morpheus

Morpheus - automated ettercap TCP/IP Hijacking tool Version release: v2.2 - STABLE Author: pedro ubuntu r00t-3xp10it Codename: oneiroi phobetor The mithologic dream greek god Distros Supported: Linux Ubuntu, Kali, Debian, BackBox, Parrot OS Suspicious-Shell-Activity© SSA RedTeam develop @2018 LEG...

backdoorppt

backdoorppt - 'Office spoof extensions tool' Version release: v1.7-Stable Author: pedro ubuntu r00t-3xp10it Distros Supported: Linux Kali, Ubuntu, Mint Suspicious-Shell-Activity© SSA RedTeam develop @2017 Transform your payload.exe into one fake word doc .ppt Simple script that allow users to add...

kekeo

kekeo kekeo is a little toolbox I have started to manipulate Microsoft Kerberos in C and for fun ASN.1 library In kekeo, I use an external commercial library to deal with Kerberos ASN.1 structures: OSS ASN.1/C http://www.oss.com/asn1/products/asn1-c/asn1-c.html It was the only code...

CryKeX

Properties: Cross-platform Minimalism Simplicity Interactivity Compatibility/Portability Application Independable Process Wrapping Process Injection Dependencies: Unix - should work on any Unix-based OS BASH - the whole script root privileges optional Limitations: AES and RSA keys only Fails most...

msidump

msidump MSI Dump - a tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner. On Macro-enabled Office documents we can quickly use oletools mraptor to determine whether document is malicious. If we want to dissect it further, we...

vm2

vm2 !NPM Versionnpm-imagenpm-url !NPM Downloadsdownloads-imagedownloads-url !Licenselicense-imagelicense-url !Known Vulnerabilitiessnyk-imagesnyk-url vm2 — это песочница, которая может запускать недоверенный код с использованием разрешённых встроенных модулей Node. Установкаsh npm install vm2 Qui...

prefetch-hash-cracker

Prefetch Hash Cracker Motivation During the forensic analysis of a Windows machine, you may find the name of a deleted prefetch file. While its content may not be recoverable, the filename itself is often enough to find the full path of the executable for which the prefetch file was created. Usin...

aws-key-disabler

AWS Lambda - IAM Access Key Disabler The AWS Key disabler is a Lambda Function that disables AWS IAM User Access Keys after a set amount of time in order to reduce the risk associated with old access keys. AWS Lambda Architecture SysOps Output for EndUser Developer Toolchain Current Limitations A...

brawl-public-game-001

BRAWL One of the challenging problems for cyber security researchers developing detection and response capabilities is finding a realistic environment in which to test their hypothesis and capabilities. The cheapest method is to test capabilities on a small lab network. But this environment is...

misp-extractor

MISP Extractor This code connects to a given MISP Malware Information Sharing Platform server and parses a given number of events, writing the IP addresses, URLs, and MD5 hashes found in the events to three separate files. Usage To use this script, you will need to provide the URL of your MISP...

Revoke-Obfuscation

Revoke-Obfuscation v1.0 Introduction Revoke-Obfuscation est un framework de détection d'obfuscation PowerShell compatible avec PowerShell v3.0+. Auteurs Daniel Bohannon @danielhbohannon Lee Holmes @LeeHomes Recherche Article de blog :...

dnspeep

dnspeep dnspeep lets you spy on the DNS queries your computer is making. Here's some example output: $ sudo dnspeep query name server IP response A incoming.telemetry.mozilla.org 192.168.1.1 CNAME: telemetry-incoming.r53-2.services.mozilla.com, CNAME:...

CVE-2025-46822

CVE-2025-46822 ⚠️ Recherche en sécurité et clause de non-responsabilité légale 📌 Objet de ce dépôt Ce dépôt est fourni strictement à des fins éducatives, académiques et de recherche en cybersécurité autorisée uniquement. Il est destiné à soutenir la compréhension de : Les concepts de vulnérabilité...

CVE-2026-20223

CVE-2026-20223 ⚠️ 보안 연구 및 법적 면책 고지 📌 이 저장소의 목적 이 저장소는 교육, 학술 및 공인된 사이버보안 연구 목적으로만 엄격히 제공됩니다. 다음에 대한 이해를 지원하기 위한 것입니다: 통제된 환경에서의 보안 취약점 및 익스플로잇 개념 샌드박스 격리 메커니즘 및 그 한계 안전한 소프트웨어 설계 및 방어적 보안 관행 🚫 승인된 사용만 허용 이 저장소는 명시적 권한이 부여된 환경에서만 사용해야 합니다. 예: 개인 또는 통제된 가상 머신 Docker 또는 격리된 실험실 환경 공인된 침투 테스트 계약 학술 또는...

CVE-2026-0001

⚠️ Recherche en Sécurité et Avertissement Juridique 📌 Objectif de ce Répertoire Ce répertoire est fourni strictement à des fins éducatives, académiques et de recherche en cybersécurité autorisées uniquement. Il est destiné à soutenir la compréhension de : Vulnérabilités de sécurité et concepts...

libunwind_CVE-2015-3239_After

-- mode: Outline - - Ceci est la version 1.0 de la bibliothèque unwind. Cette bibliothèque prend en charge plusieurs combinaisons architecture/système d'exploitation : Linux/x86-64 : Fonctionne bien. Linux/x86 : Fonctionne bien. Linux/ARM : Fonctionne bien. Linux/IA-64 : Entièrement testé et pris...

EUVD-2026-51259

IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations...

CVE-2026-12733: Allocation of Resources Without Limits or Throttling

IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations...

PT-2026-66557

Name of the Vulnerable Software and Affected Versions IBM DataPower Gateway affected versions not specified Description Improper resource limitations may allow a remote attacker to cause a denial of service. Recommendations At the moment, there is no information about a newer version that contain...

GHSA-XV4R-4885-GWPG Kimai has Improper Authorization in Team Member and Team Activity Assignment APIs Which Allows Expansion of Team Scope Beyond Authorized Visibility

Summary Kimai contains an authenticated improper authorization vulnerability in Team-related assignment APIs. A Teamlead who can edit their own team can use backend API endpoints to add users or activities that fall outside their intended visible or manageable scope, even when the frontend...