GoAWSConsoleSpray

GoAWSConsoleSpray GoAWSConsoleSpray is a tool that can be used to spray AWS IAM Console Credentials in order to identify a valid login for a user account. The AWS CLI does not have a way to authenticate via username/password, only the online web console. While most organizations should enforce...

scalpel

As of 6/27/2013 Scalpel has been released under the Apache 2.0 License and the source is available at The Sleuth Kit github repository. It is not being actively maintained. The Autopsy team started to do work on it to integrate tightly into via Java/JNI bindings, but ran into several memory leaks...

privacybadger

Privacy Badger Privacy Badger is a browser extension that automatically learns to block hidden trackers. Privacy Badger is made by the leading digital rights nonprofit EFF to stop companies from spying on you. Privacy Badger sends the Global Privacy Control signal to opt you out of data sharing a...

tsunami-security-scanner

Tsunami Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence. To learn more about Tsunami, visit our documentation. Tsunami relies heavily on its plugin system to provide basic scanning capabilities...

cisco-ios-xe-implant-scanner

Cisco IOS XE Implant Scanner On October 23, 2023, with all implants no longer responding to requests to /webui/logoutconfirm.html, Fox-IT developed a new way to determine if a system is compromised or not. In particular, instead of responding to requests with a redirect to the login, the attacker...

stagefright-cve-2015-3864

stagefright-cve-2015-3864 PoC - Binary patches for CVE-2015-3864 NOT for production, use at your own risk...

CVE-2026-23552

CVE-2026-23552 - Cross-Realm Token Acceptance in camel-keycloak Overview Apache Camel's KeycloakSecurityPolicy does not validate the iss issuer claim of JWT tokens against the configured realm. This means a token issued by one Keycloak realm is silently accepted by a policy configured for a...

iGPU-Leak

CVE-2019-14615: The iGPU-Leak Vulnerability Wenjian He, Wei Zhang, Sharad Sinha and Sanjeev Das. iGPU Leak: An Information Leakage Vulnerability on Intel Integrated GPU. In Proceedings of the 25th Asia and South Pacific Design Automation Conference ASP-DAC'20. View PDF View Slides What happened? ...

tor-router

TOR Router Tor Router allow you to use TOR as a transparent proxy and send all your trafic under TOR INCLUDING DNS REQUESTS , the only that you need is: a system using systemd if you want to use the service and tor. TOR router doesn't touch system files as the rest of tools for routing your taffi...

not-going-anywhere

Overview Not Go-ing Anywhere is a set of vulnerable Golang programs meant to show common vulnerabilities and provide a test bed for users to find, fix, and remediate Golang vulnerabilities. It is modeled on our not so smart contracts repository, and includes a mix of two types of programs: a...

APTSimulator

APT Simulator Important: Don't just ZIP download or clone the repo if you don't plan to develop some test. Use the package in the release which contains a packaged version with encrypted archives that don't contain cleartext samples and tools. APT Simulator is a Windows Batch script that uses a s...

zap-api-rust

ZAP Rust API The Rust implementation to access the ZAP API. For more information about ZAP consult the main ZAP project. This project is at a very early stage and should not be used in production! Getting Help For help using ZAP API refer to: Examples - collection of examples using the library;...

CVE-2022-2466---Request-Context-not-terminated-with-GraphQL

CVE-2022-2466 Request-Context-not-terminated-with-GraphQL How to run 1. run mvn:quarkus:dev 2. run the following http requests RUN THIS TWICE POST http://localhost:8080/graphql Content-Type: application/graphql Authorization: Bearer...

node-ip-vex

node-ip-vex This sample project depends on the node-ip npm package which is vulnerable to CVE-2024-29415. However, because our project does not directly use the vulnerable function .isPublic, it is not exploitable to CVE-2024-29415. Run an analysis with Docker Scout I can package my project as a...

CVE-2026-126358 Hono: RegExpRouter skips wildcard middleware for some route sets and for paths with an encoded line terminator

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.1.4 until 4.13.16, RegExpRouter can omit wildcard middleware in three version-specific cases: since 4.13.0, middleware using the explicit default parameter pattern in /api/:tenant^/+/admin/ is not applied...

CVE-2026-126358

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.1.4 until 4.13.16, RegExpRouter can omit wildcard middleware in three version-specific cases: since 4.13.0, middleware using the explicit default parameter pattern in /api/:tenant^/+/admin/ is not applied...

DEBIAN-CVE-2026-116318

SQL injection in PostgreSQL pgdump allows an object creator to execute arbitrary SQL as the user restoring the dump, via an inherited column having a child-local not-null constraint whose name requires quoting. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions...

ALPINE-CVE-2026-116318

SQL injection in PostgreSQL pgdump allows an object creator to execute arbitrary SQL as the user restoring the dump, via an inherited column having a child-local not-null constraint whose name requires quoting. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions...

CVE-2026-116318

SQL injection in PostgreSQL pgdump allows an object creator to execute arbitrary SQL as the user restoring the dump, via an inherited column having a child-local not-null constraint whose name requires quoting. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions...

EUVD-2026-124498

SQL injection in PostgreSQL pgdump allows an object creator to execute arbitrary SQL as the user restoring the dump, via an inherited column having a child-local not-null constraint whose name requires quoting. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions...