1619237 matches found
gau
getallurls gau getallurls gau fetches known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, Common Crawl, and URLScan for any given domain. Inspired by Tomnomnom's waybackurls. Resources Usage Installation ohmyzsh note Usage: Examples: root@kitploit: $ printf example.com | gau $...
Confluence-CVE-2022-26134
Confluence-CVE-2022-26134 This repository talks about Zero-Day Exploitation of Atlassian Confluence, it's defense and analysis point of view from a SecOps or Blue Team perspective Index About Timeline Understanding the Exploit List of IOCs Detection Strategy Mitigation Plans References About Over...
CVE-2019-6446
CVE-2019-6446 Numpy Deserialization Command Execution NumPy is a powerful Python library primarily used for performing computations on multi-dimensional arrays. Experts have analyzed that versions less than or equal to 1.16.0 contain this vulnerability. The fix recommendation is to delete the...
frida-ios-hook
Frida iOS hook ๐ A tool that helps you can easy using frida. It support script for trace classes, functions, and modify the return values of methods on iOS platform. ๐ For Android platform: frida-android-hook ๐ For Intercept Api was encrypted on iOS application: frida-ios-intercept-api Env OS...
rekono
Automate the recon, keep your time for the part that actually needs a hacker Think about how an assessment really starts. You gather public information about the target. You discover its hosts, enumerate their ports and identify the services behind them. Then you run a more specific tool against...
cuddlephish
CuddlePhish Weaponized multi-user browser-in-the-middle BitM for penetration testers. This attack can be used to bypass multi-factor authentication on many high-value web applications. It even works for applications that do not use session tokens, and therefore would not be exploitable using...
detect-secrets
detect-secrets About detect-secrets is an aptly named module for surprise, surprise detecting secrets within a code base. However, unlike other similar packages that solely focus on finding secrets, this package is designed with the enterprise client in mind: providing a backwards compatible ,...
pyghidra-mcp
PyGhidra-MCP - Ghidra Model Context Protocol Server Overview pyghidra-mcp is a command-line Model Context Protocol MCP server that brings the full analytical power of Ghidra, a robust software reverse engineering SRE suite, into the world of intelligent agents and LLM-based tooling. It bridges...
clawdstrike
Clawdstrike EDR para la era del enjambre. Cerrar en fallo. Firma la verdad. Estado: beta pre-1.0. Las API pรบblicas son estables; los valores predeterminados pueden endurecerse antes de 1.0. Clawdstrike es un motor de polรญticas, un EDR y una cadena de auditorรญa firmada en un solo binario. Un...
udp2raw
Udp2raw-tunnel A Tunnel which turns UDP Traffic into Encrypted FakeTCP/UDP/ICMP Traffic by using Raw Socket, helps you Bypass UDP FireWallsor Unstable UDP Environment. When used alone,udp2raw tunnels only UDP traffic. Nevertheless,if you used udp2raw + any UDP-based VPN together,you can tunnel an...
cypher
๐น CYPHER TOOLS ๐น Escrito por TMRSWRR Versiรณn 1.0.0 Herramientas integrales para CRIPTOLOGรA. Instagram: Capture the Root ๐ผ๏ธ Capturas de pantalla ๐ผ๏ธ ๐น Cรณmo usar ๐น Haz clic en la imagen... ๐งฐ Caracterรญsticas ๐งฐ Esta herramienta incluye: ๐ HASH ๐ RSA ๐ XOR ๐ AES ECC ๐ AES CBC ๐ DES ECB ๐ FERNET ๐ RC2 ๐...
cypher
๐น CYPHER TOOLS ๐น Written by TMRSWRR Version 1.0.0 All in one tools for CRYPTOLOGY. Instagram: Capture the Root ๐ผ๏ธ Screenshots ๐ผ๏ธ ๐น How to use ๐น Click on the image... ๐งฐ Features ๐งฐ This tool include: ๐ HASH ๐ RSA ๐ XOR ๐ AES ECC ๐ AES CBC ๐ DES ECB ๐ FERNET ๐ RC2 ๐ RC4 ๐ CHACHA20POLY1305 ๐...
zoneminder
ZoneMinder All documentation for ZoneMinder is now online at https://zoneminder.readthedocs.org Overview ZoneMinder is an integrated set of applications which provide a complete surveillance solution allowing capture, analysis, recording and monitoring of any CCTV or security cameras attached to ...
apache__mina-sshd_CVE-2023-35887_2-9-2
Apache MINA SSHD Apache MINA SSHD is a 100% pure java library to support the SSH protocols on both the client and server side. It does not aim at being a replacement for the SSH client or SSH server from Unix operating systems, but rather provides support for Java based applications requiring SSH...
CVE-2024-4577
CVE-2024-4577 A Proof of Concept developed by @watchTowr exploiting the PHP CGI Argument Injection vulnerability CVE-2024-4577 to obtain RCE on a vulnerable PHP version running in a Windows environment. Detailed technical analysis for this vulnerability Orange Tsi ๐ This vulnerability was found b...
CVE-2021-3493
CVE-2021-3493 Ubuntu OverlayFS Local Privesc Affected Versions Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Usage gcc exploit.c -o exploit ./exploit Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it did no...
CVE-2026-87737
An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret...
CVE-2026-87736
An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points...
CVE-2026-87732
An issue was discovered in the mirage-crypto package before 2.2.0 for OCaml. The AES.GCM.authenticatedecryptinto and Chacha20.authenticatedecryptinto functions write the decrypted plaintext into a caller-provided buffer and only then compares the tag. On a forged tag, the functions returns false,...
CVE-2026-87733
An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions P256,P384,P521.Dsa.pubofoctets accept 0x00, the encoding of the point at infinity, as a public key. With that public key, signatures can be forged without a private key...