300263 matches found
python-haystack
python-haystack memory forensics |travis| |coverage| |landscape| |pypi| |docs| Quick Start: Quick usage guide in the docs/ folder. Haystack-reverse CLI in the docs/ folder. More documentation Introduction: python-haystack is an heap analysis framework, focused on searching and reversing of C...
brawl-public-game-001
BRAWL One of the challenging problems for cyber security researchers developing detection and response capabilities is finding a realistic environment in which to test their hypothesis and capabilities. The cheapest method is to test capabilities on a small lab network. But this environment is...
CVE-2024-4956
CVE-2024-4956 - Unauthenticated Path Traversal in Nexus Repository Manager 3 The Nexus Repository Manager is a repository manager that organizes, stores, and distributes artifacts needed for development. A path traversal vulnerability has been discovered in Nexus Repository 3, in versions prior t...
CVE-2021-40154
CVE-2021-40154 LPC55S69 and K82 USB In-System Programming ISP Buffer Over Read Vulnerabilities POC to test the BootROM vulnerability found in LPC55S69 and K82 Series Revision A2. The vulnerability is fixed in newer devices with newe Revision A3 for LPC55S69. Vulnerable Devices: Confirmed: LPC55S6...
memoro
Memoro Memoro is a highly detailed heap profiler. Memoro not only shows you where and when your program makes heap allocations, but will show you how your program actually used that memory. Memoro collects detailed information on accesses to the heap, including reads and writes to memory and when...
masvs
OWASP Mobile Application Security Verification Standard MASVS The OWASP Mobile Application Security Verification Standard MASVS establishes baseline security and privacy requirements for mobile apps that are broken down in the the OWASP Mobile Security Weakness Enumeration MASWE and tested in the...
CVE-2025-51869
CVE-2025-51869 Vulnerability description Liner is a reliable AI search engine with over 10 million users worldwide. Liner construct a search engine based on LLM, which is vulnerable to Insecure Direct Object Reference IDOR in its chat component. An attacker can exploit this IDOR to tamper other...
RedRabbit
RedRabbit About RedRabbit is a PowerShell script aimed at helping pentesters conduct ethical hacking RedTeam. The aim is to highlight just how Powerful PowerShell is and how it can be used against you Ethically. To Run You can either run locally by downloading the script or run remotely using:...
cc-ddos
Please Star this repo if you find it useful, because it's free : Donation information in the release The script still works normally, tested in 2025. cc-ddos A Python script to DDOS a website using multiple HTTP Flood methods, a normal website only needs 5 seconds to completely crash! How to Use:...
ntfstool
ntfstool NTFSTool is a forensic tool focused on NTFS volumes. It supports reading partition info MBR, partition table, VBR but also information on Master File Table, Bitlocker encrypted volume, EFS encrypted files, USN journal and more. Download the latest binaries on AppVeyor or by checking the...
derailed
derailed CVE-2021-40875: Improper Access Control in Gurock TestRail versions give it the url of the target without the md5 path https://foo.com Run dirsearch or your preferred fuzzing tool against the list. You'll noticed that a lot of the files a fairly standard in size 0B/15B or 25B/31B/32MB --...
CVE-2026-21962
CVE-2026-21962 — Oracle HTTP Server / WebLogic Server Proxy Plug-in Access-Control Bypass via URI Normalization Inconsistency An independently reproduced exploit and analysis for CVE-2026-21962 improper access control, CVSS 10.0 in Oracle HTTP Server / the Oracle WebLogic Server Proxy Plug-in for...
CVE-2017-0785
CVE-2017-0785 PoC This is just a personal study based on the Android information leak vulnerability released by Armis. Further reading: https://www.facebook.com/khelfatni To run, be sure to have pybluez and pwntools installed. root@kitploit: sudo apt-get install bluetooth libbluetooth-dev sudo pi...
cve-2026-21509-mitigation
CVE-2026-21509 Mitigation Script Traditional Chinese version: READMEzh-TW.md Overview This script applies a registry-based mitigation to protect against CVE-2026-21509 Microsoft Office security feature bypass vulnerability, which has been exploited in the wild. CVE ID: CVE-2026-21509 Severity:...
kwetza
Introduction By Chris Le Roy @brompwnie [email protected] Kwetza is a tool that allows you to infect an existing Android application with a Meterpreter payload. What does it do? Kwetza infects an existing Android application with either custom or default payload templates to avoid detection ...
DirDar
DirDar v1.0 Description 🏴☠️ bypass forbidden directories - find and identify dir listing - you can use it as directory brute-forcer as well Compatabily This tool is compatible with all kind of operating systems as long as you have GO compiler installed Install You can use this command if you have...
detection-rules dev-v2.2.0
Detection Rules Detection Rules is the home for rules used by Elastic Security. This repository is used for the development, maintenance, testing, validation, and release of rules for Elastic Security’s Detection Engine. This repository was first announced on Elastic's blog post, Elastic Security...
CVE-2018-2628all
CVE-2018-2628 Vulnerability Batch Detection Script Usage IP format: root@kitploit: 192.168.31.1:443 192.168.31.100:443 Save it as url.txt in the same directory and run the script. Please comment on the output effect yourself! Execute like this: root@kitploit: The program works fine under Deepin,...
Chrome-App-Bound-Encryption-Decryption
ChromElevator Chrome App-Bound Encryption Decryption 🚀 Overview A post-exploitation tool demonstrating a complete, in-memory bypass of Chromium's App-Bound Encryption ABE. This project utilizes Direct Syscall-based Reflective Process Hollowing to launch a legitimate browser process in a suspended...