26758 matches found
EUVD-2026-81607
vm2: NodeVM builtin denylist bypass via fs/promises despite -fs, allowing host filesystem writes...
pillager
Pillager Pillage filesystems for sensitive information with Go. Table of Contents 1. Summary 2. Installation 3. Usage 4. Exfiltration 5. Documentation Summary Pillager is designed to provide a simple means of leveraging Go's strong concurrency model to recursively search directories for sensitive...
nah
expensive mistakes stop here a guard that blocks catastrophic agent actions nahguard.ai β’ what it blocks β’ how it compares β’ how it decides β’ install β’ extend β’ threat model claude code Β· codex Β· cursor Β· pi Β· + 11 more nah is a guard that sits in your coding agent's hook path and reads tool call...
moonwalk
moonwalk Cover your tracks during Linux Exploitation / Penetration Testing by leaving zero traces on system logs and filesystem timestamps. π Table of Contents Introduction Features Installation Usage Contribution License βΉοΈ Introduction moonwalk is a 400 KB single-binary executable that can clear...
laurel
Linux Audit β Usable, Robust, Easy Logging LAUREL is an event post-processing plugin for auditd8 that generates useful, enriched JSON-based audit logs suitable for modern security monitoring setups. Documentation corresponding to the latest stable release can be found here. Why? TLDR: Instead of...
MEAT
M.E.A.T. - Mobile Evidence Acquisition Toolkit Meet M.E.A.T! From Jack Farley - BlackStone Discovery This toolkit aims to help forensicators perform different kinds of acquisitions on iOS devices and Android in the future. Requirements to run from source Windows or Linux Python 3.7.4 or 3.7.2 Pip...
objection
π±objection - Runtime Mobile Exploration objection is a runtime mobile exploration toolkit, powered by Frida, built to help you assess the security posture of your mobile applications, without needing a jailbreak. Supports both iOS and Android. Inspect and interact with container file systems...
fsmon
fsmon Low level filesystem monitor utility for Linux, Android, iOS and macOS. Author : pancake @ nowsecure License : MIT Designed for System administrators and incident responders Security researchers and forensic analysts Developers debugging I/O-heavy applications Reverse engineers interested i...
amla-sandbox
amla-sandbox This repository is the release source for the amla-sandbox Python package. Development happens in the amlalabs monorepo; this repo is updated on release. The Rust runtime that compiles to amlasandbox.wasm lives in amla-sandbox-core; the exact release tag this Python package was built...
EvilAbigail
Initrd encrypted root fs attack Scenario Laptop left turned off with FDE turned on Attacker boots from USB/CD/Network Script executes and backdoors initrd User returns to laptop, boots as normal Backdoored initrd loads: Debian/Ubuntu/Kali .so file into /sbin/init on boot, dropping a shell...
flar
flar FLAR is the Fast Light Agent Restrictor. It runs on rocks called gars. It is a simple, lightweight CLI tool in Go to run coding agent CLIs like Claude Code, Antigravity, Codex, Copilot and Reasonix safely inside isolated Bubblewrap bwrap sandboxes. The purpose is to instantly and without...
attack_monitor
Attack Monitor Attack Monitor is Python application written to enhance security monitoring capabilites of Windows 7/2008 and all later versions workstations/servers and to automate dynamic analysis of malware. Current modes mutually exclusive: Endpoint detection ED Malware analysis on dedicated...
hush
Give your agents boundaries you can read. Get decisions you can verify. What Β· Quickstart Β· How it works Β· SDKs Β· CLI Β· Policies Β· Docs Β· Spec What is HushSpec? HushSpec is an open specification for the security controls an AI agent operates under. Write a policy in YAML, evaluate it in Rust,...
CVE-2026-64600
π¨ CVE-2026-64600 β RefluxFS Linux Kernel Local Privilege Escalation LPE π Overview CVE-2026-64600 "RefluxFS" is a Linux kernel vulnerability affecting the RefluxFS filesystem implementation. The flaw stems from improper validation of filesystem metadata, potentially leading to kernel memory...
tofu
tofu A modular tool for hacking offline Windows filesystems and bypassing login screens. Can do hashdumps, OSK-Backdoors, user enumeration and more. How it works : When a Windows machine is shut down, unless it has Bitlocker or another encryption service enabled, it's storage device contains...
fatcat
fatcat This tool is designed to manipulate FAT filesystems, in order to explore, extract, repair, recover and forensic them. It currently supports FAT12, FAT16 and FAT32. Tutorials & examples Building and installing You can build fatcat this way: mkdir build cd build cmake .. make And then instal...
sandbox-runtime
Anthropic Sandbox Runtime srt A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. srt uses native OS sandboxing primitives sandbox-exec on macOS, bubblewrap on Linux and proxy-based network filterin...
tird
π Home π Specification π man page π Input Options π Tutorial β FAQ π₯ Install tird & tirdFS tird /tΙͺrd/ an acronym for "this is random data" is a file encryption tool that minimizes metadata and hides encrypted data. With tird, you can: 1. Create files filled with random data to use as containers ...
CVE-2024-4879-ServiceNow
CVE-2024-4879-ServiceNow ServiceNow is a platform for business transformation which helps companies manage digital workflows for enterprise operations. CVE-2024-4879 could allow an unauthenticated user to remotely execute code within the Now Platform. This vulnerability exploits three issues by...
Vulnerable-Docker-Engine
CVE-2021-41091 This exploit offers an in-depth look at the CVE-2021-41091 security vulnerability and provides a step-by-step guide on how to utilize the exploit script to achieve privilege escalation on a host. Vulnerability Summary CVE-2021-41091 is a flaw in Moby Docker Engine that allows...