nfcgate

NFCGate ⚠️NFCGate is currently being falsely detected as "NGate" malware. Please seethis issue for up-to-date information.⚠️ NFCGate is an Android application meant to capture, analyze, or modify NFC traffic. It can be used as a researching tool to reverse engineer protocols or assess the security...

SteganographierGUI

SteganographierGUI Скрытие файлов в MP4/MKV-файлах Пожалуйста, убедитесь, что вы понимаете значение слова «расширение файла », прежде чем смотреть следующий урок. Если не понимаете, сначала поищите «как изменить расширение файла» Если после изменения расширение всё ещё MP4, значит, у вас не включ...

piraterf

🏴‍☠️ PIrateRF - ソフトウェア定義無線送信プラットフォーム PIrateRF は、Raspberry Pi Zero W をポータブルRF信号発生器に変え、独自のWiFiホットスポットを生成します。FM放送からデジタルモードまで、ブラウザからすべてを制御できます。どこからでも電波をハックしましょう！ 📡⚡ 🎬 PIrateRFプロモーションビデオはこちら 📺 PIrateRFデモビデオはこちら ⚠️ 法的通知...

crypto_identifier

crypto-identifier 펜테스트 및 CTF를 위한 암호화 도구: 여러 알고리즘과 블록 체인 모드를 사용하여 데이터를 해독합니다. 알 수 없는 암호문 및 키 사전에 대한 빠른 확인에 유용합니다. 지원되는 알고리즘: AES ARC2 ARC4 Blowfish CAST DES DES3 XOR 지원되는 모드: ECB CBC CFB OFB 사용법: python ./cryptoidentifier.py --help usage: cryptoidentifier.py -h --input INPUT --key KEY --keys KEYS...

keystone

Keystone Engine Keystone is a lightweight multi-platform, multi-architecture assembler framework. It offers some unparalleled features: Multi-architecture, with support for Arm, Arm64 AArch64/Armv8, Ethereum Virtual Machine, Hexagon, Mips, PowerPC, RISC-V, Sparc, SystemZ & X86 include 16/32/64bit...

graphql-cop

GraphQL Cop - Security Audit Utility for GraphQL About GraphQL Cop is a small Python utility to run common security tests against GraphQL APIs. GraphQL Cop is perfect for running CI/CD checks in GraphQL. It is lightweight, and covers interesting security issues in GraphQL. GraphQL Cop allows you ...

Pummel

██████╗ ██╗ ██╗███╗ ███╗███╗ ███╗███████╗██╗ ██╔══██╗██║ ██║████╗ ████║████╗ ████║██╔════╝██║ ██████╔╝██║ ██║██╔████╔██║██╔████╔██║█████╗ ██║ ██╔═══╝ ██║ ██║██║╚██╔╝██║██║╚██╔╝██║██╔══╝ ██║ ██║ ╚██████╔╝██║ ╚═╝ ██║██║ ╚═╝ ██║███████╗███████╗ ╚═╝ ╚═════╝ ╚═╝ ╚═╝╚═╝ ╚═╝╚══════╝╚══════╝ 면책 사항: 이 도구는...

password_generator

PassForge - 올인원 비밀번호 생성기 CLI 프로덕션 준비 완료, 암호학적으로 안전한 비밀번호 생성기 CLI로, 17가지 생성 모드, 엔트로피 투명성 및 포괄적인 사용자 정의 옵션을 제공합니다. 기능 17가지 생성 모드 생성기| 명령어| 설명 ---|---|--- 랜덤| random, r| 암호학적으로 안전한 무작위 문자 비밀번호 패스프레이즈| phrase, p| EFF 단어 목록을 사용한 단어 기반 패스프레이즈 리트스피크| leet, l| 문자 치환A→4, E→3 등이 적용된 패스프레이즈 PIN| pin| 구성 가능한...

