7441 matches found
dump1090
Dump1090 README Dump 1090 is a Mode S decoder specifically designed for RTLSDR devices. The main features are: Robust decoding of weak messages, with Dump1090 many users observed improved range compared to other popular decoders. Network support: TCP30003 stream MSG5..., Raw packets, HTTP. Embedd...
CTF-s-Tools
Repository to index interesting Capture The Flag tools and other stuff. Table of Contents Platforms to practice Cryptography Main Secondary Hashes Esoteric Languages Steganography OSINT Threat Hunting Forensics Reversing Exploiting Pentesting Recon Web Exploit Database Docker Credentials CVE...
API-s-for-OSINT
APIs For OSINT This is a Collection of APIs that will be useful for automating various tasks in OSINT. Instruction for total beginners: OSINT automation: using сustom functions for working with API requests in Google Sheets Thank you for following me! https://cybdetective.com Table of contents AP...
HTTP-revshell
Powershell HTTP/S Reverse Shell HTTP-revshell is a tool focused on redteam exercises and pentesters. This tool provides a reverse connection through the http/s protocol. It uses a covert channel to gain control over the victim machine through web requests and thus evade solutions such as IDS, IPS...
CVE-2025-42957-SAP-S-4HANA-Under-Siege
CVE-2025-42957-SAP-S-4HANA-Under-Siege 1 – What Happened? In August 2025, SAP’s flagship ERP platform S/4HANA was found to expose a vulnerability in one of its RFC‑enabled function modules. Attackers who possess only low‑privileged access can inject arbitrary ABAP code into that module, bypassing...
subjack
subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...
datadome-vm-internals
DataDome VM DataDome embeds a custom VM in their bundle to hide what they're actually doing. I got curious and pulled it apart. Sharing it here for anyone who's interested in the same kind of reverse engineering puzzle. DataDome ships a heavily obfuscated JavaScript bundle to your browser. Inside...
CVE-2026-35001
The OpenS100 software (through commit daa35b ) is vulnerable to an integer overflow within the S-102 Bathymetric Surface parser . The root cause is the unvalidated multiplication of numPointsLatitudinal and numPointsLongitudinal values in the S102_VG_BathymetryCoverage::Read() function. By provid...
EUVD-2026-98233
OpenS100 through commit daa35b contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser that allows remote attackers to cause a heap-based buffer overflow by opening a crafted S-102 HDF5 file with malicious grid dimension metadata. Attackers can exploit the unvalidated...
CVE-2026-89121
SAP S/4HANA is vulnerable to a missing authorization check within the Linear Asset Management RAP Business Object . The root cause is the system's failure to perform sufficient instance-level authorization checks during certain modification operations on associated business object data. An attack...
EUVD-2026-98200
SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on associated business object data. An attacker with low privileges and local access to the system could bypass authorization checks to modify data belonging to objects they are not...
CVE-2026-89107
The SAP S/4HANA (Manage Substitution/Validation Rules) component is vulnerable to a Code Injection vulnerability (CWE-94). The issue stems from insufficient validation of input processed by rule definition functionality that uses a domain-specific scripting language. An authenticated attacker wit...
EUVD-2026-98190
SAP S/4HANA Manage Substitution/Validation Rules does not sufficiently validate input processed by rule definition functionality that utilizes a domain-specific scripting language. An authenticated attacker with specific business privileges could submit specially crafted input, which is interpret...
POC-S
POC-S: POC-T Strengthen Version POC-T Enhanced Edition Documentation for POC-T wiki is in the doc directory Preface: Currently Legal Disclaimer Using POC-S to attack targets without prior mutual consent is illegal. POC-S is intended for security testing purposes only. Features Compatible with POC...
msnm-sensor
Description MSNM-S Multivariate Statistical Network Monitoring-Sensor shows the practical suitability of the approaches found in PCA-MSNM and in Hierarchical PCA-MSNM works. The first one present the MSNM approach and new multivariate statistical methodology for network anomaly detection while th...
Arkhota
Arkhota, a web brute forcer for Android What? Arkhota is a web HTTP/S brute forcer for Android OS. Why? A web brute forcer is always in a hacker's computer, for obvious reasons. Sometimes attacks require to be quick or/and with minimal device preparation. Also a phone takes less attention rather...
CVE-2026-45447
🚨 CVE-2026-45447 - Critical OpenSSL Use-After-Free Vulnerability Heap Use-After-Free in PKCS7verify allowing memory corruption, crashes, and potential remote code execution. 📖 Executive Summary CVE-2026-45447 is a critical vulnerability in OpenSSL's PKCS7 verification functionality. The flaw exis...
Digisol-DG-GR1321-s-Password-Storage-in-Plaintext-CVE-2024-4232
Digisol-DG-GR1321-s-Password-Storage-in-Plaintext-CVE-2024-4232...
hakuin
Hakuin is a Blind SQL Injection BSQLI optimization and automation framework written in Python 3. It abstracts away the extraction logic and allows users to easily and efficiently dump databases from vulnerable web applications. To speed up the process, Hakuin utilizes a variety of optimization...