3352445 matches found
Responsible-Alliance-Protocol
Teleological Bounding Protocol TBP v4.2.1 A policy-enforcement and cryptographic audit layer for autonomous AI agents. TBP blocks specific classes of agent action β autonomous financial transfers, industrial-control-system access, weapons-system integration β at the execution layer, outside the...
goWAPT
GOWAPT - Go Web Application Penetration Test GOWAPT is the younger brother of wfuzz a swiss army knife of WAPT, it allow pentester to perform huge activity with no stress at all, just configure it and it's just a matter of clicks. How to install To install gowapt just type: make sudo make install...
wtf
what the fuzz A distributed, code-coverage guided, cross-platform snapshot-based fuzzer designed for attacking user and or kernel-mode targets running on Microsoft Windows and Linux user-mode experimental!. Overview what the fuzz or wtf is a distributed, code-coverage guided, customizable,...
CVE-2022-30190
CVE-2022-30190 Microsoft Office Word RCE Reproduction CVE-2022-30190 Vulnerability Overview MS Office docx files may contain external OLE object references as HTML files. There is an HTML scenario ms-msdt: that calls the msdt diagnostic tool, which is capable of executing arbitrary code specified...
nuclei-action
This Nuclei Action makes it easy to orchestrate Nuclei with GitHub Action. Integrate all of your Nuclei Templates into powerful continuous security workflows and make it part of your secure software development life cycle. Nuclei Action Compatibility v3.0.0+ runs on Node.js v24 and adopts a...
burp-ai-agent
Custom AI Agent The bridge between Burp Suite and modern AI. A note on the name: This extension is published as Custom AI Agent formerly Burp AI Agent. It was renamed to comply with PortSwigger's BApp Store naming requirements and to avoid confusion with Burp Suite's built-in Burp AI provider. Th...
grubcrawler
Agentic web crawler with anti-detection, vision fallback, and peer-to-peer mesh. Endpoints Β· Mesh Β· Anti-Detection Β· Ghost Protocol Β· Live Stream Β· MCP Tools Β· Quick Start Β· Benchmarks Β· Architecture Full-stack web crawling engine with JavaScript rendering, Camoufox anti-detect browser, per-reque...
Mergen
Project Overview: Mergen is a tool engineered to convert Assembly code into LLVM Intermediate Representation IR. This tool is designed for: The deobfuscation or devirtualization of obfuscated binary code The enhancement of the reverse engineering process, making it more efficient and effective,...
reverse-shell
reverse-shell Reverse Shell as a Service - https://reverse-shell.sh Easy to remember reverse shell that should work on most Unix-like systems. Detects available software on the target and runs an appropriate payload. Usage 1. Listen for connection On your machine, open up a port and listen on it...
CVE-2024-41662
CVE-2024-41662 Markdown XSS leads to RCE in VNote version NOTE: The application properly validates some JavaScript payloads by performing output encoding in the app. However, it fails to validate in certain cases. 5. Further an attacker can achieve Remote Code execution using the following payloa...
CVE-2020-0688-Scanner
CVE-2020-0688-Scanner Quick C tool for checking CVE-2020-0688 on multiple hosts with a non-intrusive method. Features Scan hosts from an input file. Passive check : grab exchange version by scraping html content. Produces an output file. Demo How to use Prerequisite Windows .NET framework 4.5.2...
CVE-2025-8088-BUILDER-Winrar-Tool
CVE-2025-8088 WinRAR path traversal tool β This tool is created solely for educational use only. Unauthorized use outside of controlled environments is strictly prohibited. A Python script that exploits CVE-2025-8088, a path traversal vulnerability in WinRAR, by generating a malicious archive tha...
smart-tree
π³ Smart Tree s- The Smart Treehouse: Cyber-Botanical Dashboard & Agent-Agnostic Hooks! π Smart Tree is a blazingly fast, AI-friendly directory visualization tool that's 10-24x faster than traditional tree. Now with Security Scanner for supply chain attack detection, Aye Consciousness preservation...
CVE-2023-25136_POC
CVE-2023-25136 POC POC For A Pre Auth Double Free Vulnerability Affecting OpenSSH 9.1 To 9.2 Neccessary libraries Please make sure you have the following dependencies installed: Python 3 duh termcolor argparse fabric You can also install these libraries directly from the included requirements.txt...
Dirty_Stream-Android-POC
Disclaimer This project is for educational purposes only. The author does not condone or endorse any illegal or malicious activities. The use of this exploit is solely at your own risk. The author shall not be held liable for any damages or legal consequences arising from the use of this code...
cosign
cosign Signing OCI containers and other artifacts using Sigstore! Cosign aims to make signatures invisible infrastructure. Cosign supports: "Keyless signing" with the Sigstore public good Fulcio certificate authority and Rekor transparency log default Hardware and KMS signing Signing with a cosig...
CVE-2023-3519
Exploit Repository Stack-Overflow on Citrix CVE-2023-3519 Video Demonstration PoC: https://github.com/Mohammaddvd/CVE-2023-3519/assets/108727157/97fde2d9-2110-40bb-ae08-19163927115c Disclaimer This code is intended solely for educational purposes and ethical use in understanding security...
zyrox
Zyrox LLVM Obfuscator llvm compile and link-time plugin for obfuscating native code Why why not Β―\γ/Β― One of my biggest projects, where I learned a lot about LLVM internals, binary formats, assembly and obfuscation techniques. I believe that learning through building is the best way to learn, thu...
ulexecve
Quick Start Execute dynamic or statically compiled ELF Linux binaries without ever calling execve. cat /bin/echo | ulexecve - hello hello Introduction This Python tool is called ulexecve and it stands for userland execve. It helps you execute arbitrary ELF binaries on Linux systems from userland...
ExternalC2
ExternalC2 A library for integrating communication channels with the Cobalt Strike External C2 server This library provides an implementation of the Cobalt Strike External C2 spec, including a basic web channel and a websocket channel. The codebase has been documented and designed to allow...