CVE-2018-10732

CVE-2018-10732 Exploit-DB publication at: No disclosure! Dataiku vendor Patch and Credits: https://doc.dataiku.com/dss/latest/releasenotes/4.2.htmlsecurity Author Alex Hernandez aka @alt3kx...

PrivateSphare

PrivateSphare PrivateSphare is a secure, anonymous, zero-knowledge file storage and sharing platform. It allows users to upload files and receive a human-readable 24-word passphrase for retrieval. No accounts, no tracking, and no unencrypted data ever touches the server's persistent storage. 🛡️ Ke...

security-harness

Security Harness A multi-agent application-security review harness for Claude Code and, later, other AI agents. One router skill dispatches to a full offensive-security pipeline that maps a codebase, hunts vulnerabilities with a per-class knowledge base, chains findings into escalations, verifies...

ICS-Security-Tools

ICS Security Tools, Tips, and Trade Developed as a community asset This effort intends to pull together tools, tips, and tricks of the trade to working on cyber security in the ICS environment. The code repository will house any specific scripts, tools, configurations, or other useful tidbits to...

CVE-2019-8656

CVE-2019-8656 CVE-2019-8656 GateKeeper Bypass https://www.fcvl.net/vulnerabilities/macosx-gatekeeper-bypass...

red-kube

Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...

securityonion

Security Onion Security Onion is a free and open Linux distribution for threat hunting, enterprise security monitoring, and log management. It includes a comprehensive suite of tools designed to work together to provide visibility into your network and host activity. ✨ Features Security Onion...

objection

📱objection - Runtime Mobile Exploration objection is a runtime mobile exploration toolkit, powered by Frida, built to help you assess the security posture of your mobile applications, without needing a jailbreak. Supports both iOS and Android. Inspect and interact with container file systems...

cve-2020-13933

cve-2020-13933 cve-2020-13933 Apache Shiro privilege bypass vulnerability This reproduction is very simple. First, set up the environment using IDEA + Shiro Reference: https://www.cnblogs.com/ph4nt0mer/p/13535999.html Then run, access, and capture packets...

AndroidSecurityEvolution

Android Security Evolution Significant security enhancements of recent major Android versions, starting with Android 5.0 Lollipop API 21. Android 5.0 API 21 - Lollipop Security Enhancements - Android 5 Starting August 2023, Google Play Services updates will only be received from this Android...

sherlock

Hunt down social media accounts by username across 400+ social networks Installation • Usage • Contributing Installation !WARNING Packages for ParrotOS and Ubuntu 24.04, maintained by a third party, appear to be broken. Users of these systems should defer to uv/pipx/pip or Docker. Method| Notes...

security-research

security-research Proof-of-concept code and technical write-ups for vulnerabilities I discovered and reported through coordinated disclosure. Every entry here is already public: the vendor advisory is published and a fixed release is available. Nothing under embargo or in draft is included. The...

AzureC2Relay

AzureC2Relay AzureC2Relay is an Azure Function that validates and relays Cobalt Strike beacon traffic by verifying the incoming requests based on a Cobalt Strike Malleable C2 profile. Any incoming requests that do not share the profiles user-agent, URI paths, headers, and query parameters, will b...

Olyx

Olyx A modern Android application for comprehensive URL security analysis, combining multiple threat detection APIs with advanced domain spoofing detection to protect users from malicious websites. Screenshots Features Multi-API Security Analysis AbuseIPDB : Scans IP reputation for reported...

SecurityManageFramwork

SecurityManageFramwork-SeMF README English | 中文 Introduction SEMF is a security management platform for enterprise intranet, which includes functions of asset management, vulnerability management, account management, knowledge base management and security scanning automation. It can be used for...

ChameleonMini

ChameleonMini This is NOT the official repository of ChameleonMini, a freely programmable portable tool for NFC security analysis that can emulate and clone contactless cards, read RFID tags, and sniff/log RF data. This repository brings support for the Chameleon Tiny. Our Project is based on the...

CloudUnflare

CloudUnflare...

brakeman

Brakeman Brakeman is a static analysis tool which checks Ruby on Rails applications for security vulnerabilities. Installation Using RubyGems: gem install brakeman Using Bundler: group :development do gem 'brakeman', require: false end Using Docker: docker pull presidentbeef/brakeman Using Docker...

Java-Compressed-file-security

Java-Compressed-file-security java web Compressed File Security Vulnerability Test environment: Windows For Apache Tomcat/8.5.16 0x01 Crafting a Directory Traversal Malicious Compressed File Code: coding=utf-8 import zipfile import sys if name == "main": try: with open"404.jsp", "r" as f: binary ...

prowler

Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...