screenscrub

screenscrub 在截图中查找凭据，将其提取到密钥管理器，并不可逆转地将它们从图像中隐去——这样秘密就不会在你的笔记、截图和 /Desktop 中腐烂。 本地。离线。静默。默认无网络、无遥测。 screenscrub 连接了两个现有的工具类别：GUI 隐去工具（Xnapper、Shhshot、macshot）手动模糊 PII，但无法区分秘密与地址，也无法捕捉它们隐藏的内容；秘密扫描器（gitleaks、TruffleHog）能发现真实的凭据，但仅限于文本，从未出现在 PNG 中。screenscrub 将 gitleaks...

RAGSieve

RAGSieve Code for RAGSieve: Detecting Knowledge-Poisoned Documents in RAG Without a Trusted Reference. RAGSieve detects knowledge-poisoning documents at two points in a retrieval-augmented generation RAG system. RSQ is an online filter: it scores the five documents selected for generation against...

CVE-2026-11116-SNMPv3-Authentication-Bypass-via-Default-EngineID

CVE-2026-11116 – Bypass de autenticación SNMPv3 mediante EngineID predeterminado Código del programa Python con pysnmp snmpagentsim.py - SNMPv3 agent using well-known EngineID from pysnmp.hlapi import def snmpgetengineid=SnmpEngineIDhexValue='8000000001020304': iterator = getCmd...

GTFOBLookup

GTFOBLookup Utilidad de consulta de línea de comandos sin conexión para GTFOBins, LOLBAS, WADComs y HijackLibs. Archivos .gitignore : Archivo Gitignore gtfoblookup.1 : Página de manual de Linux para GTFOBLookup gtfoblookup.py : Utilidad GTFOBLookup LICENSE.md : Archivo de licencia README.md : Est...

CacheData_decrypt

CacheDatadecrypt Un simple kit de herramientas para hacer fuerza bruta y descifrar el CacheData de Windows EntraId. usage: decryptcachedata.py -h pin,password ... CacheData bruteforcer. On a live windows host, to copy the folders with all subfolders and files: xcopy /H /E /G /C as SYSTEM. The...

soc-analyst-hub

🛡️ SOC分析师中心 — 一级工具包 一款免费、完全离线的交互式工具包，专为一级SOC分析师打造 — 涵盖事件响应、告警分类、威胁狩猎及分析师入职培训。零依赖。单个HTML文件。可在任意浏览器中打开。 🚀 在线演示 → 📦 内含内容 ⚡ 事件响应检查清单 针对最常见事件类型的逐步交互式检查清单。边工作边勾选步骤 — 进度自动保存。 钓鱼邮件调查（12步） 恶意软件/端点失陷（12步） 暴力破解/凭据攻击（12步） 数据泄露告警（12步） 可疑PowerShell活动（12步） 🔍 告警分类手册 决策树流程，用于评估、分类和升级告警 — 包含是/否分支逻辑和清晰的升级阈值。 大量登录失败...

thymeleaf-check

thymeleaf-check ThymeleafCVE-2026-40477 / CVE-2026-41901 offline triage tool — zero dependencies, single jar, no network. Two CVSS 9.0 SSTI bypasses, with two fixed releases shipped within nine days. It first answers "which of these am I affected by," then answers the harder question: On my versi...

tomcat85-check

tomcat85-check Still running Tomcat 8.5? This tool tells you exactly which 2025 CVEs you're affected by — because on this question, you can't get a complete answer from the official page, NVD, or scanners. Zero-dependency single jar, runs offline, no network, uploads nothing. What it solves Tomca...

netty-http-check

netty-http-check Offline checker for 23io.netty:netty-codec-http advisories 2025–2026 — the 14 CVEs in the GitHub Advisory Database, plus 9 advisories that Netty published on 2026-09-10 only in its own repository, which Dependabot cannot see. It tells you which ones you are actually exposed to, a...

BloodBash

BloodBash A SquidSec Open Source Project SquidOffense.com · GitHub BloodBash is an open source offline SharpHound and AzureHound JSON analyzer, created and managed by SquidSec. It builds a graph, surfaces AD/Entra attack paths and misconfigs, and prints prioritized findings. No Neo4j or BloodHoun...

CVE-2022-25012-dvr4-weak-password-encryption

This is an improved version of the exploit by deathflash1411 Original exploit: https://www.exploit-db.com/exploits/50130 Improved Features Cracked password is now output as reconstructed password string instead of only output character by character The encrypted password string is now entered as ...

httrack

HTTrack Website Copier - Repositorio de desarrollo Acerca de Copia sitios web a tu ordenador navegador offline HTTrack es una utilidad de navegador offline , que te permite descargar un sitio web de Internet a un directorio local, construyendo recursivamente todos los directorios, obteniendo html...

dpapi-toolkit

DPAPI-toolkit Un toolkit offline para evidencia DPAPI de Windows. Recopilas los archivos, apuntas la herramienta a un artefacto, y esta reconoce el formato y te dice exactamente qué clave maestra necesita; tú proporcionas el material de clave y esta descifra. La mayoría de las herramientas DPAPI...

Radmin3-Password-Cracker

Radmin Server 3 Dumper/Cracker Para más contexto sobre esta herramienta, consulte https://www.synacktiv.com/publications/cracking-radmin-server-3-passwords.html ! Cómo usar : Paso 1 : Recupera la información de usuario de Radmin Server 3 de...

appledb_rs

Base de datos de artefactos de Apple Servidor que almacena diversa información sobre los componentes internos de Apple por plataforma/versión. Artefactos almacenados: Ejecutables Entitlements Frameworks Dispositivos Versiones Características principales: Acceso completo mediante llamadas API, CLI...

lumina_server

Acerca de PoC de un servidor fuera de línea para la función Lumina de IDA. Más detalles en https://www.synacktiv.com/publications/investigating-ida-lumina-feature.html Instalación Instalación del paquete Python Descargue el proyecto y ejecute python lumina/setup.py o pip install .. El servidor...

CVE-2026-79901 Predictable Active Directory service-account passwords in BoKS Manager

In deployments using BoKS keytab management, affected versions of bokskeytabmd generate Active Directory service-account passwords from a predictable pseudo-random sequence seeded with the current Unix timestamp. An attacker who knows the service principal and can estimate the password-change tim...

Rocky Linux 8 [CIQ] Security Update: bind-dyndb-ldap / bind-dyndb-ldap-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_3755)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243755 advisory. CVE-2024-2698 freeipa: delegation rules allow a proxy service to impersonate any user to access another target service CVE-2024-3183 freeipa: user can obta...

Rocky Linux 9 [CIQ] Security Update: ipa-client / ipa-client-common / ipa-client-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_3754)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243754 advisory. freeipa: delegation rules allow a proxy service to impersonate any user to access another target service CVE-2024-2698 freeipa: user can obtain a hash of t...

regipy

regipy ⚠️ v6.0.0 中的破坏性变更 版本 6.0.0 包含重大的现代化变更： 需要 Python 3.9+ - 放弃了对 Python 3.6、3.7 和 3.8 的支持 移除了attrs 库 - 数据类现在使用 Python 内置的 dataclasses 模块 如果你的代码导入了内部类（Cell、VKRecord、Value、Subkey）并使用了 attr.asdict 等 attrs 函数，请改用 dataclasses.asdict 完整详情请参阅 CHANGELOG。 Regipy 是一个用于解析离线注册表配置单元（带有 REGF 头的 Hive 文件）的...