1675177 matches found
heartwood
โค๏ธ๐ชต Radicle Heartwood Protocol & Stack Heartwood is the third iteration of the Radicle Protocol, a powerful peer-to-peer code collaboration and publishing stack. The repository contains a full implementation of Heartwood, complete with a user-friendly command-line interface rad and network daemon...
recon
O.G. AUTO-RECON Caracterรญsticas El propรณsito de O.G. Auto-Recon es automatizar la fase inicial de recopilaciรณn de informaciรณn y luego enumerar en funciรณn de esos resultados tanto como sea posible. Esta herramienta estรก pensada para CTF y puede ser bastante ruidosa. No es la herramienta mรกs...
malwoverview
Malwoverview !Alt...
CVE-2022-22063
CVE-2022-22063 CVE-2022-22063 is a security issue in the hypervisor firmware of some older Qualcomm chipsets. An unprotected hardware component the "boot remapper" can be abused to gain full read/write access to the hypervisor from a modified operating system privilege escalation. Exploiting the...
gitpwnd
GitPwnd GitPwnd is a tool to aid in network penetration tests. GitPwnd allows an attacker to send commands to compromised machines and receive the results back using a git repo as the command and control transport layer. By using git as the communication mechanism, the compromised machines don't...
unicorn
unicorn Written by: Dave Kennedy @HackingDave Website: https://www.trustedsec.com Magic Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David...
RED_HAWK
Versiรณn 2.0.0 Por R3D@0R2H1N A.K.A Tuhinshubhra Herramienta integral para Recopilaciรณn de Informaciรณn y Escaneo de Vulnerabilidades Escaneos Que Puedes Realizar Usando RED HAWK : Escaneo Bรกsico Tรญtulo del sitio NUEVO Direcciรณn IP Detecciรณn del Servidor Web MEJORADO Detecciรณn de CMS Detecciรณn de...
Payload-and-Polyglot-Lists
Payload & Polyglot Lists Found a payload that doesn't work? Please open an issue with the payload, target context, and what you expected to happen. Pull requests with fixes or new payloads are always welcome. Research is ongoing. This project is under active development and will be updated...
CVE-2026-43499-root-KernelSU
CVE-2026-43499-root-KernelSU A local privilege escalation adaptation based on kernel vulnerability CVE-2026-43499, with embedded KernelSU integrated. It compiles to produce preload.so; upon successful exploitation, KernelSU will be started in late-load mode jailbreak mode. Supports generating...
graphw00f
Credits to Nick Aleks for the logo! graphw00f - GraphQL Server Fingerprinting Table of Contents How does it work? Detections GraphQL Threat Matrix Prerequisites Installation Configuration Example Usage Fingerprinting GraphQL Detecting & Fingerprinting GraphQL Support & Issues Resources How does i...
graphw00f
Crรฉditos a Nick Aleks por el logo! graphw00f - Fingerprinting de servidores GraphQL Tabla de Contenidos ยฟCรณmo funciona? Detecciones Matriz de Amenazas GraphQL Requisitos previos Instalaciรณn Configuraciรณn Ejemplo de uso Fingerprinting de GraphQL Detecciรณn y Fingerprinting de GraphQL Soporte e...
pingap
pingap Before the pingap version is stable, no pull requests will be accepted. If you have any questions, please create a new issue first. Overview Pingap is a high-performance reverse proxy powered by the Cloudflare Pingora . It simplifies operational management by enabling dynamic, zero-downtim...
assetfinder
assetfinder Find domains and subdomains potentially related to a given domain. Install If you have Go installed and configured i.e. with $GOPATH/bin in your $PATH: root@kitploit: go get -u github.com/tomnomnom/assetfinder Otherwise download a release for your platform. To make it easier to execut...
ShellSweep
ShellSweep ShellSweeping the evil Why ShellSweep "ShellSweep" is a PowerShell/Python/Lua tool designed to detect potential web shell files in a specified directory. ShellSheep and it's suite of tools calculate the entropy of file contents to estimate the likelihood of a file being a web shell. Hi...
thermoptic
thermoptic "I don't believe it, thermoptic camouflage!" What is it? This is an HTTP proxy designed to bypass services that use fingerprinting such as JA4+ to block certain HTTP clients. Using this proxy, you can use your preferred HTTP clients like curl and still have magically indistinguishable...
slsa
SLSA "salsa" is Supply-chain Levels for Software Artifacts SLSA pronounced "salsa" is a security framework from source to service, giving anyone working with software a common language for increasing levels of software security and supply chain integrity. Itโs how you get from safe enough to bein...
Findomain
Findomain The complete solution for domain recognition. Supports screenshotting, port scanning, importing data from other tools, subdomain monitoring, and more. Be alerted on your findings through services such as Discord, Slack, and Telegram. Multiple API Keys for sources and much more. Chat wit...
ore-mal-pkg-inspector
OreWatch Multi-Ecosystem Malicious Package Detection and Supply Chain Security Scanner A production-grade security tool for detecting malicious packages and supply chain threats across npm, PyPI, Maven, RubyGems, Go, and Cargo ecosystems. Leverages automated threat intelligence collection from...
CVE-2026-0776
CVE-2026-0776 - Discord Client Uncontrolled Search Path Element Summary This repository documents CVE-2026-0776, a local code execution issue affecting the Discord Desktop Client on Windows. The vulnerability is related to unsafe module resolution behavior in Node.js-based components, which may...
s2-067-CVE-2024-53677
s2-067-CVE-2024-53677 s2-067CVE-2024-53677 Summary File upload logic is flawed, and allows an attacker to enable paths with traversals - similar problem as reported in S2-066 Who should read this All Struts 2 developers and users Impact of vulnerability Remote Code Execution Maximum security rati...