imago-forensics

imago-forensics 🕵️ Imago is a python tool that extract digital evidences from images recursively. This tool is useful throughout a digital forensic investigation. If you need to extract digital evidences and you have a lot of images, through this tool you will be able to compare them easily. Imago...

reverse-skill

reverse-skill Cybersecurity Skills Router · 逆向技能路由包 Navigate the dark waters, sail against the stream. About · Getting Started · Usage · Routing · AI Bootstrap · Contributing 🌐 中文 About If you are an AI Agent, jump toREADMEAI.md and follow the instructions strictly. When an AI agent Claude Code,...

HexRaysCodeXplorer

| | | | | \ / \ | | \ \ / / | | | || | | |/ / | / / | | \ V / | | | |/ \ / / // | | | / | | / \ / |/ / | ' | |/ | '/ \ '| | | | | / | |\ \ | | || \ \ /\ | | | / /^\ \ | | | | | | / | | |///\| \,|, |/// ,|\/ / ./||/|| || / | | | |/ ||...

wuzz

wuzz Interactive cli tool for HTTP inspection. Wuzz command line arguments are similar to cURL's arguments, so it can be used to inspect/modify requests copied from the browser's network inspector with the "copy as cURL" feature. Installation and usage GO $ go get github.com/asciimoo/wuzz $...

RedGridLink

Red Grid Link Red Grid Link is retired Retired September 27, 2026. v1.7.0 is the final release. Link has been removed from sale on the App Store and unpublished on Google Play. New subscriptions and lifetime purchases are no longer offered. Existing installations: Retirement does not erase local...

findyara-ida

FindYara Use this IDA python plugin to scan your binary with yara rules. All the yara rule matches will be listed with their offset so you can quickly jump to them! 🍻 All credit for this plugin and the code goes to David Berard @p0ly 🍻 This plugin is copied from David's excellent findcrypt-yara...

CVE-2026-49906

An unprivileged application can bypass the android.car.permission.CARDISPLAYINCLUSTER permission by registering an activity with the android.car.cluster.NAVIGATION category and requesting navigation app focus. The privileged ClusterHomeSample application, acting as a confused deputy, resolves and...

reflector

reflector Description Burp Suite extension is able to find reflected XSS on page in real-time while browsing on web-site and include some features as: Highlighting of reflection in the response tab. Test which symbols is allowed in this reflection. Analyze of reflection context. Content-Type...

CVE-2026-118008

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Navigation component Mitigation --- CME Mitigation Guidance 2026-11-02 --- Disclaimer: The following mitigation solutions are provided as a...

firefox: thunderbird: Sandbox escape in the DOM: Navigation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the DOM: Navigation component...

firefox: Privilege escalation in the DOM: Navigation component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Navigation component...

CVE-2023-36884-Checker

CVE-2023-36884-Checker Script to check for CVE-2023-36884 hardening https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36884 Goal This scripts checks if Microsoft hardening recommendations are properly applied. Microsoft says...

ARC-Browser-Address-Bar-Spoofing-PoC

ARC Browser Address Bar Spoofing - iOS/iPadOS CVE-2024-25733 ARC Browser Address Bar Spoofing PoC - iOS/iPadOS Exploit PoC Proof of Concept function spoof setTimeout = window.stop; let randomPort; do randomPort = Math.floorMath.random 1000; while randomPort === 0 || randomPort === 443;...

study-turbolinks-link

JavaScript Usage https://github.com/turbolinks/turbolinksapi-reference Turbolinks.visit'/home/two' // default is advance. Turbolinks.visit'/home/two', action: 'advance' Turbolinks.visit'/home/two', action: 'replace'...

CyberStrikeAI

English Documentation Documentation home | 中文 Choose a path Try locally : Deployment → Configuration → Troubleshooting Run in production : Configuration Profiles → Security Hardening → Runbooks → Audit and Monitoring Integrate and automate : API Reference → API Recipes → MCP Federation Contribute...

CVE-2025-22131-PoC

CVE-2025-22131-PoC PoC for CVE-2025-22131 PhpSpreadsheet is a library written in pure PHP and offers a set of classes that allow you to read and write various spreadsheet file formats such as Excel and LibreOffice Calc. phpspreadsheet version =2.2.0, =2.0.0, =3.0.0, sheetIndex === null $sheets =...

CLEANSTART-2024-WI98059 When scanning QR codes, Firefox for Android would have allowed navigation to some URLs that do not point to web content

Security vulnerability affects the librewolf package. When scanning QR codes, Firefox for Android would have allowed navigation to some URLs that do not point to web content...

CLEANSTART-2024-WV61153 Use after free in Navigation in Google Chrome prior to 88

Security vulnerability affects the qt5-qtwebengine package. Use after free in Navigation in Google Chrome prior to 88...

CLEANSTART-2024-TT80905 Inappropriate implementation in Navigation in Google Chrome prior to 97

Security vulnerability affects the qt5-qtwebengine package. Inappropriate implementation in Navigation in Google Chrome prior to 97...

CLEANSTART-2024-RY12086 Use after free in Navigation in Google Chrome prior to 113

Security vulnerability affects the qt5-qtwebengine package. Use after free in Navigation in Google Chrome prior to 113...