RelayKing-Depth

RelayKing v1.10 Dominate the domain. Relay to royalty. RelayKing is a comprehensive relay detection and enumeration tool designed to identify relay attack opportunities in Active Directory environments. Actual reporting options. Comprehensive attack coverage. Find the hidden relay vectors and...

Blue-Team-Notes

Blue Team Notes A collection of one-liners, small scripts, and some useful tips for blue team work. I've included screenshots where possible so you know what you're getting. Contact me If you see a mistake, or have an easier way to run a command then you're welcome to hit me up on Twitter or comm...

Philips-PM-5139-5138A-5136-Firmware-Project

Philips PM5139 — Firmware Reverse Engineering A 20 MHz function generator from about 1994, taken apart in software: two EPROM dumps, an 8051 emulator used as a measuring instrument, and 35 sections of documentation where every single claim is backed by a listing address, an emulator measurement, ...

CVE-2023-27524-Apache-Superset-Auth-Bypass-and-RCE

CVE-2023-27524: Apache Superset Auth Bypass and RCE Apache Superset, a widely used open-source tool for data visualization and exploration, has been identified as having potential security weaknesses that could lead to authentication bypass and remote code execution RCE. These vulnerabilities cou...

Neo

El Framework Neo C2 Un framework de post-explotación con arquitectura modular cliente-servidor, diseñado para la gestión colaborativa de agentes en operaciones de red team y pruebas de seguridad. Permite flexibilidad al permitir que los operadores añadan sus propios módulos de extensión Instalaci...

Needl

🚨 Needl 已不再维护。如果你需要隐私相关方面的支持或咨询，请给我发邮件 [email protected] 🚨 Needl 夺回你的隐私。迷失在草垛中。 你的网络服务提供商很可能在追踪你的浏览习惯，并将其出售给营销机构（尽管是匿名的）。或者更糟，在传票的暗示下，你的浏览历史可供执法部门查阅。Needl 将生成随机的互联网流量，试图掩盖你的合法流量，本质上让你的数据成为草垛中的 Needl （针），因而更难被找到。目标是让你的 ISP、政府等更难追踪你的浏览历史和习惯。 它并不完美。但这是一个开始。有想法吗？参与进来！ 已实现的模块： Google...

CVE-2025-53770-Scanner

Escáner CVE-2025-53770 por DanSec Una herramienta de reconocimiento simple y eficaz para identificar una posible exposición a la crítica vulnerabilidad de SharePoint CVE-2025-53770. !Warning Esta herramienta está destinada únicamente a fines de prueba autorizados. El autor DanSec no asume ninguna...

Galdralag-firmware

Galdr — Galdralag Firmware Open Invention Network This project is registered with theOpen Invention Network OIN. OIN is a defensive patent pool: members cross-license Linux-related patents so participants can ship and use open-source software with reduced patent exposure. Status: Waiting for:...

declarative-policy

DeclarativePolicy: Una biblioteca de autorización declarativa Esta biblioteca proporciona un DSL para escribir políticas de autorización. Se puede utilizar para separar la lógica de los permisos y se ha utilizado a gran escala en producción en GitLab.com. El autor original de esta biblioteca es...

PXEThief

PXEThief PXEThief es un conjunto de herramientas que implementa las vías de ataque discutidas en la charla de DEF CON 30 Pulling Passwords out of Configuration Manager https://forum.defcon.org/node/241925 contra la funcionalidad de Implementación del Sistema Operativo en Microsoft Endpoint...

lightweight_static_analysis

Análisis estático ligero Este repositorio contiene el código del PoC de una charla de ShellCon 2019, «Crea el tuyo propio: Cómo escribir herramientas de análisis estático personalizadas y ligeras» diapositivas. En pocas palabras, este repositorio demuestra algunos ejemplos concretos de cómo puede...

