fuzzilli

فيوزيلي مُختبر اختراق Fuzzer موجه بالتغطية coverage-guided لمفسري اللغات الديناميكية، يعتمد على لغة وسيطة مخصصة FuzzIL يمكن تحويرها وترجمتها إلى جافاسكريبت. الاستخدام الخطوات الأساسية لاستخدام هذا المُختبر هي: 1. قم بتنزيل الكود المصدري لإحدى محركات جافاسكريبت المدعومة. راجع دليل Targets/ للحصول...

CVE-2025-6220

Ultimate Addons for Contact Form 7 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft forever 2: eth0...

CVE-2026-54806

PoC – Injection d'objets PHP dans WP Activity Log CVE-2026-54806 📜 Description CVE-2026-54806 est une vulnérabilité critique CVSS 9.8 d'injection d'objets PHP non authentifiée dans le plugin WordPress WP Activity Log wp-security-audit-log de Melapress. Un attaquant non authentifié peut injecter d...

RedEye

RedEye : Red Team C2 Log Visualization ⚠️ This Repo Currently in Maintenance Mode ⚠️ This GitHub repository is no longer under active development. We'll review community issues and pull requests for bug fixes, but won't consider any new feature additions. RedEye is an open-source analytic tool...

ME2-Writeup

Reverse Engineering ME2's USB with a Heat Gun and a Knife Background In 2024, bjiru uploaded a video about the ME2 handheld device, a toy produced around 2008 that featured the ability to use USB to synchronize points and gems between your device and an online world. The game was extremely niche,...

altair

ALTAIR - A Modular Web Vulnerability Scanner Copyleft by Simone Margaritelli [email protected] http://www.evilsocket.net - http://www.backbox.org Usage: altair options -u EXAMPLES: altair --filter=lfi,rfi --url=http://www.somesite.com altair --filter=sqli --load-modules=sqlmap...

MaccaroniC2

MaccaroniC2 - Empowering Command & Control using AsyncSSH MaccaroniC2 is a proof-of-concept Command and Control framework that utilizes the powerful AsyncSSH Python library which provides an asynchronous client and server implementation of the SSHv2 protocol and use PyNgrok wrapper for ngrok...

plasma

PLASMA The old project name was Reverse. PLASMA is an interactive disassembler. It can generate a more readable assembly pseudo code with colored syntax. You can write scripts with the available Python api see an example below. The project is still in big development. wiki : TODO list and some...

CVE-2019-0232

CVE-2019-0232 تحليل الثغرة وإثبات المفهوم PoC لـ Apache Tomcat - CGIServlet enableCmdLineArguments لتنفيذ الأكواد عن بُعد RCE فيديو الإثبات المفاهيمي PoC متاح على https://www.youtube.com/watch?v=RA7kzuHOWqA التفاصيل يحتوي Apache Tomcat على ثغرة أمنية في CGI Servlet، والتي يمكن استغلالها لتحقيق...

Xerxes

Xerxes Dos tool with multiple vectors available for stress testing internet services. Usage $ ./Xerxes -H --== Xerxes enhanced by Sepehrdad Sh ==-- bin/Xerxes OPTIONS Xerxes dos tool enhanced OPTIONS: -H, --help display this help menu -V, --version display version --vecs display available vectors...

ntfstool

ntfstool NTFSTool is a forensic tool focused on NTFS volumes. It supports reading partition info MBR, partition table, VBR but also information on Master File Table, Bitlocker encrypted volume, EFS encrypted files, USN journal and more. Download the latest binaries on AppVeyor or by checking the...

ntfstool

ntfstool NTFSTool est un outil forensic axé sur les volumes NTFS. Il prend en charge la lecture des informations de partition MBR, table de partitions, VBR mais aussi les informations sur la Master File Table, les volumes chiffrés par Bitlocker, les fichiers chiffrés EFS, le journal USN et plus...

firmware-mod-kit

Disclaimer Automatically exported from code.google.com/p/firmware-mod-kit Firmware Modification Kit This kit is a collection of scripts and utilities to extract and rebuild linux based firmware images. Extract a firmware image into its component parts User makes desired modification to the...

awesome-termux-hacking

seeker - Accurately Locate Smartphones using Social Engineering. ANDRAX - ANDRAX is a Penetration Testing platform developed specifically for Android smartphones, ANDRAX has the ability to run natively on Android so it behaves like a common Linux distribution, But more powerful than a common...

FreePBX-SQLi-RCE

FreePBX CVE-2025-57819 - SQLi non authentifiée vers RCE PoC Recherche éducative et de sécurité uniquement - Voir la mention légale ci-dessous Preuve de concept d'exploitation pour CVE-2025-57819, une vulnérabilité critique d'injection SQL non authentifiée dans FreePBX permettant l'exécution de co...

EmBomber

EmBomber Python Script for Email Bombing which supports Gmail, Yahoo, Hotmail/Outlook Made with by Mazen Elzanaty Features Support Gmail Support Yahoo Support Hotmail/Outlook Usage EmBomber should work on all Linux distros running Python 2.7 First, clone it by entering the following command in th...

CMF-Watch-Pro-2-BLE-Protocol

CMF Watch Pro 2 — BLE Protocol reverse-engineered Unofficial. This document describes the Bluetooth Low Energy BLE protocol of the CMF Watch Pro 2 CMF by Nothing, reconstructed by reverse engineering for an alternative companion app. It is not affiliated with or endorsed by Nothing/CMF. Use at yo...

bfac

BFAC Advanced Backup-File Artifacts Testing for Web-Applications BFAC Backup File Artifacts Checker is an automated tool that checks for backup artifacts that may disclose the web-application's source code. The artifacts can also lead to leakage of sensitive information, such as passwords,...

bfac

BFAC اختبار متقدم لملفات النسخ الاحتياطي الخلفية لتطبيقات الويب BFAC Backup File Artifacts Checker هي أداة آلية تتحقق من ملفات النسخ الاحتياطي التي قد تكشف عن كود المصدر لتطبيق الويب. يمكن أن تؤدي هذه الملفات أيضًا إلى تسرب معلومات حساسة، مثل كلمات المرور، وهيكل الدليل، إلخ. هدف BFAC هو أن تكون...

intentshield

IntentShield Don't filter what your AI says. Filter what it's about to do Pre-execution intent verification for AI agents. Why This Exists AI agents have tool access. They can execute shell commands, write files, browse URLs, send emails, and call APIs. Every one of those actions is a potential...