136640 matches found
grubcrawler
Agentic web crawler with anti-detection, vision fallback, and peer-to-peer mesh. Full-stack web crawling engine with JavaScript rendering, Camoufox anti-detect browser, per-request proxy routing, and autonomous agent loops. Converts pages to clean markdown with a native Rust extraction engine. Wh...
CVE-2017-3066
CVE-2017-3066 Description Adobe ColdFusion uses message format the Action AMF. The AMF Protocol is a custom binary serialization Protocol. It has two formats: AMF0 and AMF3. Action message consists of headers and bodies. There are several implementations of AMF in different languages. For Java we...
fraud-bridge
Intro fraud-bridge helps bypassing restrictive censorship environments that block direct TCP or UDP connections, by setting up ICMP, NTP or DNS over IPv4 or IPv6 tunnels. It automatically patches TCP MSS option to achieve a non-fragmented stream of packets known as MSS-clamping to gain performanc...
CVE-2024-20137
CVE-2024-20137 Python code for expoiting the vulnerability in wlan driver of MediaTek SOCs MT6890, MT7622, MT7915, MT7916, MT7981, MT7986 MediaTek: https://corp.mediatek.com/product-security-bulletin/December-2024 NIST: https://nvd.nist.gov/vuln/detail/CVE-2024-20137 About the code This code is...
M3UAScan
M3UAScan A Scanner for M3UA protocol to detect Sigtran supporting nodes M3UA stands for MTP Level 3 MTP3 User Adaptation Layer as defined by the IETF SIGTRAN working group in RFC 4666 .M3UA enables the SS7 protocol's User Parts e.g. ISUP, SCCP and TUP to run over IP instead of telephony equipment...
HSTP
Hyper Simple Text Protocol on Networks Try now: https://hstp.ai npx hstp; The protocol aims to develop a application layer abstraction for the Hyper Service Transfer Protocol. HSTP is a recursion as nature of HSTP. This protocol implements itself as a interface. On every internet connected device...
mssqlbof
mssqlbof A Beacon Object File suite for Microsoft SQL Server that speaks TDS 7.4 on the wire itself, in C. No msodbcsql.dll, no sqloledb.dll, no .NET CLR, no PowerShell. One COFF per arch, loads into every beacon that honors the canonical Beacon API. Why SQL Server shows up on nearly every...
FISSURE
FISSURE - The RF Framework Frequency Independent SDR-based Signal Understanding and Reverse Engineering Overview GRCon26 Conference Talk | Tactical Workflow Demo | GRCon26 Presentation Slides ---|---|--- Introduction FISSURE is an open-source framework for RF analysis, automation, and distributed...
CVE-2025-55182-research
CVE-2025-55182 - React Server Components RCE NOTE: Written by AI/Claude https://github.com/ejpir/CVE-2025-55182-bypass TL;DR CVE-2025-55182 is a critical RCE vulnerability in React's Flight Protocol. The attack chains path traversal + fake chunk injection + $B handler abuse to execute...
smod
smod smod is a modular framework with every kind of diagnostic and offensive feature you could need in order to pentest modbus protocol. It is a full Modbus protocol implementation using Python and Scapy. This software could be run on Linux/OSX under python 2.7.x. Summery SCADA Process Control...
ptcpdump
ptcpdump %20e2e %20e2e English | 中文 ptcpdump is a tcpdump-compatible packet analyzer powered by eBPF, automatically annotating packets with process/container/pod metadata when detectable. Inspired by jschwinger233/skbdump. Table of Contents Features Installation Requirements Usage Example command...
redteam-research
Red Team Research Collection of PoC and offensive techniques used by the BlackArrow Red Team License All the code included in this project is licensed under the terms of the MIT license...
snmpwn
SNMPwn is an SNMPv3 user enumerator and attack tool. It is a legitimate security tool designed to be used by security professionals and penetration testers against hosts you have permission to test. It takes advantage of the fact that SNMPv3 systems will respond with "Unknown user name" when an...
CVE-2025-55182
CVE-2025-55182 This vulnerability allows RCE in React Server Functions, e.g. as offered by Next.js through insecure prototype references. I'm not an expert in React or Next.js, so take all the information here with a grain of salt. Background React offers Server Functions^1, which can be seen as...
CVE-2026-49975-POC
CVE-2026-49975 — HTTP/2 Bomb PoC Proof-of-concept exploit for CVE-2026-49975, a remote denial-of-service vulnerability in HTTP/2 server implementations. Discovered by Quang Luong Calif Security Research, disclosed June 2, 2026. For authorized security testing only. Do not use against infrastructu...
FreeRDP
FreeRDP: A Remote Desktop Protocol Implementation FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Enjoy the freedom of using your software wherever you want, the way you want it, in a world where interoperability can finally liberate your...
zeek
The Zeek Network Security Monitor A powerful framework for network traffic analysis and security monitoring. Key Features — Documentation — Getting Started — Development — License Key Features In-depth Analysis Zeek ships with analyzers for many protocols, enabling high-level semantic analysis at...
CatSniffer
CatSniffer Where to buy and learn more CatSniffer 😼 is an original multiprotocol, and multiband board made for sniffing, communicating, and attacking IoT Internet of Things devices. It was designed as a highly portable USB stick that integrates the new chips TI CC1352, Semtech SX1262, and an RP20...
libsignal
Overview libsignal contains platform-agnostic APIs used by the official Signal clients and servers, exposed as a Java, Swift, or TypeScript library. The underlying implementations are written in Rust: libsignal-protocol: Implements the Signal protocol, including the Double Ratchet algorithm. A...