DVWA

翻译 翻译：@inVains @songzy12 @cnskis 关于 DAMN VULNERABLE WEB APPLICATION（DVWA） Damn Vulnerable Web Application DVWA译注：可以直译为："该死的"不安全Web应用程序，是一个编码差的、易受攻击的 PHP/MySQL Web应用程序。 它的主要目的是帮助信息安全专业人员在合法的环境中，练习技能和测试工具，帮助 Web 开发人员更好地了解如何加强 Web 应用程序的安全性，并帮助学生和教师在可控的教学环境中了解和学习 Web 安全技术。 DVWA的目的是通过简单明了的界面来练习一些最常见的...

The vulnerability of the platform for creating individual web applications in CRM. The leader involved in this issue faces unlimited distribution of resources, allowing attackers to compromise the accessibility of protected information.

The vulnerability of the platform for creating individual web applications in CRM involves unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...

PAPIMonitor

PAPIMonitor （P ython API Monitor ，面向安卓应用的API监控工具）是一款基于 Frida 开发的 Python 工具，用于在应用运行过程中监控用户选择的 API。 该应用需预先安装在模拟器中，并通过 ADB 与 PC 主机连接。 用户可以选择监控按类别划分的预定义 API 列表（例如：设备数据、设备信息、短信等），或通过命令行向脚本传入自定义 API 列表。 工具会记录被调用的 API、参数、返回值，以及调用所在的文件和行号。 以下是输出示例： root@kitploit: "category": "Custom", "class":...

DDoS-Ripper

DDoS-Ripper 什么是DDoS攻击？ 分布式拒绝服务（DDOS）攻击服务器，通过海量互联网流量切断目标或周边基础设施 DDoS攻击利用多台被入侵的计算机系统作为攻击流量来源，从而实现攻击效果。搜索引擎可能包括计算机以及其他网络资源（如物联网设备）。 从更高层面看，DDOS攻击就像是高速公路上意外的交通堵塞，阻止正常流量到达目的地。 注意（请确保您已安装 Python 3） 对于 Termux 要在 Termux 中使用 DRipper，请依次输入以下命令： pkg install git -y pkg install python -y pkg install python3 -...

ogi

OpenGraph Intel OGI 开源可视化链接分析与OSINT框架。 免费、可自托管、社区驱动。 特性 • 截图 • 快速开始 • Docker • 转换中心 • 架构 • 参与贡献 注意： 该项目正在积极开发中。它拥有稳定的核心能力和测试覆盖，我们持续在每个版本中改进文档、加固和特性深度。欢迎贡献、报告错误和提供反馈。 特性 可视化图谱调查 — 拖拽实体，交互式探索连接 20+内置转换 — DNS、WHOIS、SSL证书、地理位置、网页/邮箱/哈希/社交增强等 转换中心 — 从注册中心浏览和安装社区转换 AI调查员 —...

opa

Open Policy Agent Open Policy Agent OPA is an open source, general-purpose policy engine that enables unified, context-aware policy enforcement across the entire stack. OPA is proud to be a graduated project in the Cloud Native Computing Foundation CNCF landscape. For details read the CNCF...

CVE-2006-3392

CVE-2006-3392 https://www.cvedetails.com/cve/CVE-2006-3392/ Webmin before 1.290 and Usermin before 1.220 calls the simplifypath function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, which bypass the removal of "../" sequence...

CVE-2026-76922

A flaw was found in Wireshark. A local attacker could exploit a crash in the Bluetooth BR/EDR FHS protocol dissector, requiring user interaction. This vulnerability could lead to a denial of service, making the application unavailable to users. Mitigation To mitigate this issue, users should avoi...

CVE-2026-76920

A flaw was found in Wireshark. This vulnerability, located in the 3gpp phone log file parser, could allow a local attacker to trigger a crash by enticing a user to open a specially crafted log file. This could lead to a Denial of Service DoS. Mitigation To mitigate this issue, users should avoid...