notionterm

notionterm Embed reverse shell inNotion pages. Hack while taking notes FOR ➕: Hiding attacker IP in reverse shell No direct interaction between attacker and target machine. Notion is used as a proxy hosting the reverse shell Demo/Quick proof insertion within report High available and shareable...

cypherhound

CypherHound 一款Python3终端应用程序，包含用于BloodHound数据集的Neo4j Cypher查询，并附带一个脚本，可自动将这些查询导入BloodHound CE。 输出样例 终端 HTML报表 HTML报表（续） 为什么？ BloodHound 是每位渗透测试人员的必备工具。然而，它的设计也带来了一些负面影响。以下是我遇到的最棘手的痛点，以及本工具旨在解决的问题： 1. 我的工具以列表形式思考 – 在我的工具能解析导出的JSON图之前，我需要将图结果以逐行格式的.txt文件呈现， 才能从其他工具中实际攻击目标 。 2. 复制/粘贴图结果 – 这延续了第一点，但...

cypherhound

CypherHound A Python3 terminal application that contains Neo4j cyphers for BloodHound data sets with a script to automate importing them into BloodHound CE. Output Samples Terminal HTML Report HTML Report continued Why? BloodHound is a staple tool for every penetration tester. However, there are...

PyIris

该项目目前正在进行版本 3 的重大重写，当前版本（版本 2）将被废弃。更多信息请参见 。 PyIris 项目（即将更新，请参阅 ROADMAP.md） PyIris 项目是一个完全用 Python 编写的模块化远程访问木马工具包。 它允许用户动态构建、生成和编码/加密远程访问木马载荷，从而 远程控制其他受感染的主机。 PyIris 在多操作系统（Windows 和 Linux）中的实际演示 在 Windows 中动态生成载荷 通过 Ubuntu 中的侦察程序远程控制 Windows 系统（受害者机器截图来自 Ubuntu 攻击机，因为我是在虚拟机中运行 Ubuntu） 在 Kali...

mojo-v

Mojo-V: Secret Computation for RISC-V Mojo-V pronounced “mojo-five” is a new RISC-V extension that introduces privacy-oriented programming capabilities for RISC-V. Mojo-V implements secret computation, enabling secure, efficient, and data-oblivious execution without reliance on fragile software a...

witchcraft

🎉 你的OPSEC伴侣。运行witchcraft help或witchcraft manual（获取完整手册）🎉 它能做什么？ WITCHCRAFT不仅仅是一个简单的别名，它是一个初始化系统，可以与busybox、shell和自动化引擎配合使用，用于黑客、OSINT、取证等。 名称 witchcraft - 一款多功能的网络安全工具包。 概要 witchcraft MODULENAME OPTION... FILE... IP... 描述 WITCHCRAFT...

seekr

A multi-purpose toolkit for gathering and managing OSINT-Data with a neat web-interface. Introduction Seekr is a multi-purpose toolkit for gathering and managing OSINT-data with a sleek web interface. Our desktop view enables you to have all of your favourite OSINT tools integrated in one. The...

xssless

xssless An automated XSS payload generator written in python. Usage 1. Record requests with Burp proxy 2. Select requests you want to generate, then right click and select "Save items" 3. Use xssless to generate your payload: ./xssless.py burpexportfile 4. Pwn! A more detailed tutorial can be fou...

agentic-threat-hunting-framework

Agentic Threat Hunting Framework ATHF Quick Start • Installation • Documentation • Examples Give your threat hunting program memory and agency. The Agentic Threat Hunting Framework ATHF is the memory and automation layer for your threat hunting program. It gives your hunts structure, persistence,...

php-malware-finder

PHP恶意软件查找器 | || || || | | | | || || | | || || || | Webshell finder, | || || | kiddies hunter, | | | |||| || | website cleaner. || || |||| 检测潜在的恶意PHP文件。 它能检测什么？ PHP-malware-finder 会尽全力检测混淆的/可疑的代码，以及使用常用于恶意软件/webshell的PHP函数的文件。 同时，还会检测以下编码器/混淆器/webshell列表： Best PHP Obfuscator Carbylamine Cipher...

crackle

crackle cracks BLE Encryption AKA Bluetooth Smart. crackle exploits a flaw in the BLE pairing process that allows an attacker to guess or very quickly brute force the TK Temporary Key. With the TK and other data collected from the pairing process, the STK Short Term Key and later the LTK Long Ter...

hstsparser

HSTS 解析器 HSTS 解析器是一个简单的工具，用于将 Firefox 和 Chrome 的 HSTS 数据库解析成真正有用的取证工件！你可以在我的博客上阅读关于该工具背后的研究及其潜在用途的更多信息。 安装 HSTS 解析器可以通过 pip 安装，也可以作为原生可执行文件使用。 通过 PyPI 如果你已经安装了 Python，可以使用 pip 安装 HSTS 解析器。 pip install hstsparser 在 Fedora 上 HSTS 解析器可供 Fedora 38+ 使用。 dnf install hstsparser 在 Windows 上 Windows 二进制文件...

etaHEN

etaHEN - Habilitador AIO de Homebrew 🚀 Apoya el Proyecto Si encuentras útil este proyecto y te gustaría apoyar su desarrollo continuo, ¡considera invitarme a un café! Compilar desde el Código Fuente El código fuente se proporciona en la carpeta Source code bajo GPLv3 con todos los archivos...

Netgrave

Netgrave 一款利用内存转储漏洞（CVE-2018-17240）从 Netwave IP 摄像头中获取登录凭据的工具。本项目受 expcamera 启发，并在性能和效率上有所改进。该工具适用于所有平台，因为它不像 expcamera 那样通过 shell 命令调用任何 Linux CLI 工具。 CVE-2018-17240 在 Linux 系统上，/proc/kcore 是一个虚拟文件，将系统内存以 ELF core 映像的形式暴露出来。这些摄像头在无 MMU 的 ARM7 核心上运行...

vimana-framework

Overview Vimana is a modular security framework for auditing Python APIs and Web applications. The plugin-based architecture enables security professionals to assess, fuzz, and analyze Python projects through automated and manual techniques. Core Capabilities: Vulnerability detection and...

CVE-2026-82162

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-70414

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...

CVE-2026-106513

MISP exposes critical infrastructure settings—specifically the Redis host addresses used by the core application, the ZeroMQ plugin, and the SimpleBackgroundJobs plugin—through its web UI and API to site-admin users. The background job workers trust raw Redis job payloads without additional...

CVE-2026-106440

Hydra is a framework for elegantly configuring complex applications. From 1.2.0 until 1.3.0 and 1.4.0.dev10, the hydra-optuna-sweeper package accepts a configuration-controlled dotted path in hydra.sweeper.customsearchspace, resolves it with hydra.utils.getmethod, and later invokes the returned...

tplmap

Tplmap This project is no longer maintained. I'm happy to merge new PRs as long they don't break the test suite. Tplmap assists the exploitation of Code Injection and Server-Side Template Injection vulnerabilities with a number of sandbox escape techniques to get access to the underlying operatin...