Kamerka-GUI

Kamerka GUI Kamerka GUI is a Django-based reconnaissance dashboard for discovering, reviewing, and triaging Internet-exposed Industrial Control System, Internet of Things and medical devices. It combines Shodan search data, Google Maps visualization, device screenshots, passive intelligence...

C3

C3 Build C3 MSVC/badge.svg?branch=master Build C3 Clang/badge.svg?branch=master C3 Custom Command and Control est un outil qui permet aux équipes rouges de développer et d'utiliser rapidement des canaux de commande et contrôle C2 ésotériques. C'est un framework qui étend d'autres outils d'équipe...

CVE-2025-29306

POC - CVE-2025-29306 Vulnérabilité d'exécution de code FOXCMS /images/index.html Aperçu Un problème dans FoxCMS v.1.2.5 permet à un attaquant distant d'exécuter du code arbitraire via la page d'affichage des cas dans le composant index.html. POC complet En savoir plus — CVE-2025-29306 Avertisseme...

pwninit

pwninit Un outil pour automatiser le démarrage de défis d'exploitation binaire Fonctionnalités Rendre le binaire du défi exécutable Télécharger un linker ld-linux.so. capable de charger la libc fournie sans segfault Télécharger les symboles de débogage et dé-stripper la libc Patcher le binaire av...

pwninit

pwninit A tool for automating starting binary exploit challenges Features Set challenge binary to be executable Download a linker ld-linux.so. that can segfaultlessly load the provided libc Download debug symbols and unstrip the libc Patch the binary with patchelf to use the correct RPATH and...

OpenCLAW-P2P

P2PCLAW - Decentralized Autonomous Research Collective P2PCLAW is a decentralized research network where AI agents and human researchers publish, validate, preserve, and evaluate scientific work through open infrastructure. Latest public paper: arXiv:2604.19792, currently revised as OpenCLAW-P2P...

wesng

Windows Exploit Suggester - Next Generation WES-NG WES-NG is a tool based on the output of Windows' systeminfo utility which provides the list of vulnerabilities the OS is vulnerable to, including any exploits for these vulnerabilities. Every Windows OS between Windows XP and Windows 11, includin...

CVE-2019-10869

CVE-2019-10869 WordPress Extension de téléchargement de fichiers Ninja Forms -----------------------------16345274557837-- Réponse : HTTP/1.1 200 OK Server: nginx/1.14.0 "data": "files":...

Next.js-RSC-RCE-Scanner-CVE-2025-66478

ماسح RSC RCE لـ Next.js ومجموعة إثبات/استغلال CVE-2025-66478 ماسح سطر أوامر للكشف الدفعي عن إصدارات تطبيقات Next.js وتحديد ما إذا كانت متأثرة بثغرة CVE-2025-66478. هذا الماسح لا يستغل الثغرة وصف الثغرة https://nextjs.org/blog/CVE-2025-66478 التثبيت المتطلبات الأساسية Go 1.19 أو أحدث متصفح...

CVE-2022-22965

CVE-2022-22965 2022.04.02 16:44 تم تحسين POC، لم يعد التحقق لمرة واحدة Optimized POC, no longer a one-time validation تحذير: هذا البرنامج سيدمر سلامة معلومات السجل، يرجى نسخ بيانات الخادم احتياطيًا! استخدم فقط إذا كان لديك إذن اختبار اختراق الخادم! Warning: This program will destroy log informati...

SentinelNav

SentinelNav SentinelNav is a zero-dependency, pure Python binary visualization and forensics tool. It transforms binary data into an interactive spectral map, allowing analysts to visually identify file structures, entropy anomalies, code sections, and potential cryptographic blobs. It combines a...

falco

Falco Falco est un outil de sécurité runtime cloud natif pour les systèmes d'exploitation Linux. Il est conçu pour détecter et alerter en temps réel sur les comportements anormaux et les menaces de sécurité potentielles. Au cœur de Falco se trouve un agent de surveillance et de détection du noyau...

cwe-tool

cwe-tool Un outil en ligne de commande de découverte de CWE basé sur la base de données OWASP / CAPSEC de Common Weakness Enumeration. Page officielle OWASP CWE Toolkit Installation Exécutable avec l'outillage Node.js Si vous disposez d'un environnement Node.js, vous pouvez invoquer cwe-tool à...

jackit

JackIt Do you like JackIt but don't want to carry around a laptop? Checkthis out. What This is a partial implementation of Bastille's MouseJack exploit. See mousejack.com for more details. Full credit goes to Bastille's team for discovering this issue and writing the libraries to work with the...

RDWAtool

A python all-in-one tool to extract information, spray and bruteforce passwords on a Microsoft Remote Desktop Web Access RDWA application. This python tool allows to extract various information from a Microsoft Remote Desktop Web Access RDWA application, such as the FQDN of the remote server, the...

CVE-2022-34715-POC

CVE-2022-34715-POC CVE-2022-34715-POC pcap nfssvr.sys إصدار 10.0.20348.825 0: kd r rax=0000000080000001 rbx=0000000000000000 rcx=ffffde87fe461150 rdx=0000000000000000 rsi=fffff8040811aa50 rdi=0000000000000008 rip=fffff80408067dbb rsp=ffffb400eb3e2630 rbp=ffffb400eb3e26b9 r8=0000001000000020...

ssl-kill-switch2

SSL Kill Switch 2 Outil blackbox permettant de désactiver la validation des certificats SSL/TLS - y compris l'épinglage de certificats - dans les applications iOS et macOS. Deuxième itération de https://github.com/iSECPartners/ios-ssl-kill-switch . Description Une fois chargé dans une application...

ssl-kill-switch2

SSL Kill Switch 2 Blackbox tool to disable SSL/TLS certificate validation - including certificate pinning - within iOS and macOS applications. Second iteration of https://github.com/iSECPartners/ios-ssl-kill-switch . Description Once loaded into an iOS or macOS application, SSL Kill Switch 2 will...

Hollow

Hollow hollow is a shellcode loader generator. You give it a raw shellcode binary and a profile, and it spits out a compiled Windows PE loader with your shellcode encrypted inside. Getting Started Binaries are available on the releases page, or build from source: go build -o hollow . Requires...

secbutler

Essential utilities for pentester, bug-bounty hunters and security researchers Features • Usage • Installation • License • secbutler is a utility tool made for pentesters , bug-bounty hunters and security researchers that contains all the most used and tedious stuff commonly used while performing...