8267 matches found
NxRansomware
NxRansomware A next generation of ransomware. Fully written using a .Net Framework + C&C System Created By: Guilherme Bacellar Moralez Disclaimer This code is created and maintened only for a research proposal. Please do not use for other proposes. Please, do not run the code with a release...
ronin
ronin Website Source Issues Documentation Discord | Mastodon Description Roninwebsite is a free and Open Source Ruby toolkit for security research and development. Ronin contains many different CLI commands and Ruby librariesronin-rb for a variety of security tasks, such as encoding/decoding data...
TagTinker
TagTinker V2.1 Infrared ESL Research Toolkit for Flipper Zero Protocol study • Signal analysis • Digital Art → Launch the TagTinker Image Prep web app ← Overview TagTinker is a Flipper Zero app for exploring infrared electronic shelf-label ESL protocols. It allows you to transmit custom images an...
ironcurtain
IronCurtain A secure runtime for autonomous AI agents, where security policy is derived from a human-readable constitution. When someone writes "secure," you should immediately be skeptical.What do we mean by secure? !WARNING Research Prototype. IronCurtain is an early-stage research project...
public-research
Nokia Deepfield ERT — public research Threat research from the Nokia Deepfield Emergency Response Team ERT, focused on DDoS botnets and related infrastructure. Each directory covers a botnet family with a brief summary and machine-readable indicators of compromise IoCs. This repo consolidates pri...
mininode
Mininode Mininode is a CLI tool to reduce the attack surface of the Node.js applications by using static analysis of source code. It supports two modes of reduction 1 coarse, 2 fine. Mininode constructs the dependency graph modules and functions used of the application starting from main file, i....
xortool
xortool.py A tool to do some xor analysis: guess the key length based on count of equal chars guess the key base on knowledge of most frequent char Notice: xortool is now only running on Python 3. The old Python 2 version is accessible at the py2 branch. The pip package has been updated...
CVE
Proof-of-Concept Exploits Repository This repository contains my own collection of proof-of-concept PoC exploits created for security testing and research purposes. Each folder is organized by CVE identifier for example: CVE-2025-XXXX/, and inside you will find the corresponding exploit code and...
cryptography-research-demo
Artifacts for "Further Single-Key Recovery Attacks on Reduced-Round AES" Source code for every experiment quoted in the paper. No measurement output or prebuilt table is bundled: each program prints or writes its own results, so every number can be regenerated from scratch. directory| what it is...
security-research
Security Research Vulnerability research write-ups. Every entry here corresponds to a fixed, publicly tracked issue — no theoretical findings. Adel Bouachraoui — hydrasecurity.fr/v10/ · LinkedIn · YesWeHack Published Write-up| Target| Class| ID ---|---|---|--- When a security patch guards the wro...
exploits
Exploits Miscellaneous proof of concept exploit code written at Xiphos Research for testing purposes. Current Exploits index may be out of date phpMoAdmin Remote Code Execution CVE-2015-2208 LotusCMS Remote Code Execution OSVDB-75095 ElasticSearch Remote Code Execution CVE-2015-1427 ShellShock...
pocs
pocs we will release pocs in this repo all bugs in this repo are responsibly disclosed...
tomcat_CVE-2018-1304_testing
This repository does not have a README...
ExtractedDefender
Just an attempt to group extracted data from Defender for research purposes. Orginal research from commial on LUA/VDM https://github.com/commial/experiments/tree/master/windows-defender WDextract https://github.com/hfiref0x/WDExtract...
Awesome-BEC
Awesome-BEC Repository of attack and defensive information for Business Email Compromise investigations Office365/AzureAD ATT&CK O365 ATT&CK Azure Microsoft Azure Threat Research Matrix Microsoft 365 Licensing Microsoft Portals Azure App IDs Microsoft First Party App IDs & Graph Permissions...
vsftpd-cve-2011-2523-detection-signature
Detection Engineering & Vulnerability Research - CVE-2011-2523 vsftpd 2.3.4 A CVE to Detection Signature Engineering Project: researching a disclosed vulnerability, building a fingerprint that identifies it externally, and validating detection quality against real lab targets. !Vulnerability...
vulnerability-research
This repository does not have a README...
awesome-hacker-search-engines
Awesome Hacker Search Engines A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more General • Servers • Vulnerabilities • Exploits • Attack surface • Code • Email addresses • Domains • URLs • DNS •...
RAT-via-Telegram
This is not maintained by me any more. For the latest maintained version, check out https://github.com/mvrozanti/RAT-via-Telegram. Disclaimer: This tool and any of its forks are for education/research purposes only. The authors take NO responsibility and/or liability for how you choose to use any...