openwrt

OpenWrt Project is a Linux operating system targeting embedded devices. Instead of trying to create a single, static firmware, OpenWrt provides a fully writable filesystem with package management. This frees you from the application selection and configuration provided by the vendor and allows yo...

CVE-2024-21532-PoC-ggit

CVE-2024-21532 Command Injection vulnerability in ggit ggit describes itself as: Local promise-returning git command wrappers Resources: Project's GitHub source code: https://github.com/bahmutov/ggit Project's npm package: https://www.npmjs.com/package/ggit Article write-up on this vulnerability:...

theway

The Way The Way is a tool for unpacking, repacking, and creating malicious Cisco Adaptive Security Device Manager ASDM packages. ASDM is the Java-based administrative GUI for Adaptive Security Appliance ASA systems e.g. firewalls and VPNs. The ASDM package is hosted on the ASA and sub-components...

lightbulb-framework

LightBulb LightBulb is an open source python framework for auditing web application firewalls and filters. Synopsis The framework consists of two main algorithms: GOFA : An active learning algorithm that infers symbolic representations of automata in the standard membership/equivalence query mode...

linux-soft-exploit-suggester

linux-soft-exploit-suggester Script para encontrar exploits para todo el software vulnerable en el sistema, centrándose en los paquetes de software en lugar de solo vulnerabilidades del kernel. Utiliza la base de datos de exploits para evaluar la seguridad de los paquetes y buscar exploits que...

packages_apps_ManagedProvisioning_CVE-2021-39692

This repository does not have a README...

GL.iNet-Multiple-Vulnerabilities

GL.iNet Multiple Vulnerabilities This repository contains the exploits of the following vulnerabilities: CVE-2023-46454: In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the package information functionality...

salt-vulnerabilities

Salt Stack Profile This profile will check to make sure your salt installation is patched to a level that protects you from CVE-2020-11651, and CVE-2020-11652. It does so by checking to ensure the packages salt-api, salt-cloud, salt-master, salt-minion, salt-ssh, salt-syndic, and salt are either...

pmg

Package Manager Guard PMG Block malicious packages before they install. Why PMG? Developers and AI coding agents install packages every day. Each npm install or pip install executes thousands of lines of code that nobody reviews. Recent compromises in popular ecosystems: Mini Shai-Hulud - 300+...

pmg

Package Manager Guard PMG Block malicious packages before they install. Why PMG? Developers and AI coding agents install packages every day. Each npm install or pip install executes thousands of lines of code that nobody reviews. Recent compromises in popular ecosystems: Mini Shai-Hulud - 300+...

vexhub-crawler

VEX Hub Crawler vexhub-crawler is a component of the VEX Hubvexhub that automatically retrieves VEX documents from source repositories. Overview The crawler identifies source repositories from registered PURLs Package URLspurl and copies VEX documents into VEX Hub. This process ensures that VEX H...

cve-2020-8617

This repository does not have a README...

donutCS

donutCS Versión .NET Core del generador de shellcode donut. https://vimeo.com/369739318 Nota: Simplemente pegué un montón de cosas para una versión más personalmente utilizable. TheWover y Odzhan hicieron todo el trabajo duro. Instalación Confirmado que funciona en Linux, Mac y Windows...

vet

クイックスタート • ドキュメント • コミュニティ !NOTE vet はエージェントスキルの特別モードをサポートしています。 GitHub リポジトリでホストされているエージェントスキルをスキャンするには、vet scan --agent-skill を実行してください。 vet を選ぶ理由 現代のソフトウェアの70～90%はオープンソースコードです — それが安全であるとどうやって確認しますか？ 従来のSCAツールはCVEのノイズで埋もれてしまいます。vet は異なるアプローチをとります： シャドウ AI 発見 — さまざまなツールや設定からAIツール使用のシグナルを発見...

modelscan

ModelScan: モデルシリアライゼーション攻撃からの保護 機械学習（ML）モデルは、インターネット上、チーム内、チーム間で公開共有されています。基盤モデル（Foundation Models）の台頭により、公開されているMLモデルは、さらなるトレーニングやファインチューニングのためにますます消費されるようになっています。MLモデルは、重要な意思決定やミッションクリティカルなアプリケーションの駆動にますます使用されています。 それにもかかわらず、モデルは受信トレイ内のPDFファイルほどの厳格さではまだスキャンされていません。 この状況を変える必要があり、適切なツールがその第一歩です。...

CVE-2024-22263_Scanner

CVE-2024-22263Scanner For Ethical Usage only, Any harmful or malicious activities are not allowed. And it's your own responsibility. CVE-2024-22263: Spring Cloud Dataflow Arbitrary File Writing Usage ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗...

callstranger-detector

Zeek Package that detects CallStranger CVE-2020-12695 attempts http://callstranger.com/ This package attempts to detect CallStranger CVE-2020-12695 exploitation attempts and data exfiltration. It does so by looking for three key things: 1. UPnP SUBSCRIBE commands with a Notify URL that contains a...

CVE-2024-0044

CVE-2024-0044- CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13 CVE-2024-0044 Exploit Script This Bash script demonstrates how to exploit CVE-2024-0044. For educational and testing purposes only. Prerequisites ADB Android Debug Bridge installed an...

KaliPackergeManager

KaliPackergeManager kalipm.sh es una poderosa herramienta de gestión de paquetes para Kali Linux que proporciona una interfaz basada en menús fácil de usar para simplificar la instalación de varios paquetes y herramientas. Agiliza el proceso de gestión de software y permite a los usuarios instala...

robustness

robustness package Install via pip: pip install robustness Read the docs: https://robustness.readthedocs.io/en/latest/index.html robustness is a package we students in the MadryLab created to make training, evaluating, and exploring neural networks flexible and easy. We use it in almost all of ou...