m4ngl3m3

m4ngl3m3! 빠른 설치: $ git clone https://github.com/localh0t/m4ngl3m3 $ cd m4ngl3m3 $ ./main.py 기본 도움말: usage: main.py -h -fy FROMYEAR -ty TOYEAR -sy -nf NUMBERSFILE -sf SYMBOLSFILE -cf CUSTOMFILE -sbs -sap -mm MUTATIONMETHODS MUTATIONMODE STRINGSFILE OUTPUTFILE Common password pattern generator usin...

toothpicker

ToothPicker ToothPicker is an in-process, coverage-guided fuzzer for iOS. It was developed to specifically targets iOS's Bluetooth daemon bluetoothd and to analyze various Bluetooth protocols on iOS. As it is built using FRIDA, it can be adapted to target any platform that runs FRIDA. This...

bad_ducky

Bad Ducky 개요 Bad Ducky는 또 다른 Rubber Ducky 클론입니다. 내장 카드 리더기가 있는 CJMCU BadUsb ATMEGA32u4 - Arduino Leonardo 클론 보드를 기반으로 하며, eBay나 알리익스프레스에서 구매할 수 있습니다. 제 목표는 Rubber Ducky 스크립트와 호환되면서도 하드웨어를 수정하지 않고 DIP 스위치를 추가하지 않고 실행할 스크립트를 쉽게 선택할 수 있는 제품을 만드는 것이었습니다. 이 제품의 특별한 점은 무엇인가요? Rubber Ducky 스크립트와 완전히 호환됩...

bad_ducky

Bad Ducky Summary Bad Ducky is yet another Rubber Ducky clone. It is based on CJMCU BadUsb ATMEGA32u4 - Arduino Leonardo clone board with onboard card reader, which you can buy on ebay or aliexpress. My goal was to create something compatible with Rubber Ducky scripts, while having ability to...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

Next.js_exploit_CVE-2024-34351

csr-rsc-ssg-isr-ssr-ssrf 이 저장소는 하나 이상의 미트업을 발표하기 위한 자료로 사용될 수 있습니다. 과정은 다음과 같습니다... "CSR" Client Side Rendering: 표준 SPA 라이브러리로서의 React "RSC" React Server Components: 오직 서버 측에서만 실행되는 React 컴포넌트 "SSG" Static Site Generation: 빌드 시점에 React 컴포넌트 실행 "ISR" Incremental Static Regeneration: 요청 시 컴포넌트 재생성...

CVE-2026-103601

Release of unverified plaintext in the CCM CcmBlockCipher and DSTU 7624 CCM KCcmBlockCipher AEAD modes in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker to obtain decryptions of ciphertexts of their choosing via forged messages sent to an application that lets th...

CVE-2026-103601

The bc-csharp library by Legion of the Bouncy Castle Inc. (versions before 2.7.0 ) is vulnerable to an issue where unverified plaintext is released in the CCM (CcmBlockCipher ) and DSTU 7624 CCM (KCcmBlockCipher ) AEAD modes. The root cause is that the decryption process writes recovered plaintex...

CVE-2026-103601 CcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag check

Release of unverified plaintext in the CCM CcmBlockCipher and DSTU 7624 CCM KCcmBlockCipher AEAD modes in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker to obtain decryptions of ciphertexts of their choosing via forged messages sent to an application that lets th...

PT-2026-104122

Release of unverified plaintext in the CCM CcmBlockCipher and DSTU 7624 CCM KCcmBlockCipher AEAD modes in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker to obtain decryptions of ciphertexts of their choosing via forged messages sent to an application that lets th...

Webform - Less critical - Access bypass - SA-CONTRIB-2026-173

The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. The module did not sufficiently restrict access to certain submission view modes. Under certain conditions, a user who can view a submission could access a more...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/modes: It is necessary to avoid division by zero more effectively in drmmodevrefresh. The drmmodevrefresh function attempts to avoid division by zero by checking whether htotal or vtotal is zero. However, we may still end ...