medusa

🐍 MEDUSA - Escáner de Seguridad IA Escáner de seguridad centrado en IA con más de 40.000 patrones de detección para aplicaciones de IA/ML, agentes y LLM. 🤖 Funciona de inmediato: no requiere instalación de herramientas. 🚨 200 CVEs: Log4Shell, Spring4Shell, XZ Utils, LangChain RCE, MCP-Remote RCE,...

snmpwn

SNMPwn is an SNMPv3 user enumerator and attack tool. It is a legitimate security tool designed to be used by security professionals and penetration testers against hosts you have permission to test. It takes advantage of the fact that SNMPv3 systems will respond with "Unknown user name" when an...

exist

EXIST EXternal Information aggregation System against cyber Threat ⚠️ This repository is unmaintained / archived. Security issues will not be fixed. EXIST is a web application for aggregating and analyzing CTI cyber threat intelligence. EXIST is written by the following software. Python 3 Django...

LuLu

LuLu 简体中文 | 正體中文 LuLu is the free open-source macOS firewall: Documentation: Full details and usage instructions can be found here. To Support: ❤ Love this product and want to support it? Please check out my patreon page...

path-auditor

PathAuditor The PathAuditor is a tool meant to find file access related vulnerabilities by auditing libc functions. The idea is roughly as follows: Audit every call to filesystem related libc functions performed by the binary. Check if the path used in the syscall is user-writable. In this case a...

jok3r

.. raw:: html .. image:: ./pictures/logo.png .. raw:: html Jok3r v3 beta .. image:: https://img.shields.io/badge/python-3.6-blue.svg :target: https://www.python.org/downloads/release/python-366/ :alt: Python 3.6 .. image:: https://readthedocs.org/projects/jok3r/badge/?version=latest :target:...

emba

EMBA The security analyzer for firmware of embedded devices EMBA is designed as the central firmware analysis and SBOM tool for penetration testers, product security teams, developers and responsible product managers. It supports the complete security analysis process starting with firmware...

apk-interceptor

apk-interceptor Android deeplink, Intent, and WebView bridge assessment helper apk-interceptor is a portable Android testing APK for authorized application security assessments. It helps security engineers verify how an Android app handles external entry points such as custom URI schemes,...

CVE-2026-23004-Automotive-UDS-Authentication-Bypass-via-Replay-Attack

CVE-2026-23004 – Omisión de autenticación UDS en automoción mediante ataque de repetición Código del programa simulador Python CAN‑UDS udssim.py - ECU that authenticates with a simple challenge import random, hashlib class ECU: def initself: self.secret = b'longsecretkey' def generatechallengesel...

postfetch

postfetch Postfetch posture fetch is a fastfetch-style privacy and security audit tool for Linux, written in rust. Instead of cosmetic system info, postfetch shows whether your system is configured to support privacy, security, local control, and digital sovereignty. Modules Module| Checks ---|--...

linux-kernel-exploitation

Explotación del Kernel de Linux Una colección de enlaces relacionados con la seguridad y explotación del kernel de Linux. Actualizado cada dos meses. Las pull requests también son bienvenidas. Sigue a @andreyknvl en X, @[email protected] en Mastodon, o @andreyknvl en Bluesky para recibir...

CVE-2018-8420

CVE-2018-8420...

st

ST Smart Things ST Smart Things Sentinel es una herramienta de seguridad avanzada diseñada específicamente para examinar y detectar amenazas dentro de los intrincados protocolos utilizados por los dispositivos IoT Internet de las cosas. En el panorama en constante expansión de los dispositivos...

st

ST Smart Things ST Smart Things Sentinel is an advanced security tool engineered specifically to scrutinize and detect threats within the intricate protocols utilized by IoT Internet of Things devices. In the ever-expanding landscape of connected devices, ST Smart Things Sentinel emerges as a...

svja

svja La RDPS Super Vulnerable Java Application es exactamente eso: una aplicación Java súper vulnerable creada para que todos puedan ver una variedad de vulnerabilidades comunes y, a menudo, "complejas". Este software se creó como parte del Roniel and DaRon Podcast Show...

h4cker

This repository is a comprehensive collection of cybersecurity references, scripts, tools, code, labs, and training resources. It is carefully curated and maintained by Omar Santos. Overview The repository serves as supplemental material for books, video courses, and live training created by Omar...

widevine-l3-decryptor

Deprecation Warning This repository used to contain code to circumvent Widevine L3 DRM in Chrome on Windows machines. It's not working anymore as of May 31st 2021, but you can read the reversing writeup. Update Google issued a DMCA takedown request against most forks of this repository. The...

smogcloud

☁️ Smogcloud Find exposed AWS cloud assets that you did not know you had. A comprehensive asset inventory is step one to any capable security program. We made smogcloud to enable security engineers, penetration testers, and AWS administrators to monitor the collective changes that create dynamic...

pyre-check

!WARNING This Repository Is Archived This repository is no longer maintained and has been archived. Type checking: Pyre has been replaced by Pyrefly, our next-generation Python typechecker and language server. Security analysis Pysa: Pysa has moved to its own repository at github.com/facebook/Pys...

BugId

BugId Detecta, analiza e identifica de forma única los errores de las aplicaciones. TL;DR ¿Quieres... saber qué tipo de error está causando que una aplicación se bloquee? saber si un error podría ser una vulnerabilidad de seguridad? averiguar si dos o más bloqueos son causados por el mismo error?...