HiddenSteps

Core crates — implementation status This is the honest, current-state complement to docs/design/02-system-architecture.md's target module map. It says what's actually built, what's verified against a real backend vs. a mock, and what's still genuinely missing — not what's planned that's...

probe-legacy

⚠️⚠️⚠️⚠️: este repositorio contiene el código fuente de la implementación heredada de ooniprobe. Consulte en su lugar: 1. https://github.com/ooni/probe, el meta-repositorio donde debería abrir incidencias y solicitudes de funcionalidades; 2. https://github.com/ooni/probe-cli, que contiene la nueva...

electronegativity

Electronegativity ⚠️ We're no longer actively maintaining this project ⚠️ What's Electronegativity? Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron-based applications. It leverages AST and DOM parsing to look for security-relevant configurations, as...

CVE-2020-0796-SMB

CVE-2020-0796-SMB This resource is a reproduction of the CVE-2020-0796 vulnerability, including Python and C++ versions. It mainly aggregates resources from GitHub masters, hope you like it C++ Python EXP POC Vulnerability Exploitation: Local EXP Privilege...

CVE-2015-2153

CVE-2015-2153 An implementation of the CVE-2015-2153 exploit. The exploit-db post can be found at https://www.exploit-db.com/exploits/37663/...

webscan

webscan webscan is a browser-based network IP scanner and local IP detector. It detects IPs bound to the user/victim by listening on an RTP data channel via WebRTC and looping back to the port across any live IPs, as well as discovering all live IP addresses on valid subnets by monitoring for...

rbcd-attack

Abusing Kerberos Resource-Based Constrained Delegation TL;DR This repo is about a practical attack against Kerberos Resource-Based Constrained Delegation in a Windows Active Directory Domain. The difference from other common implementations is that we are launching the attack from outside of the...

sashay

Sashay Introduction ℹ️ Sashay is an all in one automatic installer for useful Linux based tools.There are over 340 tools available. Installation⬇️ pip install -U sashay Tool Categories Information Gathering Vulnerability Scanner Exploitation Tools Wireless Testing Forensics Tools Web Hacking Stress...

ldapserver

This package is a work in progress. ldapserver is a helper library for building server software capable of speaking the LDAP protocol. This could be an alternate implementation of LDAP, a custom LDAP proxy or even a completely different backend capable of "masquerading" its API as a LDAP Server...

theftfuzzer

┌┬┐┬ ┬┌─┐┌─┐┌┬┐┌─┐┬ ┬┌─┐┌─┐┌─┐┬─┐ │ ├─┤├┤ ├┤ │ ├┤ │ │┌─┘┌─┘├┤ ├┬┘ ┴ ┴ ┴└─┘└ ┴ └ └─┘└─┘└─┘└─┘┴└─ Introducción: TheftFuzzer es una herramienta que fuzzea implementaciones de Intercambio de Recursos de Origen Cruzado en busca de configuraciones incorrectas comunes. Uso: python theftfuzzer.py -d...

striptls

striptls - auditing proxy poc implementation of STARTTLS stripping attacks A generic tcp proxy implementation and audit tool to perform protocol independent ssl/tls interception and STARTTLS stripping attacks on SMTP, POP3, IMAP, FTP, NNTP, XMPP, ACAP and IRC. Python2! 🏆 Trophies CVE-2016-0772 -...

cdf

CDF – fuzzing diferencial criptográfico CDF es una herramienta para probar automáticamente la corrección y seguridad del software criptográfico. CDF puede detectar errores de implementación, fallos de cumplimiento, fugas de canales laterales, etc. CDF implementa una combinación de pruebas unitari...

routopsy

routopsy Routopsy is a toolkit built to attack often overlooked networking protocols. Routopsy currently supports attacks against Dynamic Routing Protocols DRP and First-Hop Redundancy Protocols FHRP. Most of the attacks currently implemented make use of a weaponised 'virtual router' as opposed t...

AWS-Tough-Library-Multiple-CVEs

AWS Tough Library Multiple CVEs In March 2025, multiple security vulnerabilities were disclosed in AWS Labs’ Tough library a Rust client implementation of TUF – The Update Framework. These issues are tracked under CVE-2025-2885, CVE-2025-2886, CVE-2025-2887 and CVE-2025-2888, and were fixed in...

laravel-crypto-killer

Laravel crypto killer Инструмент, предназначенный для эксплуатации некорректных реализаций механизмов дешифрования в приложениях Laravel. Изначально инструмент был создан для формирования полезных нагрузок payload, нацеленных на функцию Laravel decrypt из пакета Illuminate\Encryption. Его также...

external_c2

Краткое описание Cobalt Strike содержит новую / экспериментальную функцию под названием externalc2. Она обходит malleable profiles и позволяет разработчику создавать собственные каналы. Этот код является POC, который в итоге оказался решением реальной проблемы. Содержимое кода c2file.c: реализаци...

o3_finds_cve-2025-37899

based on How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation target vuln ollama vuln CVE-2024-37032 https://github.com/ollama/ollama/releases/tag/v0.1.34 https://github.com/ollama/ollama/compare/v0.1.33...v0.1.34 commit: 2a21363 by using l...

grails3-cve-2022-27772

grails3-cve-2022-27772 The Grails® framework 3.3 application provides custom implementation for TomcatEmbeddedServletContainerFactory which overrides createTempDirectory method implementation. The custom implementation is then used to create EmbeddedServletContainer bean from Application.groovy...

domain_generation_algorithms

Алгоритмы генерации доменов Алгоритмы генерации доменов DGA вредоносных программ, перереализованные на Python. Обзор banjori также известный как MultiBanker 2, BankPatcher Ссылки http://johannesbader.ch/2015/02/the-dga-of-banjori/ Примеры доменов earnestnessbiophysicalohax.com...

sockstress

sockstress Sockstress CVE-2008-4609 implementation using Go Install go get github.com/marcelki/sockstress Usage Usage: sockstress options... Options: -p The destination port to attack. -i The network interface to use. -d The delay between SYN packets You can choose your unit of time e.g. 1ns,...