Doldrums

To flutter: to move in quick, irregular motions, to beat rapidly, to be agitated. Doldrums: a period of stagnation. Doldrums is a reverse engineering tool for Flutter apps targetting Android. Concretely, it is a parser and information extractor for the Flutter/Dart Android binary, conventionally...

rails-forensics-CVE-2026-66066

rails-forensics-CVE-2026-66066 Tooling and method for answering two questions about a Rails application and CVE-2026-66066, the Active Storage and libvips arbitrary file read known as KindaRails2Shell: 1. Was I vulnerable, and for how long? 2. Was I exploited, and if so, what left the building? T...

awesome-attack-surface-management

Awesome Attack Surface Management A curated list of tools, resources, and best practices for Attack Surface Management ASM, External Attack Surface Management EASM, and continuous security monitoring. Attack Surface Management is the continuous discovery, analysis, classification, and monitoring ...

sitrep

SitRep Extensible, configurable host triage. Purpose SitRep is intended to provide a lightweight, extensible host triage alternative. Checks are loaded dynamically at runtime from stand-alone files. This allows operators to quickly modify existing checks, or add new checks as required. Checks are...

sitrep

SitRep أداة فرز مضيف قابلة للتوسع والتكوين. الغرض تهدف SitRep إلى توفير بديل خفيف وقابل للتوسع لفرز المضيف. يتم تحميل الفحوصات ديناميكيًا أثناء التشغيل من ملفات مستقلة. وهذا يسمح للمشغلين بتعديل الفحوصات الحالية بسرعة، أو إضافة فحوصات جديدة حسب الحاجة. يتم تجميع الفحوصات حسب الفئة ويمكن وضع علامة...

Exploit for CVE-2026-106445

CVE-2026-106445 — Handlebars.js RCE constructor own-property...

neo

Neo Turn any web app into an API. No official API needed. No browser automation. Neo is a Chrome extension that passively captures every API call your browser makes, learns the patterns, and lets AI or you replay them directly. The Problem AI agents operating web apps today have two options, both...

duo-agentflow-auditor

Duo AgentFlow Auditor AI Code Security — catching what SAST misses in AI-generated code Built on the GitLab Duo Agent Platform 40-62% of AI-generated code contains security vulnerabilities. Traditional SAST catches CVEs. We catch what SAST misses — prompt injection, LLM output execution, unsafe M...

SucoshScanny

Sucosh Scanny "Sucosh" is an automated Source Code vulnerability scannerSAST and assessment framework for PythonFlask-Django & NodeJs capable of performing code review in Web Application Developing or Source Code Analysis processes.It’s can detect a lot of vulnerabilityRCE,SSTI,Insecure...

Bash-Script-CVE-2019-17662

لا يحتوي هذا المستودع على ملف README...

53R3N17Y

53R3N17Y Python based script for Information Gathering. To get the details hackertarget.com is used. There is a limit of 100 API calls per day from a single IP address. Update ----- | | |--o--| ╒ 53R3N17Y ════════════════════════════════════╕ ---------´ │Python based script for Information...

sshpass-win32

sshpass-win32 Like https://linux.die.net/man/1/sshpass Pre-Requirements To run sshpass, you must install: Windows 10 Insider build 17733 or later Install Winget winget install xhcoding.sshpass-win32 Scoop scoop install sshpass Usage Usage: sshpass options command arguments -h, --help show this he...

OSINT-Search

OSINT-Search Description Script in Python that applies OSINT techniques by searching public data using email addresses, phone numbers, domains, IP addresses or URLs. Create an account at https://pipl.com/api and get the API key. Create an account at https://www.opencnam.com/ and get the Account S...

sicat

SICAT - The useful vulnerability and exploit finder SICAT is a powerful tool designed to aggregate and search for vulnerabilities and exploits from multiple high-profile sources. It simplifies the reconnaissance phase by automatically checking reputable databases based on keywords, Nmap scan...

CVE-2021-41091

CVE-2021-41091 Cet exploit offre un aperçu approfondi de la vulnérabilité de sécurité CVE-2021-41091 et fournit un guide étape par étape sur la façon d'utiliser le script d'exploitation pour obtenir une élévation de privilèges sur un hôte. Résumé de la vulnérabilité CVE-2021-41091 est une faille...

SYNwall

SYNwall Zero config IoT firewall. SYNwall is a project built for the time being as a Linux Kernel Module, to implement a transparent and no-config/no-maintenance firewall. You may want to have a look to the for an example of usage. Basics Usually IoT devices are out of a central control, with low...

mosh

Mosh : le shell mobile Mosh est une application terminal distante qui prend en charge la connectivité intermittente, permet l’itinérance, et offre un écho local spéculatif ainsi que l’édition de ligne des frappes utilisateur. Son objectif est de prendre en charge les utilisations interactives...

ulexecve

Quick Start Execute dynamic or statically compiled ELF Linux binaries without ever calling execve. cat /bin/echo | ulexecve - hello hello Introduction This Python tool is called ulexecve and it stands for userland execve. It helps you execute arbitrary ELF binaries on Linux systems from userland...

seccomp-tools

أدوات Seccomp أدوات قوية لتحليل seccomp. يهدف هذا المشروع بشكل أساسي وليس حصريًا إلى تحليل صناديق حماية seccomp في تحديات pwn في مسابقات CTF. بعض الميزات خاصة بمسابقات CTF، لكنها مفيدة بنفس القدر لتحليل مرشحات seccomp في العالم الحقيقي. الميزات Dump - يفرغ تلقائيًا BPF الخاص بـ seccomp من الملفات...

seccomp-tools

Seccomp Tools Powerful tools for seccomp analysis. This project is aimed primarily but not exclusively at analyzing seccomp sandboxes in CTF pwn challenges. Some features are CTF-specific, but they're just as useful for analyzing real-world seccomp filters. Features Dump - Automatically dumps...