cve-lite-cli

Most tools tell you what's wrong. CVE Lite CLI tells you what to run. CVE Lite CLI 🏆 Officially recognized as anOWASP Lab Project Vulnerability scanning that starts in your terminal and fits cleanly into CI. Scan your lockfile, get copy-and-run fix commands, and ship clean code. Scan. Understand...

pefile

pefile pefile is a multi-platform Python module to parse and work with Portable Executable PE files. Most of the information contained in the PE file headers is accessible, as well as all the sections' details and data. The structures defined in the Windows header files will be accessible as...

pefile

pefile pefile 是一个跨平台的 Python 模块，用于解析和处理可移植可执行 PE 文件。PE 文件头中包含的大部分信息均可访问，所有节的详细信息和数据也是如此。 Windows 头文件中定义的结构将作为 PE 实例中的属性访问。字段/属性的命名将尽量遵循这些头文件中的命名约定。仅为了方便而添加的快捷方式才会偏离该约定。 pefile 需要对 PE 文件的布局有一些基本了解——有了它，就可以探索 PE 文件格式的几乎所有功能。 安装 通过 pip 安装 pefile： pip3 install pefile 功能特性 pefile 可以实现的一些任务包括： 检查头部 分析节...

hollows_hunter

hollowshunter Hollows Hunter is a command-line application based on PE-sieve passive memory scanner. Recognizes and dumps a variety of potentially malicious implants replaced/implanted PEs, shellcodes, hooks, in-memory patches. While in case of PE-sieve you can select the process only by its PID,...

linux-smart-enumeration

First, a couple of useful oneliners ; wget "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -O lse.sh;chmod 700 lse.sh curl "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -Lo lse.sh;chmod 700 lse.sh Note that...

ysoserial

ysoserial A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. Description Originally released as part of AppSecCali 2015 Talk "Marshalling Pickles: how deserializing objects will ruin your day" with gadget chains for Apache Commons Collections 3.x and...

z3

Z3 Z3 是微软研究院开发的一款定理证明器。它采用 MIT 许可证 进行授权。Windows 二进制发行版包含 C++ 运行时可再分发组件。 如果你不熟悉 Z3，可以从这里开始了解。 稳定版和 nightly 版本的预编译二进制文件可在此处获取。 Z3 可以使用 Visual Studio1、Makefile2、CMake3、vcpkg4 或 Bazel5 构建。它还为多种编程语言提供了绑定6。 有关 Z3 各个稳定版本的说明，请参阅发布说明。 构建状态 Pull Request 和 Push 工作流 WASM 构建| Windows 构建| CI| OCaml 绑定...

awesome-web-security

Awesome Web Security - ZH 🐶 Curated list of Web Security materials and resources. Needless to say, most websites suffer from various types of bugs which may eventually lead to vulnerabilities. Why would this happen so often? There can be many factors involved including misconfiguration, shortage ...

punk.py

punk.py unix SSH post-exploitation 1337 tool how it works punk.py is a post-exploitation tool meant to help network pivoting from a compromised unix box. It collect usernames, ssh keys and known hosts from a unix system, then it tries to connect via ssh to all the combinations found. punk.py is...

tcpcopy

TCPCopy - A TCP Stream Replay Tool TCPCopy is a TCP stream replay tool for realistic testing of Internet server applications. Getting to Know TCPCopy An Overview of TCPCopy for Beginners A General Overview of TCPCopy Architecture TCPCopy Testing Use Cases TCPCopy Pre-Warming Examples Description...

keycloak

Gestión de identidad y acceso de código abierto Añade autenticación a aplicaciones y protege servicios con el mínimo esfuerzo. No necesitas ocuparte de almacenar usuarios ni de autenticarlos. Keycloak proporciona federación de usuarios, autenticación sólida, gestión de usuarios, autorización de...

