CVE-2026-65400

CVE-2026-65400 For the first time in a while, we've got an RCE on MacOS. Originally discovered by @osxreverser, and later expanded upon by bynar.io. See https://blog.calif.io/p/no-country-for-old-passwords for some more info. This is mostly derived from work by @panchocosil well, Claude..., who...

BrowserBox

BrowserBox — Remote Browser Isolation A full remote browser. Clientless access. Native performance. Self-host on Windows, macOS or Linux, or create cloud browser sessions through the API. Start a 7-Day Paid Evaluation · Buy a Commercial License · Talk to Sales Website · Live Demo · Documentation ...

webanalyze

webanalyze This is a port of Wappalyzer in Go. This tool is designed to be performant and allows to test huge lists of hosts. !NOTE Because Wappalyzer removed the public access to their app definitions, webanalyze currently loads definitions from enthec. Installation and usage Precompiled release...

manul

Manul Manul is a coverage-guided parallel fuzzer for open-source and black-box binaries on Windows, Linux and macOS beta written in pure Python. Quick Start pip3 install psutil git clone https://github.com/mxmssh/manul cd manul mkdir in mkdir out echo "AAAAAA" in/test python3 manul.py -i in -o ou...

uac

Unix-like Artifacts Collector UAC About • Documentation • Main Features • Supported Operating Systems • Usage • Contributing • Support • License 🔎 About UAC UAC Unix-like Artifacts Collector is a powerful and extensible incident response tool designed for forensic investigators, security analysts...

sdrtrunk

MacOS Tahoe 26.1 Users - Attention: Changes to USB support in Tahoe version 26.x cause sdrtrunk to fail to launch. Do the following to install the latest libusb and create a symbolic link and then use the nightly build which includes an updated usb4java native library for Tahoe with ARM processor...

blutter

Blutter Flutter Mobile Application Reverse Engineering Tool by Compiling Dart AOT Runtime Currently the application supports only Android libapp.so arm64 only. Also the application is currently work only against recent Dart versions. For high priority missing features, see TODO Environment Setup...

XPEViewer

PE file viewer/editor for Windows, Linux and MacOS. Download: https://github.com/horsicq/XPEViewer/releases How to run: https://github.com/horsicq/XPEViewer/blob/master/docs/RUN.md How to build: https://github.com/horsicq/XPEViewer/blob/master/docs/BUILD.md Changelog:...

mac-monitor

🎉 Welcome to "Mac Monitor's" official new home! Mac Monitor is an advanced, stand-alone system monitoring tool tailor-made for macOS security research, malware triage, and system troubleshooting. Leveraging Apple's Endpoint Security ES and System Extension APIs, it collects and enriches system...

Mystikal

Mystikal macOS Initial Access Payload Generator Intended to be used with https://github.com/its-a-feature/Mythic Related Blog Post: https://posts.specterops.io/introducing-mystikal-4fbd2f7ae520 Usage: 1. Install Xcode on build machine Required for Installer Package w/ Installer Plugin 2. Install...

CVE-2026-65400-poc

CVE-2026-65400 — macOS Screen Sharing pre-auth root file read read-only PoC Read-only proof of concept. It demonstrates the authentication bypass by reading a root-only file from a vulnerable host. It writes nothing to the target: no LaunchDaemon, no shell startup file, no crontab, no RCE chain...

SwiftBelt

SwiftBelt About SwiftBelt is a macOS enumerator inspired by @harmjoy's Windows-based Seatbelt enumeration tool. SwiftBelt does not utilize any command line utilities and instead uses Swift code leveraging the Cocoa Framework, Foundation libraries, OSAKit libraries, etc. to perform system...

cypheroth

Cypheroth Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets. Description This is a bash script that automates running cypher queries against Bloodhound data stored in a Neo4j database. I found myself re-running the same...

rtl_433

rtl433 rtl433 despite the name is a generic data receiver, mainly for the 433.92 MHz, 868 MHz SRD, 315 MHz, 345 MHz, and 915 MHz ISM bands. The official source code is in the https://github.com/merbanan/rtl433/ repository. See also a list of software that works with rtl433 in the wiki. For more...

BLACKHAT_USA2022

BLACKHATUSA2022 Just About BLACKHAT USA2022 PDF Public Download in release or this mirror File List, Search what your intersting. ├── BLACKHATUSA2022 │ ├── Taking Kerberos To The Next Level.pdf │ ├── US-22-ABDELLATIF-Unlimited-Results-Breaking-Firmware-Encryption.pdf │ ├──...

SigDigger

SigDigger - The free digital signal analyzer SigDigger is a free digital signal analyzer for GNU/Linux and macOS, designed to extract information of unknown radio signals. It supports a variety of SDR devices through SoapySDR, and allows adjustable demodulation of FSK, PSK and ASK signals, decode...

POC-for-CVE-2023-41993

CVE-2023-41993 PoC exploit for CVE-2023-41993. It's written only up to addrof/fakeobj. Reliability is not great. If you want to make it better, try to spray structure IDs. POC link https://po6ix.github.io/POC-for-CVE-2023-41993/pwn.html I have decided to host with github pages from multiple...

aftermath

About Aftermath is a Swift-based, open-source incident response framework. Aftermath can be leveraged by defenders in order to collect and subsequently analyze the data from the compromised host. Aftermath can be deployed from an MDM ideally, but it can also run independently from the infected...

sudo_patch_CVE-2025-32463

sudopatchCVE-2025-32463 Mr.CIA's manual patching guide for CVE-2025-32463 Sudo local privilege escalation tested on Kali Linux and Ubuntu WSL. CVE-2025-32463 Sudo Patch Guide 🛡️ Eish, CVE-2025-32463 is a nasty local privilege escalation flaw CVSS 9.3 in Sudo 1.9.14–1.9.17, exploitable via the...

netwatch

NetWatch Network diagnostics in your terminal. netwatch --view dense. Four boxes, no chrome, every keybind on a border. Download grows up from the axis, upload grows down. One binary, no config. sudo netwatch and you have live capture with L7 decode, process attribution where available, and a...