Freeze.rs

THIS REPOSITORY HAS BEEN ARCHIVED To view the latest version of Freeze.rs or to submit an issue, reference https://github.com/Tylous/Freeze.rs. Freeze.rs More Information If you want to learn more about the techniques utilized in this framework, please take a look at SourceZero Blog and the...

osintbuddy

I have no data yet. It is a capital mistake to theorize before one has data. Insensibly one begins to twist facts to suit theories, instead of theories to suit facts. | plugins-system | osintbuddy.com | osintbuddy discord | entities | pypi package | Introducing OSINTBuddy Notice - No, this projec...

KnockKnock

THIS REPOSITORY HAS BEEN ARCHIVED To view the latest version of KnockKnock or to submit an issue, reference https://github.com/waffl3ss/KnockKnock. KnockKnock - v0.9.9 Please make sure to actually utilize the README. Designed to validate potential usernames by querying OneDrive and/or Microsoft...

Kousei

Kousei こうせい 作者： nu11secur1ty 年份： 2023–2026 语言： Python（可选 Go 模块） 用途： 生成 SQLi 概念验证请求，自动化 sqlmap 攻击，并轻松管理攻击模块。 描述 Kousei こうせい 是一个针对 sqlmap 的激进框架，可与任何能够生成 POST、GET 或其他 HTTP 请求的 Web 扫描器配合使用。它是一个命令行工具，简化了使用 sqlmap 构造和执行 SQL 注入概念验证（PoC）攻击的过程。它结合了 Go 和 Python 模块来生成漏洞利用请求、使用高级参数启动 sqlmap，并管理辅助攻击脚本。 功能 生成自...

DevAudit

Note : DevAudit uses the OSS Index database, which has some rate limiting. If you notice you are hitting the limit please raise an issue. Authenticated users get a higher limit, and we am implementing authentication into DevAudit soon. Most non-authenticated users probably won't notice the limit...

dvenom

🐍 Double Venom DVenom Double Venom DVenom is a tool that helps red teamers bypass AVs by providing an encryption wrapper and loader for your shellcode. 🚀 Features 🛡️ Capable of bypassing some well-known antivirus AVs. 🔒 Offers multiple encryption methods including RC4, AES256, XOR, and ROT. 🏗️...

spacesiren

SpaceSiren SpaceSirenは、ハニートークン マネージャー兼アラートシステムで、AWS向けです。この完全サーバーレスアプリケーションを使用すると、大規模に -- SpaceSirenインスタンスごとに最大10,000個 -- ハニートークンをほぼ無料で作成・管理できます。1 動作の仕組み SpaceSirenは、権限のないAWS IAMユーザーとそのユーザーのアクセスキーを作成するAPIを提供します。 アクセスキーを任意の場所（例えば、プロプライエタリコードやプライベートデータストア）に散りばめます。...

Brutal

Teensyがペネトレーションに使用可能に TeensyはRubber...

android-classyshark

ClassyShark Introduction ClassyShark is a standalone binary inspection tool for Android developers. It can reliably browse any Android executable and show important info such as class interfaces and members, dex counts and dependencies. ClassyShark supports multiple formats including libraries...

TJ-OPT

TJ-OPT Release Date September 9th 2024 Introduction As a pentester, there are many great resources, cheat sheets, and guidelines that contain a large amount of valuable information. However, it can be frustrating and time-consuming to find these notes or resources that are scattered all over the...

dmi-tcat

DMI TCAT The Digital Methods Initiative Twitter Capture and Analysis Toolset DMI-TCAT allows one to retrieve and collect tweets from Twitter and to analyze them in various ways. Installation You can find detailed installation instructions in the wiki Requirements Twitter API credentials these can...

gradle-static-analysis-plugin

DEPRECATED Gradle static analysis plugin ⚠️ A fork of this project is maintained at https://github.com/GradleUp/static-analysis-plugin/ Please migrate by using com.gradleup.static-analysis plugin id instead. A Gradle plugin to easily apply the same setup of static analysis tools across different...

CVE-2023-1454

CVE-2023-1454 jeecg-boot unauthorized SQL Injection Vulnerability CVE-2023-1454 Vulnerability| jeecg-boot unauthorized SQL Injection Vulnerability CVE-2023-1454 ---|--- Chinese name| jeecg-boot 未授权SQL注入漏洞（CVE-2023-1454 CVSS core| 9.8 FOFA Query click to view the results directly| title=="JeecgBoo...

CSPTPlayground

Client-Site Path Traversal Playground !Doyensec Research...

CVE-2025-2783

Chromium CVE-2025-2783: Sandbox Escape & Full-Chain RCE Exploit This repository contains a full-chain exploit implementation for CVE-2025-2783. The vulnerability resides in Chromium's Ipcz communication layer, allowing an attacker to achieve sandbox escape and arbitrary code execution from a...

CVE-2024-32113

CVE-2024-32113 Apache OFBIZ Path traversal leading to RCE EXP. Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.14not include. Users are recommended to upgrade to version 18.12.14 , which fixes...

CVE-2026-47360

A flaw was found in Apache HTTP Server's modsessioncookie module. When internal redirects alter the SessionCookieRemove configuration, the server may fail to strip the session cookie as expected. This issue can lead to information disclosure by inadvertently forwarding sensitive user session toke...

CVE-2026-56449

A flaw was found in the modproxyhtml module of Apache HTTP Server. An attacker who controls or manipulates HTTP response bodies processed by the proxy can trigger an out-of-bounds memory write. This issue can cause the server process to crash, resulting in a Denial of Service DoS. Mitigation...

CVE-2026-48005

A flaw was found in the modauthdigest module of the Apache HTTP Server. When Digest authentication is configured with nonce-count checking enabled, missing authentication checks allow an unauthenticated remote attacker to submit forged HTTP Authorization headers. This flaw can lead to a Denial of...

CVE-2026-42356

A flaw was found in Apache HTTP Server. An attacker could achieve unintended code execution when an internal redirect generated by a Common Gateway Interface CGI program points to a non-executable file. If the target file resides in a directory configured for CGI execution and lacks a file...