SharkTooth

SharkTooth SharkTooth è uno scanner di porte con supporto TCP e UDP. Adatto per audit di rete di base e formazione. Il progetto è completamente containerizzato utilizzando docker e docker compose per un rapido dispiegamento del sistema di monitoraggio. Il progetto dimostra: Creazione di connessio...

Ghostcat-CNVD-2020-10487

Ghostcat Exploit für CNVD-2020-10487 CVE-2020-1938 Dateilesen und Dateiausführung durch beliebige Attributsetzung im Tomcat AJP-Protokoll. Schwachstellenanalyse Der Code dient ausschließlich Sicherheitstests. Verwenden Sie ihn nicht für illegale Zwecke. Der Benutzer trägt die alleinige...

Operation QUICSILVER Targets Myanmar Government and IT with QUICAgent Backdoor

Cybersecurity researchers have flagged a cyber espionage campaign targeting Myanmar that uses graduation ceremony invitation lures to deliver a Go backdoor called QUICAgent. The campaign, codenamed Operation QUICSILVER , has been found to target government and information technology sectors, per...

bugsy

Bugsy Bugsy is a command-line interface CLI tool that provides automatic security vulnerability remediation for your code. It is the community edition version of Mobb, the first vendor-agnostic automated security vulnerability remediation tool. Bugsy is designed to help developers quickly identif...

laravel-crypto-killer

Laravel crypto killer Ein Werkzeug, das entwickelt wurde, um schlechte Implementierungen von Entschlüsselungsmechanismen in Laravel-Anwendungen auszunutzen. Dieses Werkzeug wurde ursprünglich entwickelt, um Payloads zu erstellen, die die Laravel-decrypt-Funktion aus dem Paket Illuminate\Encryptio...

Tracking PavinLoader across ClickFix and fake download campaigns

In our previous analysis of the malicious RenPy campaigns, we identified a multi-stage loader deployed as part of the infection chain. Further threat hunting has since shown that the same loader, which we track as PavinLoader , is being used across several different campaigns, including ClickFix...

foxcage

foxcage Run Firefox in a rootless Podman container for security isolation. Your browser runs with almost no Linux capabilities, in its own user and network namespace, isolated from the host — while still having full GPU acceleration, audio, and DRM support. Why foxcage? Firefox already has a...

rosemary

Rosemary Cross-platform kernel-level pivoting platform over QUIC. No TUN/TAP. No proxychains. No proxy settings. Rosemary intercetta trasparentemente il traffico su host remoti a livello kernel: nessuna impostazione proxy, nessun dispositivo TUN/TAP, nessun proxychains. Gli agenti si riconnettono...

wifi_db

!Contributorshttp...

SharkMCP

SharkMCP Um servidor MCP que expõe sharkd — a interface programática do Wireshark — como um conjunto de ferramentas para LLMs. Carregue ficheiros PCAP/PCAPNG e analise-os com linguagem natural. Requisitos Python 3.10+ Wireshark fornece sharkd Instalação root@kitploit: git clone...

faraday_plugins

Installazione root@kitploit: pip install faraday-plugins Comandi Elenca i plugin Elenca tutti i plugin e indica se sono compatibili con il comando e/o il report Parametri opzionali: -cpf / --custom-plugins-folder PATH: Se specificato, cercherà anche plugin personalizzati in quel percorso...

SHGenOb

SHGenOB: Generatore di Shellcode da Codice C PIC Introduzione SHGenOB è uno strumento basato su Python progettato per generare shellcode da codice Position Independent Code PIC scritto in C. Automatizza il processo di compilazione del codice C, estrae la sezione .text e, opzionalmente, cripta lo...

hack-winrar

hack-winrar WinRar विंडोज के लिए एक बहुत व्यापक रूप से जाना जाने वाला सॉफ्टवेर है। WinRaR के पिछले संस्करण में एक कमजोरी थी जिसे फरवरी-2019 में पैच किया गया था। अधिकांश लोगों ने winrar को अपडेट नहीं किया, इसलिए वे इस एब्सोल्यूट पाथ ट्रैवर्सल बग CVE-2018-20250 के प्रति संवेदनशील हैं। विनरार से कोड...

Security Bulletin: IBM QRadar Suite Software includes components with multiple known vulnerabilities

Summary IBM QRadar Suite Software includes components with multiple known vulnerabilities. These have been addressed in the update. Vulnerability Details CVEID:CVE-2026-8723 DESCRIPTION: Summary qs.stringify throws TypeError when called with arrayFormat: 'comma' and encodeValuesOnly: true on an...

macphish

macphish Office for Mac Macro Payload Generator Attack vectors There are 4 attack vectors available: beacon creds meterpreter meterpreter-grant For the 'creds' method, macphish can generate the Applescript script directly, in case you need to run it from a shell. beacon On execution, this payload...

gemma_crackme_tutorial

Usare il modello AI locale Gemma 4 E4B di Google per fare Reverse Engineering di un semplice Crackme Stavo giocando con il nuovo modello locale open weights Gemma E4B rilasciato da Google, e con mia sorpresa ho riscontrato un grande successo nell'usarlo per scenari di reverse engineering offline...

zettelforge

ZettelForge Das einzige agentische Gedächtnissystem, das für Cyber Threat Intelligence entwickelt wurde. Wenn ein erfahrener Analyst geht, verschwinden zwei oder drei Jahre Kontext mit ihm – Kundenumgebungen, frühere Untersuchungen, TTPs von Akteuren, False-Positive-Muster, jedes mühsam erworbene...

flawfinder

About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...

CVE-2025-63080

KAON PG5298A and PG5298B routers contain an insufficient access control flaw in their JSON-RPC interface . An authenticated user on the adjacent network can send crafted JSON-RPC requests to perform operations that are otherwise restricted to the GUI, enabling system file read or command executio...

EUVD-2025-210761

Firmware in KAON PG5298A and PG5298B routers allow an authenticated user to send crafted JSON-RPC requests and perform operations not possible via GUI, e.g. system file read or command execution. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B...