gemma_crackme_tutorial

Использование локальной модели ИИ Google Gemma 4 E4B для реверс-инжиниринга простого Crackme Я экспериментировал с новой моделью с открытыми весами Gemma E4B, которую выпустила Google, и к моему удивлению, она показала отличные результаты в сценариях локального офлайн-реверс-инжиниринга. Я решил...

ADFT

ADFT v1.0 ADFT est un toolkit d’investigation offline pour environnements Active Directory / Windows avec GUI locale intégrée. Cette release officielle publie une seule surface produit cohérente : le moteur ADFT la CLI la GUI intégrée servie par le backend ADFT ingère des preuves exportées,...

PatchaPalooza

PatchaPalooza patchapalooza.com — la version interactive est en ligne ! Cet outil CLI a été remplacé par patchapalooza.com , un site web interactif complet pour explorer et analyser les données du Patch Tuesday de Microsoft. Il couvre tout ce que cet outil fait — et bien plus encore. Rendez-vous...

CacheData_decrypt

CacheDatadecrypt Простой набор инструментов для перебора BF и дешифрования CacheData в Windows EntraId. usage: decryptcachedata.py -h pin,password ... CacheData bruteforcer. On a live windows host, to copy the folders with all subfolders and files: xcopy /H /E /G /C as SYSTEM. The script will...

BloodBash

BloodBash Открытый проект SquidSec SquidOffense.com · GitHub BloodBash — это открытый офлайн-анализатор JSON-файлов SharpHound и AzureHound, созданный и поддерживаемый SquidSec. Он строит граф, выявляет пути атак и ошибки конфигурации в AD/Entra и выводит приоритизированные находки. Neo4j или...

regipy

regipy ⚠️ Changements majeurs dans la v6.0.0 La version 6.0.0 inclut des changements de modernisation importants : Python 3.9+ requis - Abandon du support de Python 3.6, 3.7 et 3.8 Bibliothèqueattrs supprimée - Les classes de données utilisent désormais le module dataclasses intégré à Python Si...

Shenron

Shenron 日本語版 README Shenron is a passive Rus...

A Prompt-Based Framework for Loop Vulnerability Detection Using Local LLMs

Loop vulnerabilities are one major risky construct in software development. They can easily lead to infinite loops or executions, exhaust resources, or introduce logical errors that degrade performance and compromise security. The problem are often undetected by traditional static analyzers becau...

EUVD-2024-46501

Malicious code in bioql PyPI...

CVE-2024-5264 Network Key Transfer with AES KHT vulnerability in Luna EFT

Network Transfer with AES KHT in Thales Luna EFT 2.1 and above allows a user with administrative console access to access backups taken via offline analysis...

CVE-2024-5264 Network Key Transfer with AES KHT vulnerability in Luna EFT

Network Transfer with AES KHT in Thales Luna EFT 2.1 and above allows a user with administrative console access to access backups taken via offline analysis...

CVE-2024-5264

CVE-2024-5264 concerns Thales Luna EFT 2.1 and newer, where a user with administrative console access can access backups taken via offline analysis due to a vulnerability in the network transfer using AES Key History Transport. The available documents state the affected product and the underlying...

CVE-2024-5264: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Network Transfer with AES KHT in Thales Luna EFT 2.1 and above allows a user with administrative console access to access backups taken via offline analysis...

Windows Process Memory Dump

This module creates a memory dump of a process to disk and downloads the file for offline analysis. Options for DUMPTYPE affect the completeness of the dump: "full" retrieves the entire process address space all allocated pages; "standard" excludes image files e.g. DLLs and EXEs in the address...

Downloading entire Vulners.com database in 5 minutes

Today I once again would like to talk about Vulners.com and why, in my opinion, it is the best vulnerability database that exist nowadays and a real game-changer. The main thing is transparency. Using Vulners you not only can search for security content see "Vulners – Google for hacker", but...

[NetworkMiner v1.4.1] Network Forensic Analysis Tool (NFAT)

NetworkMiner is a Network Forensic Analysis Tool NFAT for Windows but also works in Linux / Mac OS X / FreeBSD. NetworkMiner can be used as a passive network sniffer/packet capturing tool in order to detect operating systems, sessions, hostnames, open ports etc. without putting any traffic on the...

[NetSleuth] Open source Network Forensics And Analysis Tools

NetSleuth identifies and fingerprints network devices by silent network monitoring or by processing data from PCAP files. NetSleuth is an opensource network forensics and analysis tool, designed for triage in incident response situations. It can identify and fingerprint network hosts and devices...