bugsy

Bugsy Bugsy is a command-line interface CLI tool that provides automatic security vulnerability remediation for your code. It is the community edition version of Mobb, the first vendor-agnostic automated security vulnerability remediation tool. Bugsy is designed to help developers quickly identif...

nova-tracer

Nova-tracer Agent Monitoring and Visibility Security monitoring and prompt injection defense for Claude Code using the NOVA Framework. Features Session Tracking - Captures all tool usage with timestamps and metadata Prompt Injection Detection - Three-tier scanning keywords, semantic ML, LLM -...

pftriage

pftriage pftriage is a tool to help analyze files during malware triage. It allows an analyst to quickly view and extract properties of a file to help during the triage process. The tool also has an analyze function which can detect common malicious indicators used by malware. Dependencies pefile...

kubeeye

English | 中文 KubeEye is a cloud-native cluster inspection tool specifically designed for Kubernetes, capable of identifying issues and risks within the Kubernetes cluster based on custom rules. QuickStart Installation Download the installation package from Releases, which includes Helm chart, dem...

multitor

multitor Create multiple TOR instances with load-balancing. Description • Introduction • How To Use • Parameters • Requirements • Docker • Other • License • Wiki Description It provides one single endpoint for clients. Supports HAProxy , socks protocol and http-proxy servers: polipo , privoxy and...

secure-boot-cert-servicing

Secure Boot Certificate Rollover — assessment and servicing A single, self-contained PowerShell script that assesses a Windows machine's Secure Boot certificate posture for the 2011 → 2023 rollover CVE-2023-24932 / KB5025885 and, only when you explicitly ask it to, opts that machine in to the...

GHSA-4F8H-VR72-P32C virtualenv: Temporary app-data can leave dangling seed package links

Summary The app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlinkappdata can enable this state even though the command-line flag is disabled for temporary app-data...

virtualenv: Temporary app-data can leave dangling seed package links

Summary The app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlinkappdata can enable this state even though the command-line flag is disabled for temporary app-data...

subdosec

Subdosec Subdomain takeover scanner & reconnaissance tool. Install • Usage • Web Based • Contribution • Online scan • Acknowledgments Subdosec is a fast and accurate subdomain takeover scanner with no false positives, featuring a public database of vulnerable subdomains and detailed non-vulnerabl...

SubOver

SubOver Note - This project is discontinued. No more updates will be provided! Sorry! But something more awesome will come soon! Subover is a Hostile Subdomain Takeover tool originally written in python but rewritten from scratch in Golang. Since it's redesign, it has been aimed with speed and...

monitor

BetterDB Monitor The monitoring layer that Valkey deserves. BetterDB persists what Valkey throws away - slowlogs, command patterns, client activity, anomaly signals - so you can debug what happened at 3am, not just what's happening now. Built for Valkey 8.x with native support for COMMANDLOG,...

CVE-2022-0778

CVE-2022-0778 Contributors Jeong Junsoo @jeongjunsoo Summary The CVE-2022-0778 vulnerability affects the BNmodsqrt function in OpenSSL that computes the modular square root of a prime number. When this function processes a maliciously crafted certificate that is not based on a prime number, an...

PowerExfil

PowerExfil A collection of custom data exfiltration scripts for Red Team assessments. ExfilCards.ps1 - This script will exfil credit card numbers via base64 encoded strings to a custom DNS server. ExfilDataStreamDNS.ps1 - This script will exfil the entire contents of a file via base64 encoded...

Awesome_shiro

Awesome-shiro CVE-2016-4437 Shiro Base64 decode -- AES decrypt -- Deserialize Environment Works on both linux/win10 Works on both python2/python3 Since the module directory contains ysoserial.jar, the project is a bit large. Please bear with us. Local Target Setup docker pull...

CVE-2026-24061

CVE-2026-24061 Vulnerability Batch Detection Tool ⚠️ Note : CVE-2026-24061 GNU Inetutils is a classic set of network tools provided by the GNU project, which includes the telnetd service, i.e., the Telnet server daemon. In versions 1.9.3 through 2.7, the telnetd service has a fatal flaw in the use...

GHSA-CX28-75Q4-X26Q virtualenv: Pip seeding with download omits wheel digest verification

Summary The pip seeder acquires bundled wheels with download=False and lets pip access the index when --download is selected. Index candidates on that path do not pass through virtualenv's wheel digest verification. Anthropic's OSS Scanner reported this as ANT-2026-74ALJBUF in...

virtualenv: Pip seeding with download omits wheel digest verification

Summary The pip seeder acquires bundled wheels with download=False and lets pip access the index when --download is selected. Index candidates on that path do not pass through virtualenv's wheel digest verification. Anthropic's OSS Scanner reported this as ANT-2026-74ALJBUF in...

dnsdmpstr

dnsdmpstr Unofficial API & Client for DNS Dumpster and HackerTarget.com IP tools. https://dnsdumpster.com/ https://hackertarget.com/ip-tools/ Installation git clone https://github.com/zeropwn/dnsdmpstr cd dnsdmpstr pip3 install -r requirements.txt chmod +x ddump.py Usage As a command-line utility...

offensive-docker-vps

Offensive Docker VPS Create a VPS on Google Cloud Platform or Digital Ocean easily to use Offensive Docker and launch the assessments to the targets. 🎉🎉Digital Ocean Bonus 🎉🎉 You can sign up with my referral link https://m.do.co/c/0d2d40f6a8a1 and get $100 free credit to try it out! Table of...

Gpt-Agreement-Payment

简体中文 | English Gpt-Agreement-Payment End-to-end replay tool for ChatGPT Plus / Team subscription agreements: reverse-engineered from packet capture the entire chain Stripe Checkout → PayPal / GoPay / QRIS → ChatGPT manual-approval → Codex OAuth + PKCE and implemented as a runnable client. Include...