antisquat

AntiSquat AntiSquat leverages AI techniques such as natural language processing NLP, large language models ChatGPT and more to empower detection of typosquatting and phishing domains. How to use Clone the project via git clone https://github.com/redhuntlabs/antisquat. Install all dependencies by...

subdomain3

Subdomain3 README.md inChinese 中文 Description Subdomain3 is a new generation of tool , It helps penetration testers to discover more information in a shorter time than other tools.The information includes subdomains, IP, CDN, and so on. Please enjoy it. Screenshot medium pattern for speed Feature...

CVE-2018-11235

CVE-2018-11235 Creación automática de repositorio git malicioso para explotar CVE-2018-11235, una ejecución remota de código usando submódulos de Git. Publicación en el blog: https://devblogs.microsoft.com/devops/announcing-the-may-2018-git-security-vulnerability/...

smuggler

/ | | | | \ | | | | |/ |/ | || |/ | | | || | | | || | | /||||/ \ |\ || | @defparam Smuggler An HTTP Request Smuggling / Desync testing tool written in Python 3 Acknowledgements A special thanks to James Kettle for his research and methods into HTTP desyncs And a special thanks to Ben Sadeghipour...

peda

peda PEDA - Python Exploit Development Assistance for GDB Key Features: Enhance the display of gdb: colorize and display disassembly codes, registers, memory information during debugging. Add commands to support debugging and exploit development for a full list of commands use peda help: aslr --...

EUVD-2026-95756

Improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Apache Camel Karavan. A project file name supplied through the project file API was used verbatim as a path segment when the project was written to the working copy for a Git commit, so a name containing...

CVE-2026-103412

Apache Camel Karavan versions from 3.18.0 before 4.22.1 are vulnerable to a path traversal vulnerability. The application's project file API uses project file names verbatim as path segments when writing to a working copy for a Git commit. By providing a name containing ../ sequences, an authenti...

CVE-2026-103412 Apache Camel Karavan: project file name path traversal when committing a project to Git

Improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Apache Camel Karavan. A project file name supplied through the project file API was used verbatim as a path segment when the project was written to the working copy for a Git commit, so a name containing...

git-secrets-scan

Bitbucket Security: Secret Scanner Scans your files for hardcoded secrets, keys, and passwords. Creates a security Code Insights report if found. This Bitbucket Cloud supported Pipe leverages the gitleaks secret pattern registry to provide industry-leading Security Secrets Scanning capabilities t...

git-all-secrets

git-all-secrets About git-all-secrets is a tool that can: Clone multiple public/private github repositories of an organization and scan them, Clone multiple public/private github repositories of a user that belongs to an organization and scan them, Clone a single public/private repository of an...

git-all-secrets

git-all-secrets 关于 git-all-secrets 是一款能够执行以下操作的工具： 克隆某个组织的多个公共/私有 GitHub 仓库并进行扫描， 克隆组织中某个用户的多个公共/私有 GitHub 仓库并进行扫描， 克隆某个组织的单个公共/私有仓库并进行扫描， 克隆某个用户的单个公共/私有仓库并进行扫描， 克隆某个用户的单个公共/秘密 Gist 并进行扫描， 克隆组织中某个团队的所有仓库并进行扫描， 以上全部功能可以一起完成！没错！只需提供组织名称，即可获取该组织的所有秘密。如果你还想获取组织中某个团队的秘密，只需在组织名称旁注明团队名称。 同时支持克隆和扫描 GitHu...

CVE-2025-48384-poc

CVE-2025-48384-poc CVE-2025-48384 se presenta como una vulnerabilidad de resolución de enlace incorrecta seguimiento de enlaces en git. Específicamente, los nombres de archivo con retornos de carro se analizan incorrectamente en .git/config, e incluir un enlace simbólico para apuntar a un...

netsniff-ng

////////////////////////////////////////////////////////////////////////////// netsniff-ng - the packet sniffing beast \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ . . netsniff-ng is a free, performant / Linux network analyzer and .' '. networking toolkit. If you...

truegaze

truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...

CVE-2017-1000117

CVE-2017-1000117 工作原理 $ git clone --recursive [email protected]:ikmski/CVE-2017-1000117.git 如何创建此仓库 $ cat message.txt | gzip | base64 command $ git submodule add [email protected]:ikmski/Hello-World.git subs/CVE-2017-1000117 $ cat .gitmodules submodule "subs/CVE-2017-1000117" path =...

ROOT-APP-NPM-AIKIDO-2026-261915 AIKIDO-2026-261915 in simple-git - Patched by Root

Root has patched AIKIDO-2026-261915 in the simple-git package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-378256 AIKIDO-2026-378256 in simple-git - Patched by Root

Root has patched AIKIDO-2026-378256 in the simple-git package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-566884 AIKIDO-2026-566884 in simple-git - Patched by Root

Root has patched AIKIDO-2026-566884 in the simple-git package for Root:npm. Multiple fixed versions available...

CVE-2023-23946-POC

CVE-2023-23946 POC 漏洞利用 CVE-2023-23946 的解释与 POC CVE-2023-23946 漏洞是由于 Git 处理符号链接的方式存在缺陷导致的。当 Git 创建符号链接时，它实际上并没有将其视为符号链接，因此我们可以利用这一点使其指向工作树之外的文件。 首先创建一个符号链接 ln -s 你想访问的工作树之外的路径 symlink 现在创建一个用于 git apply 的补丁文件 diff --git a/symlink b/newsymlink rename from symlink rename to newsymlink -- diff --git...

wifi-password

wifi-password Quickly fetch your WiFi password and if needed, generate a QR code of your WiFi to allow phones to easily connect. Works on macOS and Linux , Windows Installation Install using pip $ python3 -m pip install --user wifi-password Install using git $ git clone...