November 06, 2026—KB5135582 (Monthly Rollup) Out-of-band

November 06, 2026—KB5135582 Monthly Rollup Out-of-band Applies To Windows Server 2012 R2 ESU Important This update is being released as an exception for devices that are past Year 3 of the Extended Security Updates ESU program. It is provided to deliver a quality improvement. Windows Server 2012 ...

Ares

Ares Ares is a Python Remote Access Tool. Warning: Only use this software according to your current legislation. Misuse of this software can raise legal and ethical issues which I don't support nor can be held responsible for. Ares is made of two main programs: A Command aNd Control server, which...

ThreatScraper

ThreatScraper ThreatScraper is a Python-based tool designed to check virus information by using VirusTotal API. It offers functionalities such as scheduling the checking at specific times, showing and saving the graph of malware detection trends, as well as saving virus information to an Excel...

cve-2016-7190

Overview CVE-2016-7190 0 is a heap overflow in the Array.map function of ChakraCore that allows to overwrite adjacent memory. The main idea to gain arbitrary read-write access is to first allocate a number of consecutive JavaScript integer Arrays. and to exploit the overflow to manipulate the siz...

jdvrif

jdvrif jdvrif is a steganography command-line tool for concealing and extracting any file type via a JPG image. Demo Image - KEY: Wtub-TzgD-VCvf-aLHW-UwY2-UBoF Your data file is compressed with libdeflate/zlib , then encrypted with XChaCha20-Poly1305 libsodium secretstream under a 256-bit...

firecall

firecall Automate SSH communication with firewalls, switches, etc. Description These scripts are designed to automate sending commands to a Cisco ASA firewall. The intended purpose here is to eliminate the need to manually log in to a firewall to make changes. This code can be run directly via...

PentestingEverything

PentestingEverything A complete, searchable penetration-testing knowledge base across 23 security domains. Live website: pentesting.m14r41.in Live Website · PentestingChecklist · Contribute · Report an Issue Read it online at pentesting.m14r41.in : fully searchable, with 108 documentation pages,...

lua_CVE-2020-24370

Lua 5.3 readme blockquote, .display border: solid a0a0a0 2px ; border-radius: 8px ; padding: 1em ; margin: 0px ; .display word-spacing: 0.25em ; dl.display dd padding-bottom: 0.2em ; tt, kbd, code font-size: 12pt ; Welcome to Lua 5.3 about · installation · changes · license · reference manual Abo...

shodan-dorks

Shodan dorks Description: This GitHub repository provides a range of search queries, known as "dorks," for Shodan, a powerful tool used to search for Internet-connected devices. The dorks are designed to help security researchers discover potential vulnerabilities and configuration issues in...

egodeath

egodeath This project does not achieve indistinguishability obfuscation. You should not be using this to product to protect secrets. It exists to deter reverse engineering, not prevent it A JavaScript obfuscator designed to make code extremely difficult to read and analyze for both humans and LLM...

talos

Chat · Discussions · Newsletter · Docs · Try Ory Network · Jobs Ory Talos is a scalable and secure API key server optimized for low-latency verification, horizontal scaling, and predictable operations. It follows established security best-practices for API keys and issues, verifies, revokes, and...

Pyison

Pyison Pyison is a tarpit for AI webcrawlers Introduction Like all web crawlers, AI bots request pages from webservers, and then follow links on the page to other pages. By doing this, they can build an index of an entire website. Unlike other web crawlers, though, AI bots present some unique...

CobaltStrike-BOF

CobaltStrike BOF Collection of beacon BOF. 1 DCOM Lateral Movement A quick PoC that uses DCOM ShellWindows via beacon object files for lateral movement.You can either specify credentials or use the current user. To use the current user, just leave the domain, username, and password empty. A short...

NativeDump

NativeDump NativeDump allows to dump the lsass process using only NTAPIs generating a Minidump file with only the streams needed to be parsed by tools like Mimikatz or Pypykatz SystemInfo, ModuleList and Memory64List Streams. NTOpenProcessToken and NtAdjustPrivilegeToken to get the...

cheatengine-mcp-bridge

Demo Cheat Engine MCP Bridge Let multibillion $ AI datacenters analyze the program memory for you. Create mods, trainers, security audits, game bots, accelerate RE, or do anything else with any program and game in a fraction of a time. !NOTE Thanks everyone for the stars, much appreciated!...

Vol3xp

Vol3xp, Volatility 3 Explorer Plugins WinObj - Windows Kernel Objects Explorer an improve of https://github.com/kslgroup/WinObj for volatility 3 winobj.py WinObj very similar to WinObj sysinternals Also supports Struct Analyzer and WinObjGui from VolExp. RAMMap - Physical Address Mapping pfn.py...

sshuttle

sshuttle: where transparent proxy meets VPN meets ssh As far as I know, sshuttle is the only program that solves the following common case: Your client machine or router is Linux, FreeBSD, MacOS, or Windows experimental. You have access to a remote network via ssh. You don't necessarily have admi...

DriverBuddyReloaded

Driver Buddy Reloaded Table of Contents Driver Buddy Reloaded Table of Contents Installation Quick Usage Advanced Usage About Driver Buddy Reloaded Finding DispatchDeviceControl Labelling WDM and WDF Structures Finding and Decoding IOCTL Codes Flagging Functions Finding DeviceName Dumping Pooltag...

CQPToolkit

CQP Tool kit The system provides various components for integrating QKD into a security system. It's written in C++11 but uses GRPC interfaces so can be integrated with lots of different languages. Quick Start To run the software natively, ether: download and install the Ubuntu deb packages or...

RSA-Backdoor

RSA Backdoor Generator This repo contains code to reproduce the Secretly Embedded Trapdoor with Universal Protection SETUP attack on RSA key generation proposed by Young & Yung, 1996. Considering the potential of this attack, never trust black box key generation systems. References: - Presentatio...