
lifer
lifer A forensic tool for Windows link file examinations i.e. Windows shortcuts SYNOPSIS 'lifer' is a Windows or nix command-line tool inspired by the whitepaper 'The Meaning of Link Files in Forensic Examinations' by Harry Parsonage and available here. It started life as a lightweight tool that ...
iCULeak.py
iCULeak.py Tool to find and extract credentials from phone configuration files in environments managed by Cisco's CUCM Call Manager. When using Cisco's CUCM Call Manager, phone configuration files are stored on a TFTP server. These VoIP phone configuration files quite frequently contain sensitive...
Metadata-Attacker
Metadata-Attacker With this small suite of open source pentesting tools you're able to create an image .jpg, audio .mp3 or video .mp4 file containing your custom metadata or a set of cross-site scripting vectors to test any webservice against possible XSS vulnerabilities when displaying unfiltere...
snallygaster
snallygaster Finds file leaks and other security problems on HTTP servers. what? snallygaster is a tool that looks for files accessible on web servers that shouldn't be public and can pose a security risk. Typical examples include publicly accessible git repositories, backup files potentially...
jadx
JADX jadx - Dex to Java decompiler Command-line and GUI tools for producing Java source code from Android Dex and APK files !WARNING Please note that in most cases jadx can't decompile 100% of the code, so errors will occur. Check the Troubleshooting guide for workarounds. Main features: decompil...
cockpit-files security update
An update is available for cockpit-files. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A filesystem browser for Cockpit Security Fixes: cockpit-files:...
RLSA-2026:98566 Moderate: cockpit-files security update
A filesystem browser for Cockpit Security Fixes: cockpit-files: cockpit-files: Arbitrary file ownership and permission modification via symlink race condition CVE-2026-91203 cockpit-files: cockpit-files: Arbitrary file ownership change via symlink following in privileged paste CVE-2026-91202...
cockpit-files security update
An update is available for cockpit-files. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A filesystem browser for Cockpit Security Fixes: cockpit-files:...
RLSA-2026:98458 Moderate: cockpit-files security update
A filesystem browser for Cockpit Security Fixes: cockpit-files: cockpit-files: Arbitrary file ownership change via symlink following in privileged paste CVE-2026-91202 cockpit-files: cockpit-files: Local attacker can hijack file ownership via symlink race CVE-2026-91205 For more details about the...