fortress

一个浏览器引擎，统治一切 隐身 Chromium 引擎 · v3（Chromium 153） Fortress 是一款隐身 Chromium 引擎，只需改动一行代码，就能让你的爬虫和浏览器代理不再被拦截。 机器人检测器通过读取浏览器指纹来标记自动化程序；Fortress 在 Chromium 的 C++ 内部修正该指纹，使浏览器呈现为普通的 Chrome 安装。爬虫能跑完任务，代理能到达目标页面，而 CreepJS、Sannysoft、BrowserScan 以及实时的 Cloudflare Turnstile 都会将其识别为人类。将你现有的 Playwright 或 Puppeteer...

morf

MORF Mobile Reconnaissance Framework A powerful offensive security toolkit for mobile application analysis Find Secrets. Protect Apps. Stay Secure. 📋 Table of Contents 💡 Overview 🚀 Quick Start 🔍 Key Features 🏗️ Architecture 📋 Common Use Cases 📦 Installation Prerequisites Method 1: Docker...

distributed-system-testing

Distributed Systems Testing Skills Two skills for AI coding agents that design and run claim-driven tests for distributed and stateful systems. Together they produce a structured Markdown test plan and a findings report with 10-state verdicts and an explicit SUT / harness / checker / environment...

CVE-2023-33253

CVE-2023-33253 LabCollector 6.0 though 6.15 allows remote code execution An authenticated remote low-privileged user can upload an executable PHP file and execute system commands. The vulnerability is in the message function, and is due to insufficient validation of the file such as...

RemoteKeyStrokes

RemoteKeyStrokes A script to automate keystrokes through an active remote desktop session that assists offensive operators in combination with living off the land techniques. All credits goes to nopernik for making it possible so I took it upon myself to improve it. I wanted something that helps...

quien

quien A better whois and domain intelligence toolkit. Interactive TUI with tabbed views for WHOIS, DNS, mail, SSL/TLS, HTTP headers, SEO analysis, and tech stack detection. Try it without installing: ssh quien.sh Install Homebrew brew install quien Ubuntu / Debian curl -fsSL...

CVE-2026-103441 Unauthenticated arbitrary file deletion through Wikibase serialized entity parsing

Deserialization of untrusted data vulnerability in The Wikimedia Foundation MediaWiki Wikibase extension allows Leverage Executable Code in Non-Executable Files. This issue affects MediaWiki Wikibase extension: 1.46, 1.45, and 1.43...

CVE-2026-103441

The MediaWiki Wikibase extension (versions 1.46, 1.45, and 1.43 ) is susceptible to a deserialization of untrusted data vulnerability. This flaw occurs during the parsing of serialized entities , which can lead to the execution of arbitrary code within non-executable files. While the description ...

EUVD-2026-90073

Deserialization of untrusted data vulnerability in The Wikimedia Foundation MediaWiki Wikibase extension allows Leverage Executable Code in Non-Executable Files. This issue affects MediaWiki Wikibase extension: 1.46, 1.45, and 1.43...

macSubstrate

 macSubstrate - Substrate for macOS macSubstrate is a platform tool for interprocess code injection on macOS, with the similar function to Cydia Substrate on iOS. Using macSubstrate, you can inject your plugins .bundle or .framework into a mac app including sandboxed apps to tweak it in the...

OpenDoor

OpenDoor — OWASP Web Recon & Directory Discovery Platform OpenDoor is an open-source CLI Recon Platform for authorized web reconnaissance, directory discovery, subdomain enumeration, fingerprints, WAF detection, bypass probing, response filtering, reporting, open-redirect checks, bounded crawl an...

dump1090

Dump1090 README Dump 1090 es un decodificador Mode S diseñado específicamente para dispositivos RTLSDR. Las principales características son: Decodificación robusta de mensajes débiles; con mode1090 muchos usuarios observaron un alcance mejorado en comparación con otros decodificadores populares...

Zerodoor

ZeroDoor A script written lazily for generating reverse shell backdoors on the go whenever you need without any hassle for your daily penetration needs . These backdoors are not james bond high tech stuff but rather simple ones to prevent over exploitation and limited capabilities Once you genera...

CrushFTP-SSTI-LFI-Proof-of-Concept

CVE-2024-4040 — CrushFTP SSTI / LFI Proof of Concept For educational and authorised lab use only. CS443 Software and Systems Security — controlled local Docker environment. Vulnerability Summary Field| Detail ---|--- CVE| CVE-2024-4040 Affected Software| CrushFTP … that the server evaluates and...

vSphereyeeter

vsphereyeeter.sh is an automated bash script to exploit vulnerabilty CVE-2021-21972 in the vSphere Client for vCenter servers. Once executed simply give it the IP Address of your vulnerable target and you will be presented with an SSH shell. "The vSphere Client HTML5 contains a remote code...

CVE-2023-21716

CVE-2023-21716 Corrupción del montón en la tabla de fuentes RTF de Microsoft Word Una vulnerabilidad dentro de wwlib de Microsoft Office permite a los atacantes lograr la ejecución remota de código con los privilegios de la víctima que abre un documento RTF malicioso. El atacante podría entregar...

TTPRunner

TTPRunner Autonomous TTP execution agent for purple team operations Feed it a threat report. It builds the attack plan. You approve. It executes. Features Feature| Description ---|--- Multi-Format Parsing| PDF LLM-powered, STIX 2.1, Markdown, URLs - paste a threat report and go LLM Analysis|...

LiME

LiME Extractor de Memoria de Linux Un Módulo de Kernel Cargable LKM para la adquisición de memoria volátil desde Linux y dispositivos basados en Linux, como Android. LiME minimiza su interacción entre los procesos de espacio de usuario y de kernel durante la adquisición, produciendo capturas de...

Tai-e

Tai-e ✨新闻 发布 v0.5.4： Tai-e 附带了一个新前端，能将 Java 程序更快、更可靠地转换为 Tai-e IR。 通过与指针分析集成的 PacDroid 驱动插件，支持 Android 应用分析。 通过 Spring 分析插件，支持 Spring DI 和 WEC 分析。 我们的论文《Two Approaches to Fast Bytecode Frontend for Static Analysis》已被 OOPSLA'25 录用。该论文介绍了 Tai-e 的字节码新前端，比现有前端更快、更可靠。 我们的论文《Pointer Analysis for...

should-i-trust

should-i-trust Summary should-i-trust is a tool to evaluate OSINT signals for a domain. Requirements should-i-trust requires API keys from the following sources: Censys.io - Free for for first 250/quries/month VirusTotal - Free GrayHatWarFare - Free with limited results Use Case You're part of a...