Analysis

检测工程笔记与分析 此仓库记录了基于实验室测试、日志分析和真实SOC工作流的实操检测研究。 重点在于攻击技术在实际日志中的呈现方式、哪些检测逻辑在实践中有效、哪些会失效，以及误报在何处产生。所有内容均从防御视角编写，面向分析师和检测工程师。 这不是攻击性工具或漏洞利用开发。 此仓库包含的内容 DLL劫持与侧载 针对Windows系统上DLL劫持与侧载活动的分析与检测笔记。 涵盖的主题： 合法可执行文件如何加载恶意DLL 侧载过程中常被滥用的常见执行路径 进程执行、文件创建与镜像加载事件之间的关联 基于行为的检测逻辑，而非文件名匹配 真实测试中观察到的误报 已识别的常见误报：...

airborn-IOS-CVE-2025-24252

iOS "Airborne" 漏洞 - 日志人工产物提取器 该脚本旨在通过查询来自 .logarchive 包的 iOS 系统日志，帮助识别 "Airborne" 漏洞集（主要影响 Apple 的 AirPlay 协议）的潜在痕迹。它自动执行多个定制的 log show 命令，以发现可能与此类漏洞相关的异常。 免责声明： 本工具仅供信息调查目的。存在匹配这些查询的日志条目并不明确确认已被入侵。日志条目应结合上下文分析。未发现结果并不保证设备安全。请始终确保您的设备已更新到最新的操作系统版本。 关于作者与项目 该脚本由 Anton Shustikov...

CVE-2026-3576

CVE-2026-3576 - Plugin de WordPress Planyo Online Reservation System -f --disable-check python exploit.py http://127.0.0.1/wordpress/ -f /etc/passwd...

authproof-sdk

AuthProof SDK AuthProof 是一种面向代理型 AI 的加密授权协议。该领域的大多数协议都基于操作员定义的策略执行——赋予操作员在事后扩展或重新解释用户原始意图的权力。AuthProof 基于不同的信任模型构建：用户自己的私钥签署控制执行的授权对象，并且在授权时和执行前立即验证实时模型状态。用户签署的权限与实时模型状态门控的结合是具体的主张——而非广泛的执行叙事。 不同之处在于： 用户是签署权威。 每个竞争协议（AIP、AITH、OAP、SAGA、AgentSpec）都基于操作员定义的策略执行。在 AuthProof...

droidlysis

DroidLysis DroidLysis is a pre-analysis tool for Android apps : it performs repetitive and boring tasks we'd typically do at the beginning of any reverse engineering. It disassembles the Android sample, organizes output in directories, and searches for suspicious spots in the code to look at. The...

SSRFire

SSRFIRE Un buscador automatizado de SSRF. Solo dale el nombre del dominio y tu servidor y ¡relájate! ; También tiene opciones para encontrar XSS y redirecciones abiertas. Sintaxis ./ssrfire.sh -d domain.com -s yourserver.com -f customfile.txt -c cookies domain.com --- El dominio que quieres proba...

zeek-spicy-wireguard

zeek-spicy-wireguard This package provides a Spicy based Wireguard protocol analyzer for Zeek. You must install Spicy to use this package. This is a straightforward implementation following https://www.wireguard.com/protocol/ Wireguard Wireguard Logs separator \x09 setseparator , emptyfield empty...

cve-2021-22005-exp

cve-2021-22005-exp 0x01 Vulnerability Overview On September 21, 2021, VMware released a security advisory disclosing 19 security vulnerabilities in vCenter Server, with CVSSv3 scores ranging from 4.3 to 9.8. Among them, the most critical vulnerability is an arbitrary file upload vulnerability in...

domdig

DOMDig DOMDig is a DOM XSS scanner that runs inside the Chromium web browser and it can scan single page applications SPA recursively. Unlike other scanners, DOMDig can crawl any webapplication including gmail by keeping track of DOM modifications and XHR/fetch/websocket requests and it can...