deadfinder

Find dead-links broken links Documentation • Installation • Github Action • Contributing • Changelog Dead link broken link means a link within a web page that cannot be connected. These links can have a negative impact to SEO and Security. This tool makes it easy to identify and modify. Looking f...

deadfinder

Find dead-links broken links Documentation • Installation • Github Action • Contributing • Changelog Dead link broken link means a link within a web page that cannot be connected. These links can have a negative impact to SEO and Security. This tool makes it easy to identify and modify. Looking f...

RegPwn

RegPwn Exploit pour article de blog - https://www.mdsec.co.uk/2026/03/rip-regpwn/ Code d'exploitation pour LPE élévation de privilèges locale sur les clients et serveurs Windows Versions testées : Windows 11 25h2 Windows 11 24h2 Windows 10 21h2 Windows Servers 2016/2019/2022 Suivi sous la référen...

IronFox

IronFox F-Droid QR Code: IronFox is a fork of Divested Computing Group's Mull Browser, based on Mozilla Firefox. Our goal is to continue the legacy of Mull by providing a free and open source, privacy and security-oriented web browser for daily use. !TIP Find a bug? Encounter an annoying problem?...

lightweight_static_analysis

Analyse statique légère Ce dépôt contient le code de preuve de concept PoC d'une présentation à ShellCon 2019, « Rolling Your Own: How to Write Custom, Lightweight Static Analysis Tools » diapositives. En résumé, ce dépôt démontre quelques exemples concrets de la manière dont vous pouvez construi...

PadBuster

PadBuster - Automated script for performing Padding Oracle attacks Author: Brian Holyfield - Gotham Digital Science [email protected] Credits to J.Rizzo and T.Duong for providing proof of concept web exploit techniques and S.Vaudenay for initial discovery of the attack. Credits also to James...

ToolsFx

ToolsFx English|中文 Visitors :eyes: Function Encoding wiki base64 urlBase64 base16/32/36/45/58/62/85/91/92/100 base58check UrlEncode Unicode js hex\x61/js octal\140 binary/octal/decimal/hex custom base serial dict puny code quote printable uuEncode xxEncode escape/escapeAll auto decodecrack...

bitlocker-attacks

Attaques contre BitLocker Une liste d'attaques publiques contre BitLocker. Toute attaque publique ayant le potentiel d'attaquer BitLocker mais dont la méthode exacte n'est pas encore publique comme baton drop est hors du périmètre. La plupart des attaques concernent les cas où le VMK est scellé p...

behave

Behave! A Still in Development monitoring browser extension for pages acting as bad boys. NB : This is the code repository of the project, if you're looking for the packed extensions: Firefox: https://addons.mozilla.org/en-US/firefox/addon/behave/ Chrome:...

trailmark

Trailmark Parse source code into queryable graphs of functions, classes, calls, and semantic annotations for security analysis. Trailmark uses tree-sitter for language-agnostic AST parsing and rustworkx for high-performance graph traversal. The long-term vision is to combine this graph with...

CVE-2026-63077

Exécution de code à distance non authentifiée dans JetBrains TeamCity CVE-2026-63077 Présentation Il s'agit d'un script d'exploit de preuve de concept pour CVE-2026-63077. Les organisations peuvent utiliser ce script pour valider leur posture de détection et de remédiation. Pour une analyse...

pbscan

SUMMARY polarbearscan is an attempt to do faster and more efficient banner grabbing and port scanning. It combines two different ideas which hopefully will make it somewhat worthy of your attention and time. The first of these ideas is to use stateless SYN scanning using cryptographically protect...

kanha

Kanha - A web-app pentesting suite written in rust 🦀 Installation ⦾ Subcommands ⦾ Contribute !-----------------------------------------------------line Kanha is a tool that can help you perform, a variety of attacks based on the target domain . With just kanha you can do, Fuzzingwiki-fuzzing,...

rikune

Rikune Rikune is an MCP server for reverse engineering Windows executables and related binary formats. It combines sample intake, static triage, Ghidra-assisted function recovery, plugin-driven specialist tooling, artifact management, and optional isolated Windows runtime execution behind a Model...

Aker

Aker SSH Gateway What is Aker? Aker is a security tool that helps you configure your own Linux ssh jump/bastion host. Named after an Egyptian mythology deity who guarded the borders, Aker would act as choke point through which all your sysadmins and support staff access Linux production servers...

vcamper

VCamper VCamper "Version Camper" is a proof-of-concept CLI that reviews a Git commit range for likely silent security fixes. Security fixes often reach public Git history before the advisory trail catches up. A maintenance-looking commit can carry enough evidence for a reviewer to infer the bug...

inteno-exploits

براهين المفهوم والاستغلالات لأجهزة IOPSYS هذه مجموعة من البرامج النصية التي تستغل ثغرات متنوعة على الأجهزة التي تعمل بنظام Inteno's IOPSYS. يمكن العثور على مزيد من التفاصيل حول كل ثغرة على مدونتي. تم اختبار هذه البرامج النصية على Linux فقط، ولكنها قد تعمل أيضًا على أنظمة تشغيل أخرى. المتطلبات تتط...

ProcessStomping

ProcessStomping A variation of ProcessOverwriting to execute shellcode on an executable's section What is it For a more detailed explanation you can read my blog post Process Stomping, is a variation of hasherezade’s Process Overwriting and it has the advantage of writing a shellcode payload on a...

CVE-2019-0192

CVE-2019-0192 - Apache Solr RCE من 5.0.0 إلى 5.5.5 ومن 6.0.0 إلى 6.6.5 هذا هو Proof of Concept مبكر لثغرة Apache Solr RCE من https://issues.apache.org/jira/browse/SOLR-13301: تتيح ConfigAPI إمكانية تكوين خادم JMX الخاص بـ Solr عبر طلب HTTP POST. من خلال توجيهه إلى خادم RMI خبيث، يمكن للمهاجم...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...