Ladon

Ladon Large-scale Intranet Penetration Scanner Cobalt Strike Plugin Memory Loading Program Introduction Ladon is a large-scale intranet penetration scanner, domain penetration, and lateral movement tool, featuring PowerShell modules, Cobalt Strike plugins, memory loading, and fileless scanning. I...

macOSTools

macOSTools macOS Offensive Tools AUnit Example XCode project for Audio Unit Plugins MigrationToolPayload Migration tool plugin SpecialDelivery Installer plugin authplugin Authentication Plugin dylibinjection Source code for dylib injection. Based off of code from Jonathan Levin...

DataSurgeon

DataSurgeon v1.2.8 DataSurgeon ds is a versatile tool designed for incident response, DLP, penetration testing, and CTF challenges. It allows for the extraction of various types of sensitive information including emails, phone numbers, hashes, credit cards, URLs, IP addresses, MAC addresses, SRV...

r2frida

r2frida Radare2 and Frida better together Description Self-contained plugin for radare2 that ships frida and allows to instrument local or remote processes using r2 commands instead but not limited to Frida scripts. The radare project provides a complete toolchain for reverse engineering, it's...

zafrida-ui

中文 | English ZAFrida UI - PyCharm Frida Plugin Current Version: 0.3.6 Project Introduction Frida GUI Tool for PyCharm/IntelliJ ZAFrida UI is a Frida graphical interface plugin integrated into PyCharm and JetBrains IDEs. It aims to solve the complexity of Frida command-line operations and script...

idasec

idasec IDA plugin for reverse-engineering and dynamic interactions with the Binsec platform Disclaimer IDAsec is prototype tool under development, some features are likely buggy and should be used with care. Features Decoding an instruction in DBA IR Loading execution traces generated by Pinsec...

uEmu

Overview uEmu is a tiny cute emulator plugin for IDA based on unicorn engine. Supports following architectures out of the box: x86 , x64 , ARM , ARM64 , MIPS , MIPS64 What is it GOOD for? Emulate bare metal code bootloaders, embedded firmware etc Emulate standalone functions What is it BAD for?...

EUVD-2026-118910

The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 4.5.16 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level acce...

sharem

SHAREM Welcome to SHAREM! SHAREM was presented at DEFCON 31 in "Game-Changing Advances in Windows Shellcode Analysis" and Black Hat USA Arsenal. A companion Ghidra plugin was made available separately from Trellix, courtesy of Max Kersten. Thus, you can extend the power of SHAREM to Ghidra, if yo...

reverse-shell

reverse-shell Reverse Shell as a Service - https://reverse-shell.sh Easy to remember reverse shell that should work on most Unix-like systems. Detects available software on the target and runs an appropriate payload. Usage 1. Listen for connection On your machine, open up a port and listen on it...

pypacker

General information This is Pypacker: The fastest and simplest low-level packet manipulation library for Python. See below examples for what you can do with it. If you want to support this project you can via PayPal. What you can do with Pypacker Create custom Packets via keywords or from raw byt...

DuplexSpyCS

DuplexSpy DuplexSpyCS CS stands for CSharp is a open source RAT base on C/S Continuously update: Branch-Version2.1.0 Documents The online documents are here: DuplexSpy Fileless Execution DLL and shellcode injector and loader Remote Plugin Proxy Introduction DuplexSpy is a open-source Windows RAT...

grove

Grove is a Software as a Service SaaS log collection framework, designed to support collection of logs from services which do not natively support log streaming. Grove enables teams to collect security related events from their vendors in a reliable and consistent way. This data may then be store...

quick-lookup-ptrun

Quick Lookup Plugin for PowerToys Run This plugin for PowerToys Run allows you to quickly search for an IP address, domain name, hash or any other data points in a list of Cyber Security tools. It's perfect for security analysts, penetration testers, or anyone else who needs to quickly lookup...

android-check

Android Check Static code analysis plugin for Android project. Usage Modifications in /build.gradle: buildscript repositories jcenter dependencies ... classpath 'com.noveogroup.android:check:1.2.5' ... Modifications in //build.gradle: apply plugin: 'com.noveogroup.android.check' Configuration...

deREferencing

deREferencing deReferencing is an IDA Pro plugin that implements new registers and stack views. Adds dereferenced pointers, colors and other useful information, similar to some GDB plugins e.g: PEDA, GEF, pwndbg, etc. Supports following architectures: x86, x86-64, ARM, ARM64, MIPS32 and MIPS64...

Manalyze

Manalyze Introduction Manalyze is a static analysis tool for PE files that you can use to conduct primary assessment on an executable or set of executables. It collects weak signals that could indicate malicious behavior and displays information that can help a subsequent manual analysis. If you...

HexRaysCodeXplorer

| | | | | \ / \ | | \ \ / / | | | || | | |/ / | / / | | \ V / | | | |/ \ / / // | | | / | | / \ / |/ / | ' | |/ | '/ \ '| | | | | / | |\ \ | | || \ \ /\ | | | / /^\ \ | | | | | | / | | |///\| \,|, |/// ,|\/ / ./||/|| || / | | | |/ ||...

wpgarlic

wpgarlic A proof-of-concept WordPress plugin fuzzer that led to the discovery of more than 300 vulnerabilities in WordPress plugins installed on almost 30 million sites. The used technique is described in https://kazet.cc/2022/02/03/fuzzing-wordpress-plugins.html If you want to continue the...

CVE-2026-119152

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin (versions ≤ 5.7.6 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping of the customer[email] parameter. An unauthenticated attacker can ...