frida-extract

FridaExtract FridaExtract is a Frida.re based RunPE extraction tool. RunPE type injection is a common technique used by malware to hide code within another process. It also happens to be the final stage in a lot of packers : NOTE: Frida now also supports extraction of injected PE files using the...

krbrelayx

Krbrelayx - Kerberos relaying and unconstrained delegation abuse toolkit Toolkit for abusing Kerberos. Requires impacket, ldap3 and dnspython to function. It is recommended to install impacket from git directly to have the latest version available. More info about this toolkit available in my blo...

CVE-2023-08-21-exploit

エクスプロイトタイトル: Axigen if xhr1.readyState === XMLHttpRequest.DONE hcookie = new URLxhr1.responseURL.search.split"="1; xhr2.open'PATCH', /api/v1/conversations/MQ/?h=$hcookie, true; xhr2.setRequestHe...

Zerodapi

Zerodai ドキュメント 始めましょう！ root@kitploit: pip install zerodai==0.0.0.20 root@kitploit: export zerodapikey="TUAPIKEY" APIキーを取得する: https://zerodai.com チャット会話（シンプル）- メモリなし root@kitploit: from zerodai import zerodai import os zerodai.apiauthos.getenv"zerodapikey" messages = while True: prompt = input" " ...

tfc

Tinfoil Chat Tinfoil Chat TFC is a FOSS+FHD peer-to-peer messaging system that relies on high assurance hardware architecture to protect users from passive collection, MITM attacks and most importantly, remote key exfiltration. TFC is designed for people with one of the most complex threat models...

tfc

Tinfoil Chat Tinfoil Chat TFC is a FOSS+FHD peer-to-peer messaging system that relies on high assurance hardware architecture to protect users from passive collection, MITM attacks and most importantly, remote key exfiltration. TFC is designed for people with one of the most complex threat models...

Singularity

Singularity - Stealthy Linux Kernel Rootkit "Shall we give forensics a little work?" This project was inspired by a very special woman to me: Mocinha Singularity is a powerful Linux Kernel Module LKM rootkit designed for modern 6.x kernels. It provides comprehensive stealth capabilities through...

CVE-2026-90792

A null pointer dereference in the gf_node_list_get_child function (file scenegraph/base_scenegraph.c) of GPAC MP4Box (affected up to commit f1219cde) allows a remote attacker to crash the application by manipulating the Target argument. User interaction is required, and the primary impact is avai...

CVE-2026-90792 GPAC MP4Box base_scenegraph.c gf_node_list_get_child null pointer dereference

A flaw has been found in GPAC up to f1219cde. This issue affects the function gfnodelistgetchild of the file scenegraph/basescenegraph.c of the component MP4Box. This manipulation of the argument Target causes null pointer dereference. The attack is possible to be carried out remotely. The exploi...

CVE-2026-90792 GPAC MP4Box base_scenegraph.c gf_node_list_get_child null pointer dereference

A flaw has been found in GPAC up to f1219cde. This issue affects the function gfnodelistgetchild of the file scenegraph/basescenegraph.c of the component MP4Box. This manipulation of the argument Target causes null pointer dereference. The attack is possible to be carried out remotely. The exploi...

EUVD-2026-77613

A flaw has been found in GPAC up to f1219cde. This issue affects the function gfnodelistgetchild of the file scenegraph/basescenegraph.c of the component MP4Box. This manipulation of the argument Target causes null pointer dereference. The attack is possible to be carried out remotely. The exploi...

CVE-2025-55182-research

CVE-2025-55182 - RCE en React Server Components NOTA: Escrito por IA/Claude https://github.com/ejpir/CVE-2025-55182-bypass TL;DR CVE-2025-55182 es una vulnerabilidad crítica de RCE en el Flight Protocol de React. La cadena de ataque combina path traversal + inyección de chunk falso + abuso del...

Prineo_RE

关于 PriPara（内部名称 Prineo）是由 SynSophia 开发的一款街机节奏游戏。 目标 本项目的目标是逆向街机系列的模型格式，以便将独占角色移植到 Nintendo Switch 上的较新版本游戏中。 截图 逆向工程过程中拍摄的一些有趣截图。 Noesis 插件的早期版本——首次部分模型导入（14-09-2025） 用于测试反序列化实现的 C 模型读取器（06-12-2025） 在虚拟机中运行解密后的转储，并通过使用 MinHook 和 Xenos 的 DLL 注入来挂钩哈希函数，利用 ReturnAddress 内部函数跟踪哈希函数调用（08-12-2025） 通过...

frostbyte

FrostByte Progolue: In the past few days I've been experimenting with the AppDomain manager injection technique had a decent success with it in my previous Red Team engagements against certain EDRs. Although, this is really good for initial access vector, I wanted to release a POC which will help...

python-haystack

python-haystack memory forensics |travis| |coverage| |landscape| |pypi| |docs| Quick Start: Quick usage guide in the docs/ folder. Haystack-reverse CLI in the docs/ folder. More documentation Introduction: python-haystack is an heap analysis framework, focused on searching and reversing of C...

professional-services

专业服务 由 Google Cloud 的专业服务团队开发的常见解决方案与工具。 免责声明 本仓库及其内容并非 Google 官方支持的产品。 许可证 本仓库中的所有解决方案均依据 Apache 2.0 许可证提供。有关更详细的条款与条件，请参阅 LICENSE 文件。 示例 examples 文件夹包含覆盖多种 Google Cloud Platform 产品的示例解决方案。您可以将这些解决方案作为参考，也可以对它们进行扩展以适配您的特定使用场景。 Anthos Service Mesh Multi-Cluster - 使用 Anthos Service Mesh 联合两个私有 GKE...

MADLIRA

MADLIRA Malware detection using learning and information retrieval for Android Overview MADLIRA is a tool for Android malware detection. It consists in two components: TFIDF component and SVM learning component. In gerneral, it takes an input a set of malwares and benwares and then extracts the...

MsfMania

MsfMania MsfMania は、Windows システムにおける EDR/AV 検出を回避するために設計された、高度な Python ベースのペイロード難読化フレームワークです。動的コード生成、多層暗号化 RC4、バイナリメタデータの偽装により、高度に多態性に富んだ実行可能ファイルを生成します。 ⚠️ 教育目的専用 - このツールは、許可されたセキュリティテストおよび研究目的で設計されています。 目次 スクリーンショット 機能 必要条件 インストール 使用方法 基本ヘルプ 完全な例 免責事項 ライセンス スクリーンショット 機能 変数・関数難読化を施した多態性 C スタブ...

capa

Webサイト | ダウンロード | Webインターフェース capaは実行可能ファイルの能力を検出します。PE、ELF、.NETモジュール、シェルコードファイル、またはサンドボックスレポートに対して実行すると、プログラムが何をできると考えるかを教えてくれます。例えば、ファイルがバックドアである、サービスをインストールできる、またはHTTPに依存して通信するなどと示唆することがあります。 capaの結果をブラウザで対話的に検査するには、capa Explorer Webを使用してください。...

1earn

Everything is hard at the beginning, and then it stays hard... Introduction : The original intention of this project is to share knowledge resources, allowing more people to access and understand the fields of security and operations. However, due to my limited ability, there will inevitably be...