WinRar_ACE_exploit_CVE-2018-20250

Exploit ACE de WinRar CVE-2018-20250 Ce programme est un script développé en Python qui exploite la vulnérabilité ACE de WinRar - Vulnérabilité CVE-2018-20250 Il est basé sur un projet précédent développé par WyAtu Il est utilisé à des fins éducatives sur le blog de Daniel Vispo Comment générer...

monsoon

monsoon A fast HTTP enumerator that allows you to execute a large number of HTTP requests, filter the responses and display them in real-time monsoon is a fast and flexible HTTP fuzzer that can be used for a wide variety of actions ranging from content discovery to credential bruteforcing. You ca...

autotimeliner

AutoTimeliner Automagically extract forensic timeline from volatile memory dumps. AutoTimeliner runs multiple Volatility3 plugins against Windows, Linux, and macOS memory images, then merges their output into a single, sorted CSV timeline: Generic Timeline Plugin Plugin| What it captures ---|---...

haxunit

Intro • Installation • Usage • Running HaxUnit • Functions HaxUnit.com Join the Discord! 📘Intro HaxUnit is a Python-based comprehensive reconnaissance and security assessment tool for web domains. It integrates various tools for subdomain enumeration, port scanning, vulnerability scanning, and...

box-js

box.js A utility to analyze malicious JavaScript. Installation Simply install box-js from npm: npm install box-js --global box-js is also available: as a Cuckoo module see the integrations directory and Nwinternights/CuckooBoxjs; as a Dockerfile see integrations/README.md; as a package in distros...

T3MP3ST

🌩️ T3MP3ST 🌩️ ▄▄▄█████▓▓█████ ███▄ ▄███▓ ██▓███ ▓█████ ██████ ▄▄▄█████▓ ▓ ██▒ ▓▒▓█ ▀ ▓██▒▀█▀ ██▒▓██░ ██▒▓█ ▀ ▒██ ▒ ▓ ██▒ ▓▒ ▒ ▓██░ ▒░▒███ ▓██ ▓██░▓██░ ██▓▒▒███ ░ ▓██▄ ▒ ▓██░ ▒░ ░ ▓██▓ ░ ▒▓█ ▄ ▒██ ▒██ ▒██▄█▓▒ ▒▒▓█ ▄ ▒ ██▒░ ▓██▓ ░ ▒██▒ ░ ░▒████▒▒██▒ ░██▒▒██▒ ░ ░░▒████▒▒██████▒▒ ▒██▒ ░ ▒ ░░ ░░ ▒░ ░░...

DotNetHookerToolkit

InjectorCli + ManagedHookHostProj This repository contains two projects that are designed to be used together: InjectorCli: A .NET Framework 4.8 console injector built on frida-clr Frida.dll ManagedHookHostProj: A .NET Framework 4.8 helper DLL with native exports via 3F .NET DllExport used to...

CVE-2025-51529

CVE-2025-51529 : Vulnérabilité DoS dans le plugin WordPress Cookies and Content Security Policy Un contrôle d'accès incorrect dans la fonctionnalité de point de terminaison AJAX du plugin Cookies and Content Security Policy de jonkastonka versions jusqu'à 2.29 permet à des attaquants distants de...

phantom-brain

PHANTOM BRAIN v0.9 Offline AI-powered pentesting analysis tool with real hardware integration Local LLM analysis via Ollama for WiFi, Sub-GHz, NFC/RFID and WPA2 captures — no internet required, no cloud APIs, 100% offline. The main LLM runs on a Windows PC. The Raspberry Pi acts as a lightweight...

zeek-spicy-openvpn

zeek-spicy-openvpn Ceci est un analyseur de protocole qui détecte le trafic OpenVPN. Vous devez installer Spicy pour utiliser ce paquet. Blogs et webinaires détaillant le développement de cet analyseur de protocole : https://zeek.org/2021/03/16/a-zeek-openvpn-protocol-analyzer/...

keelog-bof

KeeLog Async BOF that captures the KeePass master password by monitoring for the unlock prompt window. When a locked KeePass database is detected, a low-level keyboard hook is installed and keystrokes are captured until the prompt window disappears by being submitted, cancelled or closeed. The...

msmap

MSMAP Msmap هو مولد ويب شيل ذاكري. متوافق مع العديد من الحاويات والمكونات والمشفّر، ويب شيل / بروكسي / كيلر وعملاء الإدارة. الصينية المبسطة الفكرة وراء الجزء الأول, الفكرة وراء الجزء الثاني, الفكرة وراء الجزء الثالث الميزات قيد التطوير الوظيفة القائمة الديناميكية التجميع التلقائي إنشاء سكريبت الو...

msmap

MSMAP Msmap is a Memory WebShell Generator. Compatible with various Containers, Components, Encoder, WebShell / Proxy / Killer and Management Clients. 简体中文 The idea behind I, The idea behind II, The idea behind III Feature WIP Function Dynamic Menu Automatic Compilation Generate Script Lite Mode...

CVE-2025-54100

CVE-2025-54100 La commande curl de PowerShell utilise Invoke-WebRequest en arrière-plan. PS C:\Users\melih curl cmdlet Invoke-WebRequest at command pipeline position 1 Supply values for the following parameters: Uri:...

apk-info

apk-info A full-featured apk parser. Features A malware-friendly zip extractor. Great article about BadPack technique; A malware-friendly axml and arsc extractor; A full AXML Android Binary XML implementation; A full ARSC Android Resource implementation; Support for extracting information contain...

APTSimulator

APT Simulator Important: Don't just ZIP download or clone the repo if you don't plan to develop some test. Use the package in the release which contains a packaged version with encrypted archives that don't contain cleartext samples and tools. APT Simulator is a Windows Batch script that uses a s...

zeek-spicy-stun

STUN Session Traversal Utilities for NAT STUN هذا محلل بروتوكول Zeek يكتشف STUN بناءً على Spicy. يجب تثبيت Spicy لاستخدام هذه الحزمة. ستنشئ هذه الحزمة سجلّين: stun.log - يحتوي هذا السجل على كل رسالة STUN. stunnat.log - يحتوي هذا السجل على اكتشافات NAT من العناوين المعيّنة mapped addresses. تمت...

zeek-spicy-stun

STUN Session Traversal Utilities for NAT STUN This is a Zeek protocol analyzer that detects STUN based on Spicy. You must install Spicy to use this package. This package will create two logs: stun.log - This log has every STUN message. stunnat.log - This log has NAT detections from mapped...

CVE-2026-89100

The Payment Plugins for Stripe WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'response' URL Fragment in all versions up to, and including, 4.0.17 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers...

frida-ui

Frida UI A modern, lightweight, web-based user interface for Frida, designed for Android application penetration testing. It allows you to interact with devices, processes, and scripts directly from your browser. Quick Start Install using uv recommended or pipx/pip uv tool install frida-ui Or: pi...