PowerShellArmoury

!IMPORTANT यह रिपॉजिटरी अब संग्रहीत हो गई है। हालाँकि यह एक मजेदार यात्रा थी, मुझे लगता है कि PSArmoury अपनी उपयोगिता खो चुका है। PowerShellArmoury पावरशेल आर्मरी पेंटेस्टर्स, "यहाँ रंग डालें"-टीमर्स और उन सभी के लिए है जो अपने अभियानों के दौरान विभिन्न पावरशेल टूल्स का उपयोग करते हैं। यह आपको अप...

renovate-operator v6.0.1

Renovate: The Kubernetes-Native Way Run Renovate on your own infrastructure with CRD-based scheduling, parallel execution, auto-discovery, and a built-in UI. If you self-host Renovate and already run Kubernetes, this operator gives you the control and observability that plain self-hosted setups...

authcov

AuthCov Web app authorisation coverage scanning. Introduction AuthCov crawls your web application using a Chrome headless browser while logged in as a pre-defined user. It intercepts and logs API requests as well as pages loaded during the crawling phase. In the next phase it logs in under a...

fingerprintx

الميزات • التثبيت • الاستخدام • تشغيل fingerprintx • الاستخدام كمكتبة • لماذا nmap لا؟ • ملاحظات • شكر وتقدير fingerprintx هو أداة مشابهة لـ httpx تدعم أيضًا بصمة الخدمات مثل RDP وSSH وMySQL وPostgreSQL وKafka وغيرها. يمكن استخدام fingerprintx جنبًا إلى جنب مع ماسحات المنافذ مثل Naabu لبصمة مجموع...

fingerprintx

Features • Installation • Usage • Running fingerprintx • Using as a library • Why not nmap? • Notes • Acknowledgements fingerprintx is a utility similar to httpx that also supports fingerprinting services like as RDP, SSH, MySQL, PostgreSQL, Kafka, etc. fingerprintx can be used alongside port...

WEASEL

WEASEL Beacon/Implant Client This is the part that runs on your target. You need to find a way to deliver this payload to the target and have the Python 3 interpreter execute it python3 beacon.py or cat beacon.py | python3. How it works Beacon checks in every interval seconds by making a DNS quer...

dumpscan

Public development on this tool has been paused but is still being worked on privately. Expect a massive update Q3/Q4 2024. Dumpscan is a command-line tool designed to extract and dump secrets from kernel and Windows Minidump formats. Kernel-dump parsing is provided by volatility3. Features x509...

dumpscan

इस उपकरण का सार्वजनिक विकास रोक दिया गया है लेकिन निजी तौर पर इस पर काम जारी है। 2024 की तीसरी/चौथी तिमाही में एक बड़ा अपडेट की उम्मीद है। Dumpscan एक कमांड-लाइन उपकरण है जो कर्नेल और Windows Minidump प्रारूपों से गुप्त जानकारी निकालने और डंप करने के लिए डिज़ाइन किया गया है। कर्नेल-डंप पार्सिंग...

noseyparker

Nosey Parker अब Titus द्वारा प्रतिस्थापित हो गया है। Nosey Parker आधिकारिक रूप से सेवानिवृत्त हो गया है हमारी घोषणा पोस्ट देखें https://www.praetorian.com/blog/titus-open-source-secret-scanner/। Titus रेपो https://github.com/praetorian-inc/titus पर पाया जा सकता है अवलोकन Nosey Parker एक CLI टूल ह...

pipelock v3.4.0

Pipelock Open-source AI agent firewall forVerifiable Egress Control. !pipelock...

PANIX

PANIX - الاستمرارية ضد NIX PANIX هو إطار عمل قوي، معياري، وقابل للتخصيص بدرجة كبيرة للاستمرارية في لينكس، مصمم لباحثي الأمن، مهندسي الاكتشاف، مختبري الاختراق، وعشاق CTF وغيرهم. بُني مع مراعاة التنوع، ويؤكد PANIX على الوظائف، مما يجعله أداة أساسية لفهم وتنفيذ مجموعة واسعة من تقنيات الاستمرارية...

CVE-2026-76156

OS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an authenticated administrator to execute arbitrary operating system commands as root...

Exploit for OS Command Injection in Atlassian Bitbucket

CVE-2022-36804 Bitbucket PoC This repository contains a Pytho...

monitor v0.39.0

BetterDB Monitor The monitoring layer that Valkey deserves. BetterDB persists what Valkey throws away - slowlogs, command patterns, client activity, anomaly signals - so you can debug what happened at 3am, not just what's happening now. Built for Valkey 8.x with native support for COMMANDLOG,...

ysoserial

ysoserial أداة إثبات مفهوم لتوليد حمولات تستغل إلغاء تسلسل كائنات Java غير الآمن. الوصف تم إصداره في البداية كجزء من محاضرة AppSecCali 2015 "Marshalling Pickles: كيف سيدمر إلغاء تسلسل الكائنات يومك" مع سلاسل أدوات gadget chains لـ Apache Commons Collections 3.x و4.x وSpring Beans/Core 4.x وGroovy...

CVE-2026-76156 Datiphy Data Management Center - Improper Neutralization of Special Elements used in an OS Command

OS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an authenticated administrator to execute arbitrary operating system commands as root...

EUVD-2026-63794

OS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an authenticated administrator to execute arbitrary operating system commands as root...

CVE-2026-76156

Datiphy Data Management Center v8.3.0 through v8.5.1 has an OS command injection flaw (CWE-78) in its API endpoint, allowing authenticated administrators to execute arbitrary OS commands as root. No patch version or workaround is mentioned in the provided documents. Exploitation details are not p...

CVE-2026-76156 Datiphy Data Management Center - Improper Neutralization of Special Elements used in an OS Command

OS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an authenticated administrator to execute arbitrary operating system commands as root...

Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)

Summary DS8900F and DS8A00 updates have been released to remediate vulnerabilities in various components like IBM Java Quarterly Update, IBM WebSphere Application Server, IBM Power HMC, Linux Kernel, OpenSSL, libsoup, libssh, OpenSSH, net-snmp, Apache HTTP Server httpd, Expat libexpat, libpng,...