chaos

chaos chaos is an 'origin' IP scanner developed by RST in collaboration with ChatGPT. It is a niche utility with an intended audience of mostly penetration testers and bug hunters. An origin-IP is a term-of-art expression describing the final public IP destination for websites that are publicly...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell Shield Risk reduction for the PHP2Shellhttps:/...

universal-android-debloater-next-generation

Universal Android Debloater Next Generation !warning DISCLAIMER : Use at your own risk. We're not responsible for anything that could happen to your devices. This is a detached fork of the UAD project. This aims to improve privacy and efficiency energy, speed, memory by removing unnecessary and...

litebox

LiteBox A security-focused library OS !NOTE This project is currently actively evolving and improving. While we are working toward a stable release, some APIs and interfaces may change as the design continues to mature. You are welcome to explore and experiment, but if you need long-term stabilit...

SourcePoint

SourcePoint SourcePoint is a polymorphic C2 profile generator for Cobalt Strike C2s, written in Go. SourcePoint allows unique C2 profiles to be generated on the fly that helps reduce our Indicators of Compromise "IoCs" and allows the operator to spin up complex profiles with minimal effort. This...

prism

Loaded Dice: Solving the Non-Selection Problem for Scalable Probabilistic RowHammer Defense To appear in the 53rd International Symposium on Computer Architecture ISCA, 2026. Jeonghyun Woo1, Junsu Kim1, Aamer Jaleel2, Prashant J. Nair1 1 University of British Columbia 2 NVIDIA Equal contribution...

CakeFuzzer

CakeFuzzer Latest release : 1.0 License : GNU GPL v3.0 Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives. Currently it is implemented to support the Cake...

uddup

UDdup - URLs Deduplication Tool The tool gets a list of URLs, and removes "duplicate" pages in the sense of URL patterns that are probably repetitive and points to the same web template. For example: https://www.example.com/product/123 https://www.example.com/product/456...

v0ltpwn

V0LTpwn V0LTpwn CVE-2019-11157 is a software-controlled fault attack on x86 processors. It is the first attack corrupting the integrity of SGX enclaves. Description All recent Intel processors exhibit a software interface for controlling core voltages without rebooting the system. This feature is...

CVE-2026-22020-Weak-Seed-in-Quantum-Key-Distribution-Error-Correction

CVE-2026-22020 – Weak Seed in Quantum Key Distribution Error Correction Program Code Python qkdweakseed.py - Simulated QKD privacy amplification with weak seed import hashlib, os, time def privacyamplificationsiftedkey, seed: Weak: seed derived from current time, predictable if seed is None: seed...

grapheneX

grapheneX In computing, hardening is usually the process of securing a system by reducing its surface of vulnerability, which is larger when a system performs more functions; in principle a single-function system is more secure than a multipurpose one. Reducing available ways of attack typically...

bpflock

bpflock - Lock Linux machines bpflock - eBPF driven security for locking and auditing Linux machines. Note: bpflock is currently in experimental stage , it may break, options and security semantics may change, some BPF programs will be updated to use Cilium ebpf library. Sections 1. Introduction...

IF-Guide

IF-Guide: Influence Function-Guided Detoxification of LLMs NeurIPS 2025 This repository contains the code for IF-Guide, the LLM detoxification technique introduced in our paper: IF-Guide: Influence Function-Guided Detoxification of LLMs Zachary Coalson , Juhan Bae, Nicholas Carlini, Sanghyun Hong...

EntropicaPublic

March updates I need to move some work over from the private repos. The exploration into using massivly multheaded models with mixer and readout functions separated continues. Currently training up a Chinese TinyStories on a 3B-equivalent model that trains, easily, on an 8GB gpu. We're looking at...

CVE-2026-80922

A flaw was found in the Linux kernel's qcom-rng cryptographic driver. This vulnerability incorrectly prevented the generation of zero as a random number. By making the output distinguishable from truly random numbers, this flaw could lead to a reduction in the entropy of the random number...

ESCepcion

🛡️ ESCepcion Active Directory Certificate Services Auditor ESCepcion is an open-source tool for auditing and assessing vulnerabilities in Active Directory Certificate Services AD CS infrastructures. It is designed to automate the detection of privilege escalation paths ESC with a strict focus on...

OWASP-Subtractive-Hardening-Top-10

OWASP Subtractive Security Top 10 Project Overview The OWASP Subtractive Security Top 10 Project is an initiative to identify, document, and promote the highest-impact opportunities for reducing cyber risk through the elimination of attack paths. Unlike traditional security guidance that focuses...

DakshSCRA

Daksh SCRA Source Code Review Assist Author: - Debasis Mohanty [email protected] - Twitter / X: @coffeensecurity - www.coffeeandsecurity.com About Daksh SCRA Daksh SCRA Source Code Review Assist is built to enhance the efficiency of the source code review process, providing a well-structured...

dns_amplification_scanner

DNS Amplification DDoS Detection and Verification Tool This script is designed to identify and verify potential DNS servers vulnerable to exploitation in DNS amplification distributed denial-of-service DDoS attacks. It addresses the limitations of automated vulnerability scanners like Nessus, whi...

EUVD-2026-103720

In the Linux kernel, the following vulnerability has been resolved: nfc: trf7970a: power down on startup RX gain failure trf7970astartup powers up the device before applying the optional RX gain reduction. If the register read or write fails, it returns without undoing that power-up. Probe's unwi...