dragondance

Dragon Dance What is that? Dragon Dance is a plugin for Ghidra to get visualize and manipulate the binary code coverage data. Coverage data can be imported from the multiple coverage sources. For now the plugin supports Dynamorio and Intel Pin binary instrumentation tools. Dynamorio has its own...

ssh-tpm-agent

SSH agent for TPM ssh-tpm-agent is a ssh-agent compatible agent that allows keys to be created by the Trusted Platform Module TPM for authentication towards ssh servers. TPM sealed keys are private keys created inside the Trusted Platform Module TPM and sealed in .tpm suffixed files. They are bou...

Lock-Picking-Robot

🔑 Unlocked 🔑 Introduction Background An open source Lock picking robot. Basically, there are many skeleton keys in use the most common example is the TSA 007, which is bad. Having one key which can open MANY different locks, especially without the lock owners people knowing it exists or can be...

AutoProber

AutoProber AutoProber is the hardware hacker's flying probe automation stack for giving your agent everything it needs to go from "there's a new target on the plate" to probing individual pins in a safe way. Demo video: https://gainsec.com/autoprober-demo-mp4/ Flow 1. Tell the agent to ingest the...

HT-WPS-Breaker

HT-WPS BREAKER Languages: English High Touch WPS Breaker HT-WB is a small tool based on the bash script language, it can help you to extract the wps pin of many vulnerable routers and get the password, in the last i want to notice that HT-WPS Breaker in its process is using these tools :...

mimikatz

mimikatz mimikatz is a tool I've made to learn C and make somes experiments with Windows security. It's now well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. .. mimikatz 2....

android_hid

androidhid Use Android as Rubber Ducky against targeted Android device or PC HID attack using Android Using Android as Rubber Ducky against Android or Windows. This is not a new technique, just a demo how to perform HID attack using Android instead of rubber ducky. For targeted Android device it ...

manul

Manul Manul is a coverage-guided parallel fuzzer for open-source and black-box binaries on Windows, Linux and macOS beta written in pure Python. Quick Start pip3 install psutil git clone https://github.com/mxmssh/manul cd manul mkdir in mkdir out echo "AAAAAA" in/test python3 manul.py -i in -o ou...

Android-PIN-Bruteforce

🔓📱 Android-PIN-Bruteforce Unlock an Android phone or device by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android devices! 📱 How it works It uses a USB OTG cable to connect the locked phone to the Nethunter device. It emulates a keyboard,...

filecoin-pin: Unbounded DAG pinning can exhaust server resources

Summary The IPFS Pinning Service API implementation accepts a caller-controlled CID through POST /pins, queues background processing, and then recursively fetches the full DAG with helia.pins.addcid. The route and background pinning path do not enforce a request rate limit, per-user quota, maximu...

EUVD-2026-114448

filecoin-pin: Unbounded DAG pinning can exhaust server resources...

npm: filecoin-pin: Unbounded DAG pinning can exhaust server resources

npm: filecoin-pin: Unbounded DAG pinning can exhaust server resources vulnerability discovered by ? in WordPress npm filecoin-pin versions = 1.1.0...

awind-research

Awind Research This repository holds interesting bits and pieces related to research I performed on wireless presentation devices manufactured by Awindinc and OEM'ed to multiple manufacturers. The repository is split into these subsections: hardware - hardware hacking stuff, mostly for MMC dumpin...

CVE-2026-6992-PoC

CVE-2026-6992-PoC Vulnerability proof of concept for the bluetooth pin RCE injection CVE-2026-6992 reworked from https://github.com/utmost3/cve/issues/2 I take no credit for discovering the vulnerability. This is for educational and portfolio purposes only. For devices that do not have management...

[SECURITY] Fedora 45 Update: clevis-pin-trustee-0.1.1-2.fc45

clevis-pin-trustee is a Clevis PIN that implements encryption and decryption operations using remote attestation via a Trustee server. It enables automated unlocking of LUKS-encrypted volumes in confidential computing environments by fetching encryption keys from Trustee servers after successful...

CLEANSTART-2024-YB70963 flaw was found in OpenSC packages that allow a potential PIN bypass

Security vulnerability affects the opensc package. A flaw was found in OpenSC packages that allow a potential PIN bypass...

CVE-2024-41276

CVE-2024-41276 Kaiten Authentication Bypass Kaiten - a workflow management system. A vulnerability in Kaiten allows attackers to bypass the PIN code authentication mechanism. The application requires users to input a 6-digit PIN code sent to their email for authorization after entering their logi...

humane-aipin-ghostlock

GhostLock for Humane AI Pin GhostLock for Humane AI Pin is an open-source, boot-scoped root proof of concept for one exact retail firmware build. It exercises CVE-2026-43499, a Linux rtmutex use-after-free, from an ordinary authorized ADB shell. The runner is deliberately narrow. It checks the...

CVE-2020-27747

CVE-2020-27747 Possible Account Takeover | Brute Force Ability Suggested description An issue was discovered in Click Studios Passwordstate 8.9 Build 8973. If the user of the system has assigned himself a PIN code for entering from a mobile device using the built-in generator 4 digits, a remote...

lockphish

Lockphish v2.0 Lockphish it's the first tool 07/04/2020 for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone Passcode using a https link. LockPhish Tutorial: https://www.kalilinux.in/2020/05/lockphish.html Author: The Linux Choice Who deleted his...