lisa.py

LLDB MCP 集成 本项目为 LLDB 提供了模型-上下文协议 MCP 集成，允许 AI 助手（如 Claude）通过标准化接口与您的调试会话进行交互。 概述 集成包含两个主要组件： 1. server.py — 一个与 Claude（或其他 MCP 客户端）通信的 MCP 服务器 2. lldbplugin.py — 一个在 LLDB 内部运行并通过 JSON-RPC 暴露调试器功能的插件 该架构使 Claude 能够通过自然语言直接与 LLDB 交互，帮助您调试代码。MCP 服务器充当桥梁，将 Claude 的请求转换为 LLDB 命令，并以结构化格式返回结果。 安装 前置条件...

git-vuln-finder

git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE ID...

dh-CVE_2016_2098

== README Prueba de concepto de https://groups.google.com/forum/!topic/rubyonrails-security/ly-IH-fxrQ == Explotación: 1. Solo debes ejecutar el servidor rails de una manera que estés seguro de que no te exponga a ser explotado. 2. Ejecuta rails s 3. Ejecuta el siguiente comando curl -v -H "Accep...

CVE-2025-1974_IngressNightmare_PoC

CVE-2025-1974IngressNightmare poc IngressNightmare Script A Python script to automate sending JSON payloads to a list of IPs via curl, capturing responses and splitting them into success and failure XML reports. Features Sends HTTPS POST requests with a JSON payload to multiple IP addresses...

OSTE-Meta-Scan

OSTE-Meta-Scanner 该项目现由OSTE维护和支持，不再作为开源项目提供。如有咨询、商业使用或支持需求，请通过LinkedIn、官方网站或通过whatsup联系销售团队：+213.7.98.38.94.54。 本项目旨在简化动态应用安全测试（DAST）领域。OSTE元扫描器是一款综合性的Web漏洞扫描器，集成了多个DAST扫描器，包括Nikto Scanner、ZAP、Nuclei、SkipFish和Wapiti。 目录 简介 功能特性 安装 使用说明 贡献 许可证 截图 简介 本软件提供用户友好的图形界面，每次扫描都生成详尽报告，使扫描过程轻松直观。...

whatportis

whatportis .. image:: https://github.com/opencve/opencve/workflows/Tests/badge.svg :target: https://github.com/ncrocfer/whatportis/actions/workflows/tests.yml .. image:: https://badge.fury.io/py/whatportis.svg :target: https://pypi.python.org/pypi/whatportis/ .. image::...

chromecookiestealer

Chrome Cookie Stealer and injector Attaches to Chrome using its Remote DevTools protocol and steals/injects/clears/deletes cookies. Heavily inspired by WhiteChocolateMacademiaNut. Cookies are dumped as JSON objects using Chrome's own format. The same format is used for cookies to be loaded. For...

CVE-2025-65881

CVE-2025-65881 El proyecto Zoo Management System v1.00 es vulnerable a Cross-site scripting XSS en /zms/classes/Login.php?f=login debido a: 1. Content-type inválido de las respuestas JSON en /zms/classes/Login.php?f=login 2. Entrada de usuario sin sanear en las respuestas Lo que permite a atacant...

json_cve_2020_10663

Solución alternativa para CVE-2020-10663 vulnerabilidad en la gema json La gema json tiene una vulnerabilidad de seguridad CVE-2020-10663. Al analizar ciertos documentos JSON, la gema json puede ser forzada a crear objetos arbitrarios en el sistema de destino. Se recomienda encarecidamente a los...

CVE-2026-83458

Vulnerability in the Helidon product of Oracle Fusion Middleware component: JSON. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can...

CVE-2026-76821

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260706.0, the JSON ingestion mapper's extractWithRegexp formula function compiled a user-supplied regular expression with the JavaScript RegExp engine in...

Password-Strength-Evaluator

Password Strength Evaluator Password Strength Evaluator es una herramienta para evaluar la fortaleza de las contraseñas y proporcionar recomendaciones para mejorar su seguridad. Esta herramienta también comprueba si tu contraseña ha sido expuesta en alguna filtración de datos mediante la API de...

CVE-2026-83458

Oracle Helidon (part of Oracle Fusion Middleware), specifically the JSON component , is affected in supported versions 4.0.0 through 4.5.4 . An unauthenticated attacker with network access via HTTP can exploit this with low complexity to cause a partial denial of service (partial DOS) of Helidon....

EUVD-2026-79757

Vulnerability in the Helidon product of Oracle Fusion Middleware component: JSON. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can...

CVE-2026-76821 OpenCTI: User-Controlled ReDoS in JSON Ingestion Mapper

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260706.0, the JSON ingestion mapper's extractWithRegexp formula function compiled a user-supplied regular expression with the JavaScript RegExp engine in...

EUVD-2026-79240

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260706.0, the JSON ingestion mapper's extractWithRegexp formula function compiled a user-supplied regular expression with the JavaScript RegExp engine in...

CVE-2026-76821

OpenCTI , an open-source cyber threat intelligence platform, is vulnerable to user-controlled ReDoS in the JSON ingestion mapper's extractWithRegexp formula function (prior to 7.260706.0 ). The function compiled a user-supplied regular expression with the JavaScript RegExp engine without validati...

hassh

"HASSH" - a Profiling Method for SSH Clients and Servers. NOTE: This Corelight repository was created so that it can be actively maintained, as per a request from Salesforce whose original repository is not being maintained. "HASSH" is a network fingerprinting standard which can be used to identi...

custom-bytecode-analyzer

custom-bytecode-analyzer Java bytecode analyzer customizable via JSON rules. It is a command-line tool that receives a path containing one or more Jar or War files, analyzes them using the provided rules and generates HTML reports with the results. Usage root@kitploit: usage: java -jar cba-cli.ja...

custom-bytecode-analyzer

custom-bytecode-analyzer 可通过 JSON 规则自定义的 Java 字节码分析器。它是一个命令行工具，接收包含一个或多个 Jar 或 War 文件的路径，使用提供的规则进行分析，并生成 HTML 格式的结果报告。 使用方法 root@kitploit: usage: java -jar cba-cli.jar OPTIONS -a DIRECTORYTOANALYZE -a,--analyze 待分析目录的路径。 -c,--checks 以空格分隔的自定义检查列表，这些检查将在分析中运行。 -f,--custom-file 指定 JSON...