HexRaysCodeXplorer

root@kitploit: | | | | | \ / \ | | \ \ / / | | | || | | |/ / | / / | | \ V / | | | |/ \ / / // | | | / | | / \ / |/ / | ' | |/ | '/ \ '| | | | | / | |\ \ | | || \ \ /\ | | | / /^\ \ | | | | | | / | | |///\| \,|, |/// ,|\/ / ./||/|| || / | | | |/ ||...

RedGridLink

Red Grid Link 面向小团队（2-8人）的离线 MGRS 导航与近距团队协作工具。无需蜂窝网络。 基于 Red Grid MGRS 的 MGRS 引擎构建。Field Link 通过蓝牙提供零配置近距同步，并在 iOS 上利用 Apple Multipeer Connectivity、Android 上利用 Google Play Services Nearby Connections 作为并行的高带宽传输通道——团队成员进入范围即出现在地图上。 独自导航？ Red Grid MGRS 为您提供独立的 MGRS 引擎，具备 DAGR 级精度、9 种战术工具和 6...

ida_ifl

IFL - Lista interactiva de funciones Licencia: CC-BY https://creativecommons.org/licenses/by/3.0/ Un pequeño plugin cuyo objetivo es proporcionar una forma fácil de navegar entre funciones y sus referencias. Además, permite importar informes generados por, por ejemplo, PE-sieve en IDA. Soporta:...

wuzz

wuzz Interactive cli tool for HTTP inspection. Wuzz command line arguments are similar to cURL's arguments, so it can be used to inspect/modify requests copied from the browser's network inspector with the "copy as cURL" feature. Installation and usage GO root@kitploit: $ go get...

ARC-Browser-Address-Bar-Spoofing-PoC

ARC 浏览器地址栏欺骗 - iOS/iPadOS CVE-2024-25733 ARC 浏览器地址栏欺骗 PoC - iOS/iPadOS 漏洞利用 PoC（概念验证） root@kitploit: function spoof setTimeout = window.stop; let randomPort; do randomPort = Math.floorMath.random 1000; while randomPort === 0 || randomPort === 443; document.location = "https://google.com:" +...

imago-forensics

imago-forensics 🕵️ Imago is a python tool that extract digital evidences from images recursively. This tool is useful throughout a digital forensic investigation. If you need to extract digital evidences and you have a lot of images, through this tool you will be able to compare them easily. Imago...

reverse-skill

reverse-skill Cybersecurity Skills Router · 逆向技能路由包 Navigate the dark waters, sail against the stream. About · Getting Started · Usage · Fast route · Routing · Ops contracts · AI Bootstrap · Sponsors · Contributing 🌐 中文 About If you are an AI Agent, jump toREADMEAI.md and follow the instructions...

WebKit-NavigationAPI-SOP-Bypass

WebKit-NavigationAPI-SOP-Bypass WebKit 导航 API — 通过跨端口拦截绕过同源策略（CVE-2026-20643） | ---|--- CVE| CVE-2026-20643 发现者| Thomas Espach WebKit Bugzilla 306050 组件| WebKit — WebCore::Navigation::innerDispatchNavigateEvent 受影响版本| iOS 26.3.1 build 23D8133 iPhone18,2 类型| SOP 绕过 交互方式| 点击 / 链接激活 确认方式| 对存在漏洞与已修补的...

findyara-ida

FindYara 使用这个IDA Python插件扫描二进制文件中的Yara规则。所有匹配的Yara规则将与其偏移量一起列出，以便您快速跳转到它们！ 🍻 本插件及代码的所有功劳归于David Berard @p0ly 🍻 本插件复制自David出色的findcrypt-yara插件。本插件只是扩展了他的工作，以支持使用任何Yara规则。 使用FindYara...

reflector

reflector Description Burp Suite extension is able to find reflected XSS on page in real-time while browsing on web-site and include some features as: Highlighting of reflection in the response tab. Test which symbols is allowed in this reflection. Analyze of reflection context. Content-Type...

CVE-2025-22131-PoC

CVE-2025-22131-PoC CVE-2025-22131 的 PoC（概念验证） PhpSpreadsheet 是一个用纯 PHP 编写的库，提供了一组类，允许您读取和写入各种电子表格文件格式，如 Excel 和 LibreOffice Calc。 phpspreadsheet 版本 =2.2.0, =2.0.0, =3.0.0, sheetIndex === null $sheets = $this-spreadsheet-getAllSheets; else $sheets = $this-spreadsheet-getSheet$this-sheetIndex; //...

Fuel CMS 1.4.7 - SQL Injection

FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items. id: CVE-2020-17463 info: name: Fuel CMS 1.4.7 - SQL Injection author: Thirukrishnan severity: critical description: | FUEL CMS 1.4.7 allows SQL Injection via the col parameter to...

CVE-2026-95813

The software e621ng (versions before 26.09.16 ) is vulnerable to an Open Redirect due to the improper handling of untrusted request parameters. Specifically, the PaginatorComponent and controller navigation links pass these parameters directly to the Rails url_for function. An attacker can provid...

MAL-2026-16505 Malicious code in @client-web-next/navigation-link (npm)

--- -= Per source details. Do not edit below this line.=-...

firefox: thunderbird: Use-after-free in the DOM: Navigation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Navigation component...

CVE-2026-84136

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Other issue in the DOM: Navigation component...

firefox: thunderbird: Use-after-free in the DOM: Navigation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Navigation component...

CyberStrikeAI

CyberStrikeAI 中文 | English The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next. CyberStrikeAI connects planning, execution, human oversight, evidence, and replay in one auditable...

OESA-2026-3982 thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and...

CVE-2023-26255-6

Jira plugin STAGIL Navigation FileName参数的任意文件读取漏洞POC脚本 使用方法如下: 单一URL检测 1、通过命令行界面去检测单个的URL地址，使用-U参数传递URL参数 2、观察返回的结果,如果显示is vulnerable!说明这个URL中存在这个漏洞，否则表示漏洞不存在 批量URL检测 1、可以将利用FOFA搜索到的资产或者说想要测试的URL放入到任意的TXT文件中 2、通过命令行界面去调用存储着URL的TXT文件，使用-U参数对文件中的URL进行批量的扫描 3、观察返回的结果,如果显示is...