CVE-2025-0868

Informe de Proyecto de Pruebas de Penetración: Explotación de CVE-2025-0868 DocsGPT RCE mediante Eval JSON 1. Introducción El 20 de febrero de 2025 se reveló una vulnerabilidad crítica de ejecución remota de código RCE CVE-2025-0868 en la biblioteca de código abierto DocsGPT, causada por el uso...

scodescanner

SCodeScanner SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities. The main objective for this scanner is to find the vulnerabilities inside the source code before code gets published in Prod. Website for newreleases, new...

CFB

What is it? !CAUTION CFB is meant for research and debug purposes, it should never be used on production systems. Also BSoD may happen. You've been warned. Canadian Furious Beaver is a ProcMon-style tool designed only for capturing IRPs sent to any Windows driver. It operates in 2 parts: 1. the...

ipsourcebypass

This Python script can be used to bypass IP source restrictions using HTTP headers. Features 17 HTTP headers. Multithreading. JSON export with --json outputfile.json. Auto-detecting most successful bypasses. Usage $ ./ipsourcebypass.py -h IP source bypass using HTTP headers, v1.2 usage:...

SynthAPT

SynthAPT Resumen SynthAPT es un marco de simulación de adversarios basado en playbooks para replicar rutas de ataque complejas. Está diseñado para validar detecciones avanzadas y agentes de investigación basados en IA. La idea central es que el comportamiento del malware puede expresarse en JSON ...

ntdissector

ntdissector Ntdissector is a tool for parsing records of an NTDS database. Records are dumped in JSON format and can be filtered by object class. By providing the SYSTEM hive or the right bootkey in hex format, encryption layers will be removed from the right columns. More info in the following...

jwt-hack

Kit de herramientas para hackear JSON Web Tokens Un kit de herramientas de alto rendimiento para probar, analizar y atacar JSON Web Tokens. Instalación Cargo cargo install jwt-hack Homebrew brew install jwt-hack Snapcraft Ubuntu sudo snap install jwt-hack Chocolatey Windows choco install jwt-hack...

Detection-and-Mitigation-script-for-CVE-2021-42717

Script de detección y mitigación para CVE-2021-42717 Script de detección y mitigación para CVE-2021-42717 - Vulnerabilidad DoS de ModSecurity en el análisis de JSON ModSecurity 3.x hasta 3.0.5 maneja incorrectamente objetos JSON excesivamente anidados. Objetos JSON diseñados con anidamiento de...

gopassivedns

gopassivedns Registro de DNS basado en red en Go Resumen Un registrador de DNS basado en captura de red, inspirado en https://github.com/gamelinux/passivedns. Utiliza gopacket para manejar libpcap y el procesamiento de paquetes. Genera registros en JSON. Está diseñado para manejar capturas de...

xori

Xori - Custom disassembly framework Xori is an automation-ready disassembly and static analysis library that consumes shellcode or PE binaries and provides triage analysis data. Acknowledgements: Xori wouldn't exist without inspiration and ideas from the open source community. We are indebted to...

cloudsploit

CloudSploit by Aqua - Cloud Security Scans Quick Start Generic $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker build . -t cloudsploit:0.0.1 $...

RustHound-CE

RustHound-CE is a cross-platform and cross-compiled BloodHound collector tool written in Rust, making it compatible with Linux, Windows, and macOS. It therefore generates all the JSON files that can be analyzed by BloodHound Community Edition. This version is only compatible with BloodHound...

adexplorersnapshot-rs

ADExplorerSnapshot-rs Rewrite of ADExplorerSnapshot.py. Outputs a .tar.gz of BloodHound CE JSON files for ingestion. Please see the issues with this project before using it. It's not a drop in replacement yet. Installation Pre-built binaries for Linux and Windows are published in releases Usage...

teams_dump

PoC for dumping and decrypting cookies in the latest version of Microsoft Teams extract.py just dumps without arguments extract.exe is just extract.py packed into an exe teamsdump.py List values in the database python.exe .\teamsdump.py teams --list Table: meta Columns in meta: key, value...

intelmq

docs/index.md...

laurel

Linux Audit – Usable, Robust, Easy Logging LAUREL is an event post-processing plugin for auditd8 that generates useful, enriched JSON-based audit logs suitable for modern security monitoring setups. Documentation corresponding to the latest stable release can be found here. Why? TLDR: Instead of...

laurel

Linux Audit – Registro utilizable, robusto y fácil LAUREL es un complemento de postprocesamiento de eventos para auditd8 que genera registros de auditoría JSON enriquecidos y útiles, adecuados para configuraciones modernas de monitoreo de seguridad. La documentación correspondiente a la última...

malpedia-flossed

Malpedia FLOSSed Este repositorio contiene el resultado de la herramienta FLARE FLOSS aplicada a todas las muestras desempaquetadas y volcadas en Malpedia, preprocesadas para su uso posterior. Tenemos la intención de actualizar esta colección periódicamente. En la última ejecución de enero de 202...

poro

poro Description Scan for publicly accessible assets on your AWS environment Services covered by this tool: AWS ELB API Gateway S3 Buckets RDS Databases EC2 instances Redshift Databases Poro also check if a tag you specify is applied to identified public resources using --tag-key and --tag-value...

http-mcp-bridge

HTTP MCP Bridge This project implements an HTTP server that acts as a bridge between HTTP/1.1 requests and a remote MCP server, using the mcp python library GitHub. The main purpose of this initiative is to be able to use HTTP security tools to test remote MCP servers using the remote transport...