dirtyfrag

Dirty Frag: Universal Linux LPE Abstract This document describes the Dirty Frag vulnerability class, first discovered and reported by Hyunwoo Kim @v4bel, which can obtain root privileges on major Linux distributions by chaining the xfrm-ESP Page-Cache Write CVE-2026-43284 vulnerability and the...

slowql

SlowQL The fastest offline SQL static analyzer. Built in Rust for zero false positives. Catch SQL injection, performance regressions, missing indexes, unbounded queries, compliance violations, and 282+ more issues before they reach production. No database connection required. What SlowQL Does...

viewstate-security-workshop

Viewstate Security Workshop This repository is for the Testing ASP.NET ViewState with YSoNet YSoSerial.NET workshop. Recommended Reading: Exploiting Deserialisation in ASP.NET via ViewState Recommended Tools For Solving The Labs when lab has been setup: https://github.com/irsdl/crapsecrets...

Carpunk

carpunk CAN Injection | Car Hacking Toolkit 🚀 What's New Carpunk is an advanced CAN Injection Toolkit, evolving from the original CANghost. It introduces new functionalities, including interface control, basic sniffing, and CAN Injection vulnerabilities. ✅ Compatible with both Simulation & Real...

-Pegasus-Suite

Pegasus-Suite A comprehensive security toolkit with 1000+ penetration testing and security assessment tools. Author Letda Kes Dr. Sobri, S.Kom. Contact: [email protected] GitHub: github.com/sobri3195 Overview Pegasus-Suite is an all-in-one cybersecurity framework designed for security...

AIDOR

AIDOR 👁️ - Automated Insecure Direct Object Reference Detector AIDOR Automated IDOR Detector is a professional Bash utility for authorized penetration testers to identify Insecure Direct Object Reference IDOR vulnerabilities in web applications. Detects numerical IDs, parameter patterns, and...

sss3

SSS3 Simple Storage Scanner SSS3 is a simple S3 Bucket testing software. It uses aws cli to search for public buckets in a list of domains/subdomains. Basic Requirements It requires aws cli installed and configured with a s3 policy defined You should have a list of previous enumerated...

apkstudio

APK Studio オープンソース、クロスプラットフォームの Qt6 ベース IDE で、Android アプリケーションパッケージのリバースエンジニアリングを行います。.smali コードファイルのシンタックスハイライトを備えたコードエディタを含む、IDE のような親しみやすいレイアウトを特徴としています。 機能 クロスプラットフォームで、Linux 、Mac OS X 、Windows 上で動作 APK の逆コンパイル/再コンパイル/署名およびインストール 自動ツールダウンロード & インストール – APK Studio は必要なツール...

hacker101

Hacker101 Hacker101 is a free class for web security. Whether you're a programmer with an interest in bug bounties or a seasoned security professional, Hacker101 has something to teach you. Getting Started Prerequisites Ruby Suggestion: use rbenv bundler Run gem install bundler, if needed...

DeadManSwitch

Dead Man Switch Overview Dead Man Switch is a cross-platform security application written in Rust that automatically protects sensitive data in emergency situations. The application monitors multiple trigger mechanisms and executes immediate system lockdown procedures when activated, including...

wpprobe

"Because why scan blind when WordPress exposes itself?" WPProbe A fast WordPress plugin and theme scanner that detects installed plugins via REST API enumeration and themes from HTML discovery, then maps them to known vulnerabilities. Over 5000 plugins detectable without brute-force, thousands mo...

0day

0day For reasons known to us, the original repository was deleted, but local repo were kept, forks and stars cleared But rest assured, it's still the original recipe, the original taste. In case of this issue,please Follow Me Education use only 中文 | English EXP, POC of various CMS, platforms,...

APKLab

APKLab The ultimate Android RE experience right inside your VS Code. APKLab seamlessly integrates the best open-source tools: Apktool, smali-lsp, Jadx, uber-apk-signer, apk-mitm and more to the excellent VS Code so you can focus on app analysis and get it done without leaving the IDE. Features...

mantra

「🔑」 About Mantra The tool in question was created in Go and its main objective is to search for API keys in JavaScript files and HTML pages. It works by checking the source code of web pages and script files for strings that are identical or similar to API keys. These keys are often used for...

wtf

what the fuzz A distributed, code-coverage guided, cross-platform snapshot-based fuzzer designed for attacking user and or kernel-mode targets running on Microsoft Windows and Linux user-mode experimental!. Overview what the fuzz or wtf is a distributed, code-coverage guided, customizable,...

nuubi

Nuubi ツール スキャナー, 偵察 詳細 オプション: -h/--help | ヘルプメッセージを表示して終了 引数: -b/--banner | 対象IPアドレスのバナー取得 -s/--subnet | 対象のサブネットルックアップ -c/--cms | ヘッダーによるCMS検出 -d/--dns | 対象ドメインのDNSルックアップ -e/--extract | 対象URLhttps/httpからリンク抽出 -H/--http | 対象URLのHTTPヘッダー -n/--nmap | 対象ドメインのNmapスキャン -S/--sub | 対象ドメインのサブドメインルックアップ...

nuubi

Nuubi Tools Scanner, Recon. Details Options: -h/--help | Show help message and exit Arguments: -b/--banner | Banner grabing of target ip address -s/--subnet | Subnetlookup of target -c/--cms | Cms detect with headers -d/--dns | Dnslookup of target domain -e/--extract | Extract links from target...

wolfssl

wolfSSL 嵌入式 SSL/TLS 库 wolfSSL 嵌入式 SSL 库（前身为 CyaSSL）是一个用 ANSI C 编写的轻量级 SSL/TLS 库，面向嵌入式、RTOS 和资源受限环境——主要因为其体积小、速度快且功能丰富。由于免版税定价和出色的跨平台支持，它也常用于标准操作环境。wolfSSL 支持直至当前 TLS 1.3 和 DTLS 1.3 的行业标准，体积比 OpenSSL 小多达 20 倍，并提供渐进式密码，如 ChaCha20、Curve25519、BLAKE2b/BLAKE2s 以及后量子 TLS 1.3 组。用户基准测试和反馈报告显示，使用 wolfSSL 相...

cve-2020-3452

cve-2020-3452 unauth file read in cisco asa & firepower. install git clone https://github.com/Loneyers/cve-2020-3452 && cd cve-2020-3452 && go build use ./cve-2020-3452 url.txt 40...

ntlmv1-multi

NTLMv1 Multi Tool このツールはNTLMv1ハッシュをNTLMに逆変換します。より具体的には、NTLMv1チャレンジレスポンスをhashcatモード14000でクラック可能な形式に変換します。 CT3の計算 --ct3 を指定すると、NTLMの最後の4桁を自動計算します。--json を指定すると --ct3 が暗黙的に有効になり、要素 pt3 として返されます。例: python3 ntlmv1.py --ntlm...