nfcgate

NFCGate ⚠️NFCGate is currently being falsely detected as "NGate" malware. Please seethis issue for up-to-date information.⚠️ NFCGate is an Android application meant to capture, analyze, or modify NFC traffic. It can be used as a researching tool to reverse engineer protocols or assess the security...

graphql-cop

GraphQL Cop - Security Audit Utility for GraphQL About GraphQL Cop is a small Python utility to run common security tests against GraphQL APIs. GraphQL Cop is perfect for running CI/CD checks in GraphQL. It is lightweight, and covers interesting security issues in GraphQL. GraphQL Cop allows you ...

piraterf

gosmopolitan English 用 gosmopolitan 检查你的 Go 代码库里有没有国际化（“i18n“）或者本地化（”l10n“）的阻碍。 项目名字来自“cosmopolitan”的文字游戏。 检查 gosmopolitan 目前会检查以下的反模式（anti-patterns）： 含有来自特定书写系统字符的字符串字面量（string literals）。 项目中存在这种字符串，通常意味着相关的逻辑不便于国际化，或者至少在国际化/本地化适配过程中会涉及特殊对待。 time.Local 的使用。...

SteganographierGUI

SteganographierGUI 将文件隐写进MP4/MKV文件中 请确保在理解“后缀名 ”这个词含义的前提下观看以下教程，如不理解，请首先搜索“如何改后缀名” 如果改了后缀还是为 MP4 ，那说明没有开启后缀名显示，请依然搜索上述内容 解压不了|怎么是视频|密码错误|文件损坏|需要分卷|等 改 MP4 后缀为 .zip 用 WinRAR 解压 改 MP4 后缀为 .zip 用 WinRAR 解压 改 MP4 后缀为 .zip 用 WinRAR 解压 隐写者简要用法说明 本软件可以把文件或文件夹变成压缩包后“藏”进 MP4/MKV...

m4ngl3m3

m4ngl3m3! 快速安装： $ git clone https://github.com/localh0t/m4ngl3m3 $ cd m4ngl3m3 $ ./main.py 基本帮助： usage: main.py -h -fy FROMYEAR -ty TOYEAR -sy -nf NUMBERSFILE -sf SYMBOLSFILE -cf CUSTOMFILE -sbs -sap -mm MUTATIONMETHODS MUTATIONMODE STRINGSFILE OUTPUTFILE 通用密码模式生成器，基于字符串列表 positional arguments:...

keystone

Keystone Engine Keystone is a lightweight multi-platform, multi-architecture assembler framework. It offers some unparalleled features: Multi-architecture, with support for Arm, Arm64 AArch64/Armv8, Ethereum Virtual Machine, Hexagon, Mips, PowerPC, RISC-V, Sparc, SystemZ & X86 include 16/32/64bit...

toothpicker

ToothPicker ToothPicker is an in-process, coverage-guided fuzzer for iOS. It was developed to specifically targets iOS's Bluetooth daemon bluetoothd and to analyze various Bluetooth protocols on iOS. As it is built using FRIDA, it can be adapted to target any platform that runs FRIDA. This...

crypto_identifier

crypto-identifier Herramienta criptográfica para pentest y ctf: intenta descifrar datos usando múltiples algoritmos y modos de encadenamiento de bloques. Útil para una verificación rápida de texto cifrado desconocido y diccionario de claves. Algoritmos soportados: AES ARC2 ARC4 Blowfish CAST DES...

password_generator

PassForge - 全功能密码生成器 CLI 一个生产就绪、密码学安全的密码生成器命令行工具，提供17种生成模式、熵透明度和全面的自定义选项。 功能特性 17种生成模式 生成器| 命令| 说明 ---|---|--- 随机| random, r| 密码学安全的随机字符密码 口令短语| phrase, p| 基于单词的口令短语（使用EFF词表） Leetspeak| leet, l| 字符替换的口令短语（A→4，E→3等） PIN码| pin| 可配置长度的数字PIN码 可读音| pronounce, pr| 易于发音的基于音节的密码 UUID| uuid, u| RFC...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

bad_ducky

Bad Ducky 概述 Bad Ducky 是另一个 Rubber Ducky 克隆。它基于 CJMCU BadUsb（ATMEGA32u4 - Arduino Leonardo 克隆）板，带有板载读卡器，你可以在 eBay 或 aliexpress 上购买。我的目标是创建一个与 Rubber Ducky 脚本兼容，同时能够轻松选择要执行的脚本而无需修改硬件（无需添加 DIP 开关）的东西。 这个有什么特别之处？ 完全兼容 Rubber Ducky 脚本（支持所有命令） 脚本无需编译/编码 有效载荷大小无限制（唯一限制是 SD 卡大小） 它有两种操作模式（连续交付和一次性交付）...

bad_ducky

Bad Ducky Summary Bad Ducky is yet another Rubber Ducky clone. It is based on CJMCU BadUsb ATMEGA32u4 - Arduino Leonardo clone board with onboard card reader, which you can buy on ebay or aliexpress. My goal was to create something compatible with Rubber Ducky scripts, while having ability to...

Pummel

██████╗ ██╗ ██╗███╗ ███╗███╗ ███╗███████╗██╗ ██╔══██╗██║ ██║████╗ ████║████╗ ████║██╔════╝██║ ██████╔╝██║ ██║██╔████╔██║██╔████╔██║█████╗ ██║ ██╔═══╝ ██║ ██║██║╚██╔╝██║██║╚██╔╝██║██╔══╝ ██║ ██║ ╚██████╔╝██║ ╚═╝ ██║██║ ╚═╝ ██║███████╗███████╗ ╚═╝ ╚═════╝ ╚═╝ ╚═╝╚═╝ ╚═╝╚══════╝╚══════╝ 免责声明：...

Next.js_exploit_CVE-2024-34351

csr-rsc-ssg-isr-ssr-ssrf Este repositorio puede servir como soporte para presentar uno o varios meetups. El recorrido es el siguiente... "CSR" Client Side Rendering: React como librería SPA estándar "RSC" React Server Components: ejecución de componentes React únicamente del lado del servidor "SS...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fixed a null pointer dereference in nouveauconnectorgetmodes. In nouveauconnectorgetmodes, the return value of drmmodeduplicate is assigned to mode, which may lead to a NULL pointer dereference in case of a failure i...

Astra Linux – Vulnerability in OpenSSL

There exists a timing-based side channel in the OpenSSL RSA Decryption implementation. This vulnerability could be sufficient for an attacker to recover plaintext across a network in a Bleichenbacher-style attack. To successfully decrypt data, an attacker would need to be able to send a very larg...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/client: The modes array contains pointers to modes in the connector’s mode lists, which are protected by dev-modeconfig.mutex. Therefore, we need to extend the protection for modes at the same time; otherwise, by the time we...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: drm/imx: Fixed a memory leak in imxpdconnectorgetmodes. Avoid leaking the display mode variable if ofgetdrmdisplaymode fails. Addressing-Coverity-ID: 1443943 "Resource leak"...

libkcapi: IV reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries

A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...

libkcapi: IV reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries

A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...