netsentryx

NetSentryx PRO 🛡️ AI-Driven, High-Performance Real-Time Network Observability & Threat Detection Engine NetSentryx PRO is a next-generation, event-driven network monitoring and threat intelligence platform. Combining rule-based signatures with a PyTorch Deep Autoencoder, it provides sub-10ms packe...

realme-c53-unlock-root

Realme C53 RMX3760 — Bootloader Unlock & Root Toolkit English | Bahasa Indonesia Unlock bootloader and root your Realme C53 and other Realme devices. Supports KernelSU, Magisk, or a hybrid of both. ⚠️ RMX3760 Unisoc T612 : Bootloader unlock + Magisk root are verified working on BOTH Android 15 and...

pois0nSword

pois0nSword In development, not currently useful for users. pois0nSword is an iOS project with the goal of eventually enabling user interface customization. Currently a demonstration of arbitrary webcontent read write using cve-2025-43529 on iOS 26.1. As well as a PAC bypass utilizing...

CVE-2024-56426

Exynos 990 / Exynos9830 Unified BootROM Exploit Unified CVE-2024-56426 tooling for the Exynos 990 Galaxy S20, S20 FE, and Note20 families. The exploit accepts all ten model names and maps them onto six verified stock bootloader families. !CAUTION The tracked key bundle and generated images are...

crypto-lab-merkle-proofs

crypto-lab-merkle-proofs What It Is This is an interactive demo of Merkle trees and Merkle inclusion proofs , built on SHA-256 via the browser's WebCrypto API. A Merkle tree hashes a set of data blocks into a single root hash that commits to all of them at once; an inclusion proof is the short li...

AMBER-ICI

AMBER ICI v5 AMBER ICI AMBER Investigative Command Interface is a local-first browser interface for investigative and analytical workflows powered by a local Ollama server. It includes: A single-model Analyst Console and multi-model Parallel execution A user-defined agent chain driven from the ma...

puncia

PantheraP.uncia Official CLI utility for Subdomain Center & Exploit Observer Puncia is the official command-line client for two A.R.P. Syndicate intelligence APIs — point it at a domain, a brand, or a vulnerability ID and get structured JSON back in seconds, no browser required: 🕸️ Subdomain Cente...

Bastillion

Bastillion A modern, web-based SSH console and SSH key management tool. Bastillion gives you a clean, browser-based way to manage SSH access across all your systems — like a bastion host with a friendly dashboard. It does two things: 1. Web-based SSH terminal — once a host is registered, authoriz...

JQueryingU

JQueryingU 참고 사항: 기본 클라이언트 측 탐지 코드는 Christian Ludwighttps://jsfiddle.net/ChristianL/AVyND/가 작성했으며, 2016년 APT 29이 사용했습니다. APT 29은 팝업을 POST 요청으로 수정했고, 악성 페이로드를 보내기 전에 사용자 시스템과 클릭한 사용자를 프로파일링하기 위해 컨퍼런스 섀도잉 캠페인 중에 이를 사용했습니다. 코드는 APT 29이 사용한 일반 텍스트 POST 대신 Base64로 인코딩된 가짜 분석 GET 요청을 통해 정보를 전송하도록...

UnRaid <=6.80 - Remote Code Execution

UnRaid =6.80 allows remote unauthenticated attackers to execute arbitrary code. id: CVE-2020-5847 info: name: UnRaid =6.80 - Remote Code Execution author: madrobot severity: critical description: UnRaid =6.80 allows remote unauthenticated attackers to execute arbitrary code. impact: |...

PaperCut - Unauthenticated Remote Code Execution

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper access control. ...

ForgeRock OpenAM <7.0 - Remote Code Execution

ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/ request to the server. The vulnerabilit...

Openemr < 7.0.0.1 - Cross-Site Scripting

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1. id: CVE-2022-2733 info: name: Openemr 7.0.0.1 - Cross-Site Scripting author: ctflearner severity: medium description: | Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to...

Fortra GoAnywhere MFT - Authentication Bypass

Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal. id: CVE-2024-0204 info: name: Fortra GoAnywhere MFT - Authentication Bypass author: DhiyaneshDK severity: critical description: | Authentication bypas...

Nagios XI 5.7.5 - Cross-Site Scripting

Nagios XI 5.7.5 contains a cross-site scripting vulnerability in the file /usr/local/nagiosxi/html/admin/sshterm.php, due to improper sanitization of user-controlled input. A maliciously crafted URL, when clicked by an admin user, can be used to steal session cookies, or it can be chained with th...

D-Link NAS - Command Injection via Name Parameter

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgiuseradd of the file /cgi-bin/accountmgr.cgi?cmd=cgiuseradd. The manipulation of the argument name leads to os command...

Exploit for CVE-2026-82222

CVE-2026-82222 — GiveWP Marker-Only RCE Validation Lab Privat...

fragattacks

FragAttacks: Fragmentation & Aggregation Attacks 1. 소개 이 저장소에는 FragAttacks 도구가 포함되어 있습니다. 이 도구는 Wi-Fi 클라이언트와 액세스 포인트에서 fr agmentation 및 ag gregation 공격을 테스트할 수 있습니다. 이러한 취약점은 모든 보호된 Wi-Fi 네트워크에 영향을 미칩니다. 이러한 취약점에 대한 자세한 내용은 fragattacks.com을 참조하세요. 다음과 같은 추가 리소스를 이용할 수 있습니다: USENIX Security 프레젠테이션...

chainsaw

Windows 포렌식 아티팩트 신속 검색 및 헌팅 Chainsaw는 이벤트 로그 및 MFT 파일과 같은 Windows 포렌식 아티팩트 내에서 위협을 신속하게 식별할 수 있는 강력한 '1차 대응first-response' 기능을 제공합니다. Chainsaw는 이벤트 로그에서 키워드를 검색하는 일반적이고 빠른 방법을 제공하며, Sigma 탐지 규칙에 대한 기본 제공 지원과 사용자 정의 Chainsaw 탐지 규칙을 통해 위협을 식별합니다. 기능 🎯 Sigma 탐지 규칙 및 사용자 정의 Chainsaw 탐지 규칙을 사용하여 위협 헌팅...

btlejuice

BtleJuice Framework 소개 BtleJuice는 Bluetooth Smart 기기Bluetooth Low Energy라고도 함에 대한 중간자Man-in-the-Middle 공격을 수행하기 위한 완전한 프레임워크입니다. 구성 요소는 다음과 같습니다: 인터셉션 코어 인터셉션 프록시 전용 웹 인터페이스 Python 및 Node.js 바인딩 BtleJuice를 설치하는 방법은? BtleJuice 설치는 아주 쉽습니다. 먼저 시스템이 최신 버전의 Node.js=4.3.2와 npm 을 사용하는지 확인하세요. 그런 다음 필요한...