jadx-ai-mcp

JADX-AI-MCP（Zin MCP Suite 的一部分） ⚡ 全自动 MCP 服务器 + JADX 插件，通过 MCP 与 LLM 通信，使用 Claude 等 LLM 分析 Android APK — 轻松发现漏洞、分析 APK 并进行逆向工程。 ⭐ 贡献者 感谢这些出色的贡献者 ⭐ ljt270864457 | p0px | bx33661 | Haicaji | !https://assets.kitploit.com/production/pub...

forticrack_v8

Forticrack v8.0.0 Descifra y extrae imágenes de firmware de FortiOS 8.0.0. Este script extiende Forticrack de Bishop Fox para soportar imágenes de firmware 8.0.0. Además, el artículo de RandoriSec sobre el cifrado de firmware de FortiGate 7.4.7 fue muy útil para revertir el cifrado de FortiOS...

sdnpwn

What is sdnpwn? sdnpwn is a toolkit and framework for testing the security of Software-Defined Networks SDNs. For more information check out this article: https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ Installation First download sdnpwn using git root@kitploit: git clone...

liffy

Advanced LFI Exploitation Tool A powerful Python tool for Local File Inclusion LFI exploitation with advanced features including WAF bypass, encoding techniques, and comprehensive vulnerability detection. Liffy v2.0 is the significantly enhanced version of liffy which was originally created by...

CVE-2026-9198

CVE-2026-9198 Causa de la vulnerabilidad: IBM Langflow OSS es un software de código abierto diseñado específicamente para construir y desplegar flujos de trabajo automatizados de agentes IBM Langflow OSS 1.0.0 a 1.10.0 tiene el inicio de sesión automático habilitado por defecto autologin es true ...

Shadowbroker

🛰️ S H A D O W B R O K E R 全球威胁拦截 — 实时地理空间情报平台 ShadowBroker ShadowBroker 是一个去中心化情报平台，聚合来自 60 余个实时情报源的跨域 OSINT 遥测数据，整合至单一暗黑行动地图界面。飞机、船舶、卫星、冲突区域、CCTV 网络、GPS 干扰、联网设备、警用扫描仪、网状无线电节点以及突发地缘政治事件——均在同一个屏幕上实时更新，同时提供模糊化通信协议和信息交换基础设施。 🛰️ 项目描述 基于 Next.js 、MapLibre GL 、FastAPI 和 Python 构建。提供 40+ 个可切换数据层，包括 SAR...

CVE-Requests-1896609

Solicitudes CVE 1896609 - feiskyer/mcp-kubernetes-server Resumen Ejecutivo Este informe detalla dos vulnerabilidades de seguridad críticas descubiertas en el paquete feiskyer/mcp-kubernetes-server. Cuando se despliega, el servidor expone una herramienta MCP llamada kubectl que está diseñada para...

CVE-2024-46507

The script was tested and built on Ubuntu Server 20.04 LTS, while Kali Linux was used for exploitation and walkthrough. This walkthrough guides you through exploiting the vulnerable server containing CVE-2024-46507 command injection and CVE-2024-46508 authentication bypass vulnerabilities. Initia...

mailchecker

MailChecker 跨语言电子邮件验证。基于一个包含超过55,000个临时电子邮件域名 的数据库。 验证电子邮件格式（底层使用 validator.js 的电子邮箱正则表达式，PHP 使用 FILTERVALIDATEEMAIL） 验证电子邮件是否为临时邮箱 （类似 yopmail...，将您自己的数据集添加到 list.txt） 当您需要联系用户时，这将非常有用，可以避免因错误导致沟通不畅，或者屏蔽“垃圾邮箱”。 赞助商 有兴趣赞助吗？ 联系我们 升级 从 3.x 到 4.x PHPphp import using the fully qualified name. use...

CVE-2026-55040

Omisión de Autenticación JWT de Microsoft SharePoint CVE-2026-55040 Resumen CVE-2026-55040.py es un script de prueba de concepto para explotar la vulnerabilidad de omisión de autenticación de SharePoint, CVE-2026-55040. Para un análisis técnico completo, consulte nuestro Análisis de Rapid7. Uso...

msticpy

MSTIC Jupyter and Python Security Tools Microsoft Threat Intelligence Python Security Tools. msticpy is a library for InfoSec investigation and hunting in Jupyter Notebooks. It includes functionality to: query log data from multiple sources enrich the data with Threat Intelligence, geolocations a...

React2Shell

⚛️ React2Shell CVE-2025-55182 Kit de explotación avanzado para Server Actions de Next.js CVE-2025-55182. React2Shell es un potente envoltorio de shell interactivo diseñado para explotar la vulnerabilidad React2Shell. Va más allá de un simple RCE al proporcionar historial de comandos, capacidades d...

xencrypt

Xencrypt PowerShell crypter v 1.0 Authors Xentropy @SamuelAnttila SecForce @SECFORCELTD If you want to read about the design behind this tool and how to make your own crypter, there's an article I wrote about it here: Write a crypter in any language Note Don't be a script kiddie, I made this GPLv...

awesome-connected-things-sec

🔐 Awesome Connected Things Security Resources Investigación de seguridad y técnicas de explotación para sistemas IoT, embebidos, industriales y automotrices. !https://img.shields.io/badge/%F0%9F%A4%96ROBOTIC...

EUVD-2026-87245

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, a security filter that protects Zammad's AI Agent configuration can be bypassed by entering specially crafted text into one of an AI Agent's fields. An administrator with permission to create or edit AI Agents cou...

CVE-2026-84462 Zammad: AI Agent template sanitizer bypass leads to remote code execution

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, a security filter that protects Zammad's AI Agent configuration can be bypassed by entering specially crafted text into one of an AI Agent's fields. An administrator with permission to create or edit AI Agents cou...

CVE-2026-84462 Zammad: AI Agent template sanitizer bypass leads to remote code execution

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, a security filter that protects Zammad's AI Agent configuration can be bypassed by entering specially crafted text into one of an AI Agent's fields. An administrator with permission to create or edit AI Agents cou...

detection-rules

Detection Rules Detection Rules is the home for rules used by Elastic Security. This repository is used for the development, maintenance, testing, validation, and release of rules for Elastic Security’s Detection Engine. This repository was first announced on Elastic's blog post, Elastic Security...

pcileech

PCILeech Summary: PCILeech uses PCIe hardware devices to read and write target system memory. This is achieved by using DMA over PCIe. No drivers are needed on the target system. PCILeech also works without hardware together with a wide range of software memory acqusition methods supported by the...

pcileech

PCILeech 概述: PCILeech 使用 PCIe 硬件设备来读写目标系统内存。这是通过使用 PCIe 上的 DMA 实现的。目标系统上无需驱动程序。 PCILeech 在没有硬件的情况下也能与 LeechCore 库支持的多种软件内存获取方法配合使用——包括使用 DumpIt 或 WinPmem 捕获远程实时内存。PCILeech 还支持本地内存捕获以及多种内存转储文件格式。 PCILeech 支持多种内存获取设备，包括基于硬件和软件的。基于 USB3380 的硬件仅能原生读取 4GB 内存，但如果首先将内核模块（KMD）插入目标系统内核，则可以读取所有内存。基于 FPGA...