soc-faker

soc-faker soc-faker is used to generate fake data for use by Security Operation Centers, Information security professionals, product teams, and many more. Getting Started soc-faker works with Python 3.6 or greater. You can install soc-faker using pip as well as cloning this repository directly. A...

Klip

Klip Minimal terminal-based password manager. Features · Installation · Usage · Security Features Fully offline operation. Secure encryption using Argon2id for key derivation and authenticated encryption with libsodium. Secure password generator. Custom TUI built without external libraries...

brawl-public-game-001

BRAWL One of the challenging problems for cyber security researchers developing detection and response capabilities is finding a realistic environment in which to test their hypothesis and capabilities. The cheapest method is to test capabilities on a small lab network. But this environment is...

dfirtriage

dfirtriage Digital forensic acquisition tool for Windows-based incident response. How to Use To run, drop dfirtriage.exe on the target or connected USB drive and execute with admin rights, -h for help. DFIRTriage v6.0 User's Manual Description This document outlines the functionality and proper u...

CVE-2018-11235

CVE-2018-11235 1. ssh to your vps. 2. Clone this repo: git clone https://github.com/Rezy-Dev/CVE-2018-11235 cd CVE-2018-11235 3. Give exploit.sh execute x permission then execute it: sudo chmod +x exploit.sh sudo ./exploit.sh It downloads apache2 and builds malicious repo for us. 4. Once done we...

hcxdumptool

hcxdumptool A tool to capture packets from WLAN devices and to discover potential weak points within own WiFi networks by running layer 2 attacks against the WPA protocol. Designed to run mostly headless on small systems like a Raspberry Pi Zero. hcxnmealog A tool to handle NMEA 0183 sentences fr...

CVE-2023-21608

CVE-2023-21608 Discord Server This bug was Use after Free which was caused during resetForm operation while handling object memory references. Blog Adobe Acrobat Reader - resetForm - CAgg UaF - RCE Exploit - CVE-2023-21608 Advisory CVE-2023-21608 Demo...

Octopus

What is Octopus ? Octopus is an open source, pre-operation C2 server based on python which can control an Octopus powershell agent through HTTP/S. The main purpose of creating Octopus is for use before any red team operation, where rather than starting the engagement with your full operational...

poc-cve-collection

poc-cve-collection Poc CVE Collection 🧪 Collects CVE PoCs and backs them up to the Internet Archive when they are unavailable on GitHub. Donate Support the maintenance of this project with PayPal or by scanning the QR code below. Example CVE-2026-31431 Title crypto: algifaead - Revert to operatin...

cq

cq Code Query — универсальный инструмент сканирования кода на предмет безопасности. CQ сканирует код на наличие уязвимостей безопасности и других элементов, представляющих интерес для специалистов по ревизии кода с фокусом на безопасность. Он выводит текстовые файлы, содержащие ссылки на найденны...

laforge

Laforge Security Competition Infrastructure Automation Framework Laforge enables rapid development of infrastructure for the purpose of information security competitions. Using a simple and intuitive configuration language, Laforge manages a dependency graph and state management and allows for...

some-tweak-to-hide-jwt-payload-values

some-tweak-to-hide-jwt-payload-values a handful of tweaks and ideas to safeguard the JWT payload, making it futile to attempt decoding by constantly altering its value, ensuring the decoded output remains unintelligible while imposing minimal performance overhead. What is a JWT Token? A JSON Web...

airecon

Agent de test d'intrusion autonome propulsé par l'IA -orange.svg AIRecon est un agent de test d'intrusion autonome qui combine un LLM Ollama auto-hébergé avec un bac à sable Docker Kali Linux , une intégration native du proxy Caido , un pipeline structuré RECON → ANALYSIS → EXPLOIT → REPORT et un...

Hypervisor-From-Scratch

Hypervisor From Scratch Учебное пособие по созданию гипервизора с нуля Все части » Часть 1 · Часть 2 · Часть 3 · Часть 4 · Часть 5 · Часть 6 · Часть 7 · Часть 8 Если вы ищете гипервизор для задач анализа и реверс-инжиниринга, обратите внимание на отладчикHyperDbg. Это отладчик на основе...

macOS-enterprise-privileges

Privileges Gestion transparente, gratuite et sécurisée des droits d'administration pour macOS. Privileges est une application macOS gratuite conçue pour les environnements d'entreprise modernes. Elle accorde aux utilisateurs des privilèges d'administrateur temporaires lorsqu'ils en ont besoin, sa...

raven

Raven - Carte avancée des cybermenaces Simplifiée, personnalisable et réactive. Elle utilise D3.js avec TOPO JSON, comprend 247 pays, environ 100 000 villes et peut être utilisée dans un environnement isolé sans recherches externes !. Structure Hors ligne - Demo Firefox, Chrome ou Safari En direc...

Navigate CMS 2.9.4 - Server-Side Request Forgery

Navigate CMS 2.9.4 is susceptible to server-side request forgery via feedparser class. This can allow a remote attacker to force the application to make arbitrary requests via injection of arbitrary URLs into the feed parameter, thus enabling possible theft of sensitive information, data...

Micro Focus UCMDB - Remote Code Execution

Micro Focus UCMDB is susceptible to remote code execution. Impacted products include Operation Bridge Manager versions 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10 and all earlier versions, and Operations Bridge containerized 2020.05, 2019.08, 2019.0...

CVE-2022-2588

CVE-2022-2588 Le correctif Le bug est corrigé dans Linux v5.19 par ce commit. Le bug Le bug a été introduit dans Linux v3.17 par ce commit en 2014. Il nécessite User Namespaces pour être déclenché. Ce bug est très similaire à CVE-2021-3715, qui était causé par une opération incorrecte sur la list...

CVE-2025-48384

PoC для CVE-2025-48384 См. CVE-2025-48384 Для запуска: git -c protocol.file.allow=always clone --recurse-submodules [email protected]:liamg/CVE-2025-48384.git Пример вывода: git -c protocol.file.allow=always clone --recurse-submodules CVE-2025-48384 test Cloning into 'test'... done. 'ubmodul...