android-check

Android Check Static code analysis plugin for Android project. Usage Modifications in /build.gradle: buildscript repositories jcenter dependencies ... classpath 'com.noveogroup.android:check:1.2.5' ... Modifications in //build.gradle: apply plugin: 'com.noveogroup.android.check' Configuration...

yaraQA

yaraQA YARA rule Analyzer to improve rule quality and performance Why? YARA rules can be syntactically correct but still dysfunctional. yaraQA tries to find and report these issues to the author or maintainer of a YARA rule set. The issues yaraQA tries to detect are e.g.: rules that are...

ossem-power-up

OSSEM A tool to assess data quality, built on top of the awesome OSSEM project. Mission Answer the question: I want to start hunting ATT&CK techniques, what log sources and events are more suitable? Create transparency on the strengths and weaknesses of your log sources Provide an easy way to...

nuvola

nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...

npq

NPQ Documentation This directory contains comprehensive documentation for the NPQ Node Package Quality security auditing tool. Core Documentation optional-features.md Configuration and usage of optional security features, including recent improvements and bug fixes. age.marshall.md Detailed...

static-analysis

В этом репозитории перечислены инструменты статического анализа для всех языков программирования, инструментов сборки, конфигурационных файлов и многого другого. Основное внимание уделяется инструментам, которые улучшают качество кода, таким как линтеры и форматтеры. Официальный сайт...

knowsmore

Knows More KnowsMore prend officiellement en charge Python 3.8+. Fonctionnalités principales Importer les hachages NTLM depuis un fichier texte .ntds généré par CrackMapExec ou secretsdump.py Importer les hachages NTLM depuis NTDS.dit et SYSTEM Importer les hachages NTLM craqués depuis un fichier...

phpstan

PHPStan - Outil d'analyse statique PHP PHPStan se concentre sur la recherche d'erreurs dans votre code sans avoir à l'exécuter. Il détecte des classes entières de bugs avant même que vous n'écriviez des tests pour le code. Il rapproche PHP des langages compilés dans le sens où l'exactitude de...

roamr

roamr Найдите лучшую WiFi-сеть для вашего местоположения, не разрывая соединение. В офисе или дома с несколькими WiFi-сетями лучшая меняется по мере вашего перемещения, и «лучшая» — это не просто уровень сигнала. Сеть может показывать полные полоски сигнала и при этом быть медленной: перегруженны...

jvmxray

JVMXRay: Java Application Security Monitoring Duke history Documentation | Changes from Upstream | Project Blog JVMXRay monitors Java applications in real-time via bytecode injection, detecting vulnerabilities and suspicious activity without code changes. 19 modular sensors track file access,...

ossem-power-up

OSSEM Un outil pour évaluer la qualité des données, construit sur le super projet OSSEM. Mission Répondre à la question : Je veux commencer à chasser les techniques ATT&CK, quelles sources de journaux et événements sont les plus appropriés ? Créer de la transparence sur les forces et faiblesses d...

magescan

Mage Scan L'idée derrière cet outil est d'évaluer la qualité et la sécurité d'un site Magento auquel vous n'avez pas accès. Le scénario typique : vous interviewez un développeur potentiel ou évaluez un nouveau client, et vous souhaitez avoir une idée de ce à quoi vous avez affaire. Installation...

aztarna

This repository has been archived and is not maintained any further. Refer to alurity for future progress on robot footprinting and fingerprinting. aztarna This repository contains Alias Robotics' aztarna, a footprinting tool for robots. Alias Robotics supports original robot manufacturers...

hui2ochko

Код в этом репозитории — это PoC для CVE-2021-43848, и он очень низкого качества. У меня нет планов поддерживать его каким-либо образом...

CVE-2019-9053

Fixed it bcz of https://tryhackme.com/room/easyctf : enjoy Critical Issues Fixed 1. Python 2 to Python 3 Compatibility Old: print "string" New: print"string" Changed all print statements to print functions Updated string formatting to use f-strings 2. Deprecated optparse Library Old: import...

rulesfinder

rulesfinder Machine-learn password mangling rules! This tool finds efficient password mangling rules for John the Ripper or Hashcat for a given dictionary and a list of passwords. The tool is currently alpha quality. tl;dr You need the rust toolchain to build this tool. You can either directly...

CVE-2026-101146

A security flaw has been discovered in Eleveo Quality Management 9.7.0. This issue affects the function UtilsService.createAndSaveAudit of the file /qm/cz.zoom.scorecard.webui.Scorecard/QMUtilsService of the component GWT RPC Handler. Performing a manipulation results in information disclosure. T...

EUVD-2026-88538

A security flaw has been discovered in Eleveo Quality Management 9.7.0. This issue affects the function UtilsService.createAndSaveAudit of the file /qm/cz.zoom.scorecard.webui.Scorecard/QMUtilsService of the component GWT RPC Handler. Performing a manipulation results in information disclosure. T...

CVE-2026-101146 Eleveo Quality Management GWT RPC QMUtilsService UtilsService.createAndSaveAudit information disclosure

A security flaw has been discovered in Eleveo Quality Management 9.7.0. This issue affects the function UtilsService.createAndSaveAudit of the file /qm/cz.zoom.scorecard.webui.Scorecard/QMUtilsService of the component GWT RPC Handler. Performing a manipulation results in information disclosure. T...

CVE-2026-101146 Eleveo Quality Management GWT RPC QMUtilsService UtilsService.createAndSaveAudit information disclosure

A security flaw has been discovered in Eleveo Quality Management 9.7.0. This issue affects the function UtilsService.createAndSaveAudit of the file /qm/cz.zoom.scorecard.webui.Scorecard/QMUtilsService of the component GWT RPC Handler. Performing a manipulation results in information disclosure. T...