ssh-audit

ssh-audit ssh-audit is a tool for ssh server & client configuration auditing. jtesta/ssh-audit v2.0+ is the updated and maintained version of ssh-audit forked from arthepsy/ssh-audit v1.x due to inactivity. Features Usage Screenshots Server Standard Audit Example Server Policy Audit Example Clien...

FMD Android

FMD Android SMS、インスタントメッセンジャー、またはWebインターフェースを介してデバイスを見つけます（FMD Server）。 FMDを使用すると、デバイスを紛失した際に位置情報の取得、呼び出し、ワイプ、その他のコマンドを発行できます。これは、Googleの「デバイスを探す」に対するセキュアなオープンソースの代替品を目指しています。 なぜ？ 先週、新品の電話をなくしました。もしGoogleサービスを使っていれば、見つける可能性がもっとあったでしょう。なぜ誰もプライバシーを犠牲にせずに紛失したデバイスを見つけるためのオープンソースアプリケーションを作成しなかったのでしょうか...

whisperpair-poc-tool

WhisperPair-PoC-Tool と研究 CVE-2025-36911 と Google Fast Pair エコシステムのセキュリティ脆弱性の詳細分析 ブログ記事 エグゼクティブサマリー Google Fast Pair は、Bluetooth ペアリングをシームレスにするために設計されました。通知をタップするだけで接続完了です。しかし、そのシームレスな体験がセキュリティ上の負債になったらどうなるでしょうか？ WhisperPair-PoC-Tool は、何百万もの Bluetooth アクセサリに影響を与える2つの重大な脆弱性クラス（不正なペアリングバイパスと Find My...

trufflehog

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

Find-WSUS

🧭 Find-WSUS Descubra configuraciones de servidores WSUS en todos los Objetos de directiva de grupo GPO — incluidas las Preferencias de directiva de grupo GPP ocultas. Find-WSUS es un script de PowerShell diseñado para profesionales de la seguridad y administradores de sistemas con el fin de...

openhaystack

OpenHaystack OpenHaystack is a framework for tracking personal Bluetooth devices via Apple's massive Find My network. Use it to create your own tracking tags that you can append to physical objects keyrings, backpacks, ... or integrate it into other Bluetooth-capable devices such as notebooks...

oppo-pgem10-ghostlock

OPPO Find X6 Pro GhostLock 适配项目 概述 本项目针对 CVE-2026-43499 GhostLock 漏洞在 OPPO Find X6 Pro PGEM10 上进行适配研究。 基于 NebuSec CyberMeowfia 原始 exploit 架构，参考 oppo-ghostlock 适配思路。 设备信息 项目| 值 ---|--- 设备| OPPO Find X6 Pro PGEM10 芯片| Snapdragon 8 Gen 2 SM8550 内核| Linux 5.15.149-android13 1 SMP PREEMPT 编译日期| Thu Fe...

dismember

🔪 Dismember Dismember is a command-line toolkit for Linux that can be used to scan the memory of all processes or particular ones for common secrets and custom regular expressions, among other things. It will eventually become a full /proc toolkit. Using the grep command, it can match a regular...

EpiServer Find <13.2.7 - Open Redirect

EpiServer Find before 13.2.7 contains an open redirect vulnerability via the tredirect parameter in a crafted URL, such as a /findv2/click URL. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id:...

httpgrep

Description A fast, asynchronous Python tool that scans HTTPS servers and greps for strings or regex patterns in HTTP response bodies and headers. It takes single hosts, URLs, CIDR ranges, IP ranges or files; scans multiple ports per target single, comma-lists or ranges, auto-detecting TLS vs pla...

nuubi

Nuubi Tools Scanner, Recon. Details Options: -h/--help | Show help message and exit Arguments: -b/--banner | Banner grabing of target ip address -s/--subnet | Subnetlookup of target -c/--cms | Cms detect with headers -d/--dns | Dnslookup of target domain -e/--extract | Extract links from target...

gtfocli

GTFOcli GTFOcli it's a Command Line Interface for easy binaries search commands that can be used to bypass local security restrictions in misconfigured systems. Table of Contents Table of Contents Installation Usage Search for Unix binaries Search for Windows binaries Search using dockerized...

ibrute

更新 クラウドストレージのセキュリティについて懸念がある場合は、What if I was a cloud? をお読みいただき、フィードバックをお寄せください。ありがとうございます。 楽しい時間の終わり、Appleが修正しました こちらがappleIDパスワードのブルートフォースpOcです。 これは単なるp0cなので、以下の機能はありません マルチスレッド機能 例外発生時の状態保存機能 自分で実装してください このツールは、ブルートフォース対策が実装されていないFind My...

whatportis

whatportis .. image:: https://github.com/opencve/opencve/workflows/Tests/badge.svg :target: https://github.com/ncrocfer/whatportis/actions/workflows/tests.yml .. image:: https://badge.fury.io/py/whatportis.svg :target: https://pypi.python.org/pypi/whatportis/ .. image::...

CVE-2025-21479-FX5P

CVE-2025-21479 · OPPO Find X5 Pro PFEM00 临时 root 基于 CVE-2025-21479（Adreno KGSL）的 OPPO Find X5 Pro PFEM00（内核 5.10.198-android12-9，ColorOS，BL 未解锁）内存态临时 root，落到 KernelSU v3.3.0 LKM late-load。English: README.md 链路：KGSL 物理读写 → 缴械 OEM guard、SELinux permissive、kptrrestrict=0 → capset 补丁发 full caps → ksu...

CVE-2026-38945

CVE-2026-38945 著者: Rafael José Núñez Gulías 会社: Iberian Var Group 影響を受ける製品: RayVentory Scan Engine 12.6 Update 8 および以前のバージョン Raynet アドバイザリ: RSEC200967 rvia in Raynet executes a find command with improperly terminated search criteria to locate Java installations when the oracle option is invoked...

BIT-MONGODB-2026-9737 Find command with $meta sort can lead to crash

During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t explicitly handle the meta expression case. This may lead to incorrect transformations leading to invariant failure...

Rocky Linux 8 [CIQ] Security Update: perl-File-Find-Rule (crlsa-2025_9605)

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20259605 advisory. perl-file-find-rule: File::Find::Rule Arbitrary Code Execution CVE-2011-10007 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 9 [CIQ] Security Update: perl-File-Find-Rule (crlsa-2025_9517)

The Rocky Linux 9 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20259517 advisory. perl-file-find-rule: File::Find::Rule Arbitrary Code Execution CVE-2011-10007 Tenable has extracted the preceding description block directly from the CIQ security...

AlmaLinux 9.2 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (ALMALINUX9.2:CLSA-2026:1779821440)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779821440 advisory. - Vim is an open source, command line text editor. Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's :find...