The vulnerability of the Directum Web Agent component of the Directum RX system, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

yaraQA

yaraQA Анализатор YARA-правил для повышения качества и производительности правил Зачем? YARA-правила могут быть синтаксически корректными, но всё равно нефункциональными. yaraQA пытается найти и сообщить об этих проблемах автору или сопровождающему набора YARA-правил. Проблемы, которые пытается...

truegaze

truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...

maat

About Maat is an open-source Dynamic Symbolic Execution and Binary Analysis framework. It provides various functionalities such as symbolic execution, taint analysis, constraint solving, binary loading, environment simulation, and leverages Ghidra's sleigh library for assembly lifting:...

CVE-2025-31702

CVE-2025-31702 — 연구 도구 및 DFIR 자료 CVE-2025-31702 및 관련 문제의 분석과 발견에 사용된 도구, 익스플로잇, 연구 자료를 포함하는 저장소입니다. 더 많은 정보 및 심층 분석: https://labs.itresit.es/2025/10/15/dahua-cve-2025-31702-p2p-auto-update-eop/ 개요 이 프로젝트는 CVE-2025-31702 및 관련 운영 문제특히 P2P/Easy4IP 노출 및 자동 업데이트 불일치에 대한 조사에 사용된 자료를 모아둡니다. DFIR 중 관찰된 동...

sessionprobe

SessionProbe 🚀⚡ SessionProbe — это многопоточный инструмент для пентеста, предназначенный для оценки привилегий пользователя в веб-приложениях. Он принимает токен сессии пользователя и проверяет список URL-адресов на предмет возможности доступа, выявляя потенциальные проблемы с авторизацией...

frida

Frida Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers. Learn more at frida.re. Two ways to install 1. Install from prebuilt binaries This is the recommended way to get started. All you need to do is: pip install frida-tools CLI tools pip install frida...

CVE-issues

이 저장소에는 README가 없습니다...

applepie

applepie, a hypervisor implementation for Bochs Hello! Welcome to applepie! This is a tool designed for fuzzing, introspection, and finding bugs! This is a hypervisor using the Windows Hypervisor Platform API present in recent versions of Windows specifically this was developed and tested on...

chalumeau

Chalumeau Chalumeau is automated,extendable and customizable credential dumping tool based on powershell and python. Main Features Write your own Payloads In-Memory execution Extract Password List Dashboard reporting / Web Interface Parsing Mimikatz Dumping Tickets Screenshots Known Issues Parsin...

brave-browser

Brave Browser Этот репозиторий не нужен для сборки браузера и содержит только issues, релизы и вики. Исходный код и материалы для контрибуций находятся по адресу https://github.com/brave/brave-core. Вы можете посетить наш сайт, чтобы получить последний стабильный релиз. Ресурсы Issues: Отчёты об...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start Download the Repo = run npm i Afer Installing all dependency just run the application node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4 Broken Session Management ✅5 We...

SWE-agent

!warning Большая часть нашей текущей работы по разработке сосредоточена на mini-swe-agent, который заменил SWE-agent. Он соответствует производительности SWE-agent, будучи при этом значительно проще. За подробностями о различиях обращайтесь к FAQ. Наша общая рекомендация — впредь использовать...

nfcgate

NFCGate ⚠️NFCGate is currently being falsely detected as "NGate" malware. Please seethis issue for up-to-date information.⚠️ NFCGate is an Android application meant to capture, analyze, or modify NFC traffic. It can be used as a researching tool to reverse engineer protocols or assess the security...

metasploit-framework

Metasploit Framework Metasploit Framework — это инструмент с открытым исходным кодом, выпущенный под лицензией BSD. Подробную информацию о лицензировании см. в файле COPYING. Последняя версия Получить последнюю версию Metasploit можно на странице Nightly Installers. Документация Исчерпывающая...

Xenon

Xenon Xenon은@c0rnbread가 제작한 Mythic용 Cobalt Strike 스타일의 Windows 에이전트입니다. ⚠️ Xenon은 초기 릴리스 단계입니다. OPSEC에 안전하지 않으며 충돌을 일으킬 수 있는 메모리 문제가 있을 수 있습니다. 실제 환경에서 사용할 계획이라면 철저히 테스트하십시오. OPSEC 면책 조항 Xenon은 회피에 대해 어떠한 주장도 하지 않습니다. 기본 구성은 OPSEC에 안전하지 않습니다. Xenon의 목표는 운영자가 목표를 달성하기 위해 기능을 사용자 정의할 수 있도록 하는 것입니다...

zi

❮ Zi ❯ 🧙‍♂️ 🪄 A Swiss Army Knife for Zsh - Unix Shell ✨ 《 Report an issue · 《 Request a Feature 》 · 《 Ask a Question 》 --- 《💡》Search Wiki 《⚡️》 Install 《💜》Join 《🌐》Localize 🎯 Roadmap Generally, new features will be introduced as a component to improve performance and compatibility and not to force,...

brakeman

Brakeman Brakeman is a static analysis tool which checks Ruby on Rails applications for security vulnerabilities. Installation Using RubyGems: gem install brakeman Using Bundler: group :development do gem 'brakeman', require: false end Using Docker: docker pull presidentbeef/brakeman Using Docker...

climber

Climber Automated auditing tool to check UNIX/Linux systems misconfigurations which may allow local privilege escalation. Dependencies python = 2.7 python-crypto python-mako python-paramiko Note Climber needs Exscript, a Python module and a template processor for automating network connections ov...

xc

XC Netcat like reverse shell for Linux & Windows. Features Windows Usage: └ Shared Commands: !exit !upload uploads a file to the target !download downloads a file from the target !lfwd local portforwarding like ssh -L !rfwd remote portforwarding like ssh -R !lsfwd lists active forwards !rmfwd...