DedSec

DedSec Project Official Website DedSec Project Cross-platform build note: This copy includes support for Ubuntu, Kali Linux, Linux Mint, and Termux. Run bash Setup.sh, then use ./Run.sh. See CROSSPLATFORM.md for platform-specific behavior and limitations. Για να μεταβείτε στην πλήρη Ελληνική...

termshark

Termshark A terminal user-interface for tshark, inspired by Wireshark. V2.4 is out now with packet search and profiles for colors and columns! See theChangeLog. If you're debugging on a remote machine with a large pcap and no desire to scp it back to your desktop, termshark can help! Features Rea...

CQPToolkit

CQP Tool kit Le système fournit divers composants pour intégrer QKD dans un système de sécurité. Il est écrit en C++11 mais utilise des interfaces GRPC ce qui permet de l'intégrer avec de nombreux langages différents. Démarrage rapide Pour exécuter le logiciel nativement, soit : téléchargez et...

r2frida

r2frida Radare2 and Frida better together Description Self-contained plugin for radare2 that ships frida and allows to instrument local or remote processes using r2 commands instead but not limited to Frida scripts. The radare project provides a complete toolchain for reverse engineering, it's...

pmotadeee

🧠 FLATLINE - Protocole d'injection de conscience ATTENTION : Ceci n'est pas un jeu. C'est une interface cognitive pour le hacking de la réalité. 🎮 COMMENT JOUER Gameplay de base 1. Téléchargez les modules de conscience fichiers CSV depuis ce dépôt 2. Injectez-les directement dans les interfaces I...

androguard

Androguard Androguard: Reverse engineering and pentesting for Android applications Androguard 5 is a Python toolkit for Android reverse engineering: open an APK, inspect the manifest and DEX, disassemble or decompile code, hunt references and vulnerabilities, and optionally patch or analyze nativ...

chipsec

CHIPSEC : Cadre d'évaluation de la sécurité des plateformes CHIPSEC est un cadre d'analyse de la sécurité des plateformes PC incluant le matériel, le firmware système BIOS/UEFI et les composants de la plateforme. Il comprend une suite de tests de sécurité, des outils pour accéder à diverses...

chipsec

CHIPSEC: Platform Security Assessment Framework CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware BIOS/UEFI, and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities...

trivy

📖 Documentation Trivy pronunciation is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues. Targets what Trivy can scan: Container Image Filesystem Git Repository remote Virtual Machine Image Kubernetes...

cdf

CDF – crypto differential fuzzing CDF is a tool to automatically test the correctness and security of cryptographic software. CDF can detect implementation errors, compliance failures, side-channel leaks, and so on. CDF implements a combination of unit tests with "differential fuzzing", an approa...

Cisco ISE - Remote Code Execution

A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker does not require any valid credentials to exploit this vulnerability. This vulnerability is due to...

BaRMIe

BaRMIe BaRMIe est un outil pour énumérer et attaquer les services Java RMI Remote Method Invocation. Les services RMI exposent souvent des fonctionnalités dangereuses sans contrôles de sécurité adéquats, mais ils passent généralement inaperçus lors des audits de sécurité en raison du manque...

CVE-2023-42326

Эксплойт внедрения команд в pfSense 2.7.0 CVE-2023-42326 Этот скрипт на Python является эксплойтом Proof-of-Concept PoC для уязвимости внедрения команд CVE-2023-42326 в pfSense 2.7.0. Уязвимость позволяет аутентифицированным атакующим внедрять и выполнять произвольные команды через компоненты...

dropengine

by @s0lst1c3 Current release: v0.1.0-alpha Supports Python 3.7+. Overview Defense Evasion techniques tend to have a short shelf-life, and this is especially true for techniques used during initial access. Because of this, initial access payloads are often prepared on a per-engagement basis, which...

React Native Community CLI - Unauthenticated OS Command Injection

The Metro development server started by the React Native Community CLI binds to external network interfaces by default and exposes an unauthenticated /open-url endpoint. Affected versions pass the attacker supplied url value straight to the open helper without validating the scheme, allowing an...

gdbfuzz

GDBFuzz: Debugger-Driven Fuzzing This is the companion code for the paper: 'Fuzzing Embedded Systems using Debugger Interfaces'. A preprint of the paper can be found here https://publications.cispa.saarland/3950/. The code allows the users to reproduce and extend the results reported in the paper...

Rocky Linux 8 [CIQ] Security Update: vim-X11 / vim-X11-debuginfo / vim-common / vim-common-debuginfo / etc (crlsa-2020_4453)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20204453 advisory. vim: users can execute arbitrary OS commands via scripting interfaces in the rvim restricted mode CVE-2019-20807 Tenable has extracted the preceding description blo...

Malicious code in @hrmony/interfaces (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7837cf2dff543cfea2f35e0dea5f767ca7b8e8f81129f4c770e5693ed247c0e index.js executes top-level async code on any require/import of the package. The code 1 obtains an AWS IMDSv2 token and fetches EC2 instance identity...

CVE-2024-38063-POC

Отправитель IPv6-пакетов для эксплуатации уязвимости повреждения памяти CVE-2024-38063 Этот скрипт на Python предназначен для отправки специально сформированных пакетов с целью вызвать потенциальную уязвимость повреждения памяти CVE-2024-38063. Он использует библиотеку Scapy для создания и отправ...

CVE-2026-91006

A flaw was found in Apache Karaf. An attacker with access to instance-management commands or Java Management Extensions JMX interfaces can achieve arbitrary command execution on the underlying host system. This issue occurs because user-supplied Java options are spliced directly into child-instan...