409539 matches found
DonPwner
š„ DonPwner - Advanced DonPAPI Analysis & Attack Tool Advanced Password Spray & Credential Analysis Tool - Leveraging DonPAPI with Smart Delay & Jitter Features ā¢ Installation ā¢ Usage ā¢ Examples ā¢ Configuration ā¢ License šÆ About DonPwner is an advanced penetration testing tool that revolutionizes...
vulnerability-poc
Vulnerability PoC & Defense Rules Reproducible CVE labs with detection-only proof-of-concept PoC code and ready-to-deploy detection & prevention rules ā Snort, YARA, Nginx, and Apache ā for high-severity CVEs. Built for defenders: authorized security testing, penetration testing, blue-team...
tirreno
tirreno tirreno is a security framework. tirreno tir.ĖrÉ.no helps understand, monitor, and protect your product from threats, and abuse. While classic cybersecurity focuses on infrastructure and network perimeter, most breaches occur through compromised accounts and application logic abuse that...
memguard
MemGuard Software enclave for storage of sensitive information in memory. This package attempts to reduce the likelihood of sensitive data being exposed when in memory. It aims to support all major operating systems and is written in pure Go. Features Sensitive data is encrypted and authenticated...
EDR-Preloader
EDR-Preloader An EDR bypass that prevent EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer For details, see: malwaretech.com/2024/02/bypassing-edrs-with-edr-preload.html...
VibeSec-Skill
VibeSec-Skill Stop vibe coding vulnerabilities into production. An AI skill that brings 5+ years of bug bounty hunting experience directly into your AI coding workflow - so LLM models write secure code from the start. Introduction Vibe coding is fun until your app ends up on social media for all...
LOLDrivers
LOLDrivers - Living Off The Land Drivers ššØ Welcome to LOLDrivers Living Off The Land Drivers, an exciting open-source project that brings together vulnerable, malicious, and known malicious Windows drivers in one comprehensive repository. Our mission is to empower organizations of all sizes with...
spamscanner
A spam filter for Node.js, the command line and mail servers. It catches spam, phishing, scams and malware in any language, explains every decision, and can ask a language model about close calls. spamscanner.net Ā· Getting started Ā· Documentation Features A classifier that reads every language...
tarian
Tarian We want to maintain this as open-source to fight against the attacks on our favorite Kubernetes ecosystem. We can fight threats together as a community, by continuous contribution. Protect your Applications running on Kubernetes from malicious attacks by pre-registering your source code...
safeshell
safeshell Prevent PHP vulnerabilities similar to CVE-2016-10033 and CVE-2016-10045...
infisical
The open-source security infrastructure platform : Manage secrets, certificates, keys, privileged access, and AI agent access in one platform. Community | Infisical Cloud | Self-Hosting | Docs | Website | X | Hiring Remote/SF Introduction Infisical is the open source security infrastructure...
CVE-2023-22960
PoC for CVE-2023-22960 Details PoC for CVE-2023-22960 that I discovered. This vulnerability allows an attacker to bypass the credentials brute-force prevention mechanism of the Embedded Web Server interface of all Lexmark printer models that have a firmware version released before 01/2023. This...
smart-contract-vulnerabilities
Smart Contract Vulnerabilities A collection of smart contract vulnerabilities along with prevention methods. See /references for LLM-optimized references. Access Control Authorization Through tx.origin Insufficient Access Control Delegatecall to Untrusted Callee Signature Malleability Missing...
owasp-java-encoder
OWASP Java Encoder Contextual output encoding for Java 8+. Choose an encoder for the parser context receiving untrusted text: HTML, JavaScript, CSS, XML or a URL component. The core has no runtime dependencies; optional JSP and Jakarta adapters provide view-layer bindings. Encoding is one part of...
Torward
Torward Torward is an improved version based on the torghost-gn and darktor scripts, designed to enhance anonymity on the Internet. The tool prevents data leaks and forces all traffic from our computer to be routed exclusively through the Tor network, providing a high level of privacy in our...
SharpHose
Overview SharpHose is a C password spraying tool designed to be fast, safe, and usable over Cobalt Strike's execute-assembly. It provides a flexible way to interact with Active Directory using domain-joined and non-joined contexts, while also being able to target specific domains and domain...
snort3
Snort++ Snort 3 is the next generation Snort IPS Intrusion Prevention System. This file will show you what Snort++ has to offer and guide you through the steps from download to demo. If you are unfamiliar with Snort you should take a look at the Snort documentation first. We will cover the...
isslfix
iOS : iSSLFix: Certificate in chain starting at has isCA=0 = possible MITM attempt, making validation fail Because securityd...
owLSM
š”ļø owLSM aspires to become the gold standard for prevention and detection for Linux š”ļø owLSM is an eBPF LSM agent that implements a stateful Sigma rules engine focused on prevention. What is the project: owLSM focuses on three main things: 1 Prevention capabilities using a Sigma Rules Engine...
VUL4J-60
antisamy A library for performing fast, configurable cleansing of HTML coming from untrusted sources. Another way of saying that could be: It's an API that helps you make sure that clients don't supply malicious cargo code in the HTML they supply for their profile, comments, etc., that get...