zafrida-ui

中文 | English ZAFrida UI - PyCharm Frida Plugin 当前版本： 0.3.7 0.3.7 主要更新 每个 ZAFrida Project 可独立选择或共享 Python/Frida 环境，默认使用当前 PyCharm 项目解释器，支持 venv、Conda、uv、Poetry、Pipenv、Hatch 等本地环境。 重新设计 Session UI 与 Project Settings，完整显示插件、Python 和 Frida 版本信息，并优化自适应、可拖动日志面板与会话状态。 完整支持 .js / .ts、Frida 16/17、多项目环境切换，...

etherify

Etherify - bringing the ether back to ethernet c 2020 Jacek Lipkowski SQ5BPF [email protected] 2020 RC3 Conference talk: https://www.youtube.com/watch?v=7ek994-fwNE Etherify 1 and 2: https://lipkowski.com/etherify with RPI 4 Etherify 3: https://lipkowski.com/etherify3/ with no ethernet cable...

acltoolkit

acltoolkit acltoolkit 是一款 ACL 滥用瑞士军刀。它实现了多种 ACL 滥用功能。 目录 acltoolkit 目录 安装 用法 命令 get-objectacl set-objectowner give-genericall give-dcsync add-groupmember set-logonscript 安装 root@kitploit: pip install acltoolkit-ad 或 root@kitploit: git clone https://github.com/zblurx/acltoolkit.git cd acltoolkit...

CVE-2026-3227-TP-Link-authenticated-RCE

CVE-2026-3227: Inyección de Comandos del SO en Router TP-Link Para más información, ver https://vulners.com/cve/CVE-2026-3227 Una vulnerabilidad persistente y autenticada de Inyección de Comandos del SO en el firmware de routers TP-Link que puede causar el brick del dispositivo o una posible toma...

claude-code-guardrails

Hemos creado un producto dedicado para ayudar a los desarrolladores a gestionar mejor los permisos de IA, y tenemos la intención de hacerlo de código abierto. Échale un vistazo en stoplight.ai. Claude Code - Directrices settings.json funciona si: Estás bien editando JSON y terminando sesiones de...

Parth

Parth Heuristic Vulnerable Parameter Scanner Introduction Some HTTP parameter names are more commonly associated with one functionality than the others. For example, the parameter ?url= usually contains URLs as the value and hence often falls victim to file inclusion, open redirect and SSRF...

filtron

Filtron Reverse HTTP proxy to filter requests by different rules. Can be used between production webserver and the application server to prevent abuse of the application backend. The original purpose of this program was to defend searx, but it can be used to guard any web application. Installatio...

naabu

Features • Installation • Usage • Running naabu • Config • NMAP integration • CDN/WAF Exclusion • Discord Naabu is a port scanning tool written in Go that allows you to enumerate valid ports for hosts in a fast and reliable manner. It is a really simple tool that does fast SYN/CONNECT/UDP scans o...

CVE-2026-84478

WWBN AVideo contains a path traversal vulnerability in the API getapilogincode endpoint that allows unauthenticated attackers to delete arbitrary .log files by supplying directory traversal sequences in the code parameter. Attackers can exploit this to destroy audit logs and probe for file...

Modlishka

..Modlishka.. Modlishka is an open-source penetration testing tool that acts as a man-in-the-middle proxy. It introduced a new technical approach to handling browser-based HTTP traffic flow, which allows it to transparently proxy multi-domain destination traffic, both TLS and non-TLS, over a sing...

wesng

Windows Exploit Suggester - Next Generation WES-NG WES-NG is a tool based on the output of Windows' systeminfo utility which provides the list of vulnerabilities the OS is vulnerable to, including any exploits for these vulnerabilities. Every Windows OS between Windows XP and Windows 11, includin...

Virtuailor

Virtuailor - IDAPython tool for C++ vtables reconstruction Virtuailor is an IDAPython tool that reconstructs vtables for C++ code written for intel architecture, both 32bit and 64bit code and AArch64 New!. The tool constructed from 2 parts, static and dynamic. The first is the static part, contai...

OnionSearch

OnionSearch 👋 Hi there! For any professional inquiries or collaborations, please reach out to me at: [email protected] 📧 Preferably, use your professional email for correspondence. Let's keep it short and sweet, and all in English! For BTC Donations : 1FHDM49QfZX6pJmhjLE5tB2K6CaTLMZpXZ...

Invoke-TheHash

Invoke-TheHash Invoke-TheHash contains PowerShell functions for performing pass the hash WMI and SMB tasks. WMI and SMB connections are accessed through the .NET TCPClient. Authentication is performed by passing an NTLM hash into the NTLMv2 authentication protocol. Local administrator privilege i...

frida-c2-mcp

FridaC2MCP Un servidor MCP con transporte HTTP streamable que ejecuta la instrumentación dinámica de Frida enteramente en el dispositivo — sin necesidad de herramientas en el lado del cliente. Este proyecto se ejecuta directamente en dispositivos Android rooteados e iOS con jailbreak , exponiendo...

skewrun

Skewrun skewrun is an Active Directory time discovery toolkit for red teams. It dynamically resolves the Domain Controller's time via network protocols CLDAP, SMB, NTP, Kerberos, NTLM and executes commands via libfaketime LDPRELOAD, tricking the executed binary into using the exact DC time. This...

CVE-2020-1066-EXP

引用 这个漏洞属于Windows CardSpace服务未正确处理符号链接对象导致的任意文件替换的本地权限提升漏洞 申明 作者poc仅供研究目的,如果读者利用本poc从事其他行为,与本人无关 目录 toc 分析 漏洞影响范围 适用于Windows7和Windows Server 2008 R2的普通用户和开启特殊配置的IIS用户 漏洞原理分析 笔者是漏洞的提交者,漏洞更新于2020年5月.漏洞来自于Windows7和Windows Server 2008 R2的Windows...

poet

poet A simple POst-Exploitation Tool. overview The client program runs on the target machine and is configured with an IP address the server to connect to and a frequency to connect at. If the server isn't running when the client tries to connect, the client quietly sleeps and tries again at the...

ffuf

ffuf - Fuzz Faster U Fool A fast web fuzzer written in Go. Installation Example usage Content discovery Vhost discovery Parameter fuzzing POST data fuzzing Using external mutator Configuration files Help Interactive mode Installation Download a prebuilt binary from releases page, unpack and run! ...

Hulios

Hulios Sistema endurecido de invisibilidad universal y cebolla para Linux Hulios es una puerta de enlace VPN Tor transparente para Linux impulsada por eBPF. Protege el tráfico de red saliente redirigiendo los sockets TCP y las consultas DNS a través de una instancia embebida de Arti cliente Tor y...