defense-matrix

Defense Matrix Archived Project This project was an attempt to automate various aspects of Linux security auditing and hardening. As time passed, I K4YT3X found many of the methodologies used in this project to be unideal and obsolete. Therefore, I recommend not continuing using this project but...

DcRat

DcRat Because I've heard more and more abuses of DcRat.I decided that i won't update this any more.The dev version will be also closed later. Since I've heard more and more about the abuse of DcRat, I decided to no longer update this project, and the new version in development will also be closed...

onefuzz

❗ IMPORTANT NOTICE ❗ August 31, 2023. Since September 2020 when OneFuzz was first open sourced, we’ve been on a journey to create a best-in-class orchestrator for running fuzzers, driving security and quality into our products. Initially launched by a small group in MSR, OneFuzz has now become a...

raider

DEPRECATED Repository Raider has become an OWASP project, so the development will move to their Github account...

domain-protect

OWASP Domain Protect - 이동됨 OWASP Domain Protect가 terraform-aws-domain-protect로 이동되었습니다. OWASP Domain Protect는 이제 Terraform Module로 사용할 수 있습니다. OWASP Domain Protect 문서에서 마이그레이션 옵션을 포함한 정보를 확인하세요...

noseyparker

Nosey Parker는 이제 Titus로 대체되었습니다. Nosey Parker는 공식적으로 은퇴했습니다 공지 게시물 https://www.praetorian.com/blog/titus-open-source-secret-scanner/ 을 참조하세요. Titus 저장소는 https://github.com/praetorian-inc/titus 에서 찾을 수 있습니다. 개요 Nosey Parker는 텍스트 데이터에서 비밀 및 민감한 정보를 찾는 CLI 도구입니다. 이는 본질적으로 비밀 탐지를 위한 특수 목적의 grep 유사...

CVE-2021-41579-LCDS-LAquis-SCADA-4.3.1.1085-Arbitrary-File-Write

LAquis SCADA Arbitrary File Write 👨‍💻 Author Mohammed Idrees Banyamer 🐦 Instagram: @banyamersecurity Proof-of-Concept exploit for CVE-2021-41579 - Arbitrary file write via malicious .els project file in LCDS LAquis SCADA ≤ 4.3.1.1085. 🚨 Vulnerability Description CVE-2021-41579 is a client-side...

purify

Purify 취약점 보고서 관리를 위한 올인원 도구 🎮 데모 📃 문서 📹 빠른 Vimeo 설명 Purify의 목표는 다양한 사용자 정의 포함 도구에서 전달된 취약점을 관리하는 워크플로우를 간소화하는 사용하기 쉽고 효율적인 도구가 되는 것입니다. Purify는 도구에 구애받지 않는 애플리케이션을 지향합니다. 도구 독립성을 통해 모든 도구 세트의 결과/발견/보고서를 분석할 수 있습니다. 기술적으로 업로드하려는 보고서는 다음 중 하나여야 합니다: JSON 파일 XML 파일 JSON 객체 대부분의 웹훅은 별도의 JSON 객체로 이벤트...

Dragonfly2 < 2.1.0-beta.1 - Hardcoded JWT Secret

Dragonfly is an open source P2P-based file distribution and image acceleration system. It is hosted by the Cloud Native Computing Foundation CNCF as an Incubating Level Project. Dragonfly uses JWT to verify user. However, the secret key for JWT, "Secret Key", is hard coded, which leads to...

Monitorr 1.7.6m - Unauthenticated Remote Code Execution

Monitorr 1.7.6m is susceptible to a remote code execution vulnerability. Improper input validation and lack of authorization leads to arbitrary file uploads in the web application. An unauthorized attacker with web access to could upload and execute a specially crafted file, leading to remote cod...

Advanced Comment System 1.0 - Local File Inclusion

ACS Advanced Comment System 1.0 is affected by local file inclusion via an advancedcomponentsystem/index.php?ACSpath=..%2f URI. id: CVE-2020-35598 info: name: Advanced Comment System 1.0 - Local File Inclusion author: daffainfo severity: high description: ACS Advanced Comment System 1.0 is affect...

Documentor <= 1.5.3 - Unauthenticated SQL Injection

The Documentor WordPress plugin through 1.5.3 fails to sanitize and escape user input before it is being interpolated in an SQL statement and then executed, leading to an SQL Injection exploitable by unauthenticated users. id: CVE-2022-0773 info: name: Documentor = 1.5.3 - Unauthenticated SQL...

CVE-2025-5548

🛡️ Research and Exploitation: CVE 2025-5548 This is the main repository where I document my progress in the analysis of CVE 2025-5548. In this space I record each phase of the process: from lab preparation to final exploit development. 📂 Repository Structure Below is the organization of the...

Android-Security-Masterclass

Android セキュリティ マスタークラス 🛡️📱 公式 OWASP プロジェクト — Android 開発者とペンテスター向けのハンズオン OWASP MASVS/MASTG セキュリティトレーニングラボ — ミラーアーキテクチャ: 脆弱 ↔ セキュア ↔ 攻撃者 📖 概要 Android セキュリティ マスタークラス は、公式 OWASP プロジェクトであり、ミラーアーキテクチャ を採用して設計されています。Android 開発者とセキュリティ研究者に対して、脆弱性が 実際に どのようなものか、そして最新の Android 開発手法を用いて 正確に...

C2-Tracker

C2 Tracker C2 Tracker is a free-to-use-community-driven IOC feed that uses Shodan andCensys searches to collect IP addresses of known malware/botnet/C2 infrastructure. This Project has been Archived This project has been archived. The text files in data/ have been removed and are no longer update...

pulsar

Pulsar What is it? Pulsar is an automated network footprint scanner for Red Teams, Pentesters and Bounty Hunters. Its focused on discovery of organization public facing assets with minimal knowledge about its infrastructure. Along with network data visualization, it attempts to give a basic...

terrascan

⚠️ 보관됨 이 프로젝트는 더 이상 유지보수되지 않습니다. 저장소가 보관되었으며 추가 업데이트, 이슈, 풀 리퀘스트가 수락되지 않습니다. 자유롭게 포크하여 개발을 계속하세요. 소개 Terrascan은 Infrastructure as Code를 위한 정적 코드 분석기입니다. Terrascan을 사용하면 다음을 수행할 수 있습니다: 인프라 코드의 오류 설정을 원활하게 스캔합니다. 프로비저닝된 클라우드 인프라의 구성 변경을 모니터링하여 포스처 드리프트를 유발하는 변경을 감지하고 안전한 포스처로 되돌릴 수 있습니다. 보안 취약점 및 규...

dns-benchmark-tool

⚠️ this project has moved and is no longer maintained. install the successor: pip install net-benchmark repository: https://github.com/net-benchmark/net-benchmark all existing commands and flags remain fully compatible. DNS Benchmark Tool Part of BuildTools - Network Performance Suite Fast,...

Cordon

Cordon ⚠️ PROJECT DEPRECATED Development on this project has been stopped because someone else was working on the same idea and built a better solution. We highly recommend checking out:Fence by Use-Tusk. Note: This repository was originally created forFOSS HACK 2026 , though we unfortunately...

PT-2026-108749

Incorrect Authorization vulnerability in ash-project ash allows an actor to infer data in related records they cannot read via Ash.count/2, Ash.exists/2 and Ash.aggregate/3. Ash.Actions.Aggregate.run/4 lib/ash/actions/aggregate.ex applied only the root resource's read policy before running the...