46476 matches found
pyrmax
pyrmax 用于 Ubiquiti AirMAX 线协议帧的解码器和编码器，涵盖 AC（WA 固件）和 M（XW/XM 固件）系列。 解码 ：明文外部头由 ksy/ 下的 Kaitai Struct 模式驱动。AC 载荷 （按版本门控，依据 msgtype 切换，带 deauth XOR 去掩码）由 ac.py 手写实现——该逻辑不适合纯解析式 Kaitai。 编码 ：手写实现，与解码路径逐字段对应。 Status Variant| Decode| Encode| pcap iteration ---|---|---|--- AC| ✅ 全部 5 种 msg 类型（beacon、ass...
LLMReaper
Passive LLM Conversation Capture & Sensitive Data Exposure Research Chromium MV3 Extension • Real-Time DOM Capture • Secret Detection • FastAPI Backend !WARNING This project is provided strictly for security research, educational use, and defensive awareness purposes. Unauthorized deployment...
Public_Poc
0xmrsecurity.github.io Personal Blog web Page Thoughts I learn and write the public proof of concepts for the better understanding of hacking and programming skills...
api-scanner-docker
API Scanner - Self-Hosted Deployment API Scanner is an automated API security testing tool that scans REST and SOAP APIs for vulnerabilities using OpenAPI/Swagger specifications and WSDL files. Prerequisites Docker Engine 20.10+ Docker Compose v2 Python 3.6+ for setup script 8 GB RAM minimum 16 G...
pentest-a2p2v-core
README 自动化攻击路径规划与验证（A2P2V）是一款规划与网络攻击工具，能够根据特定攻击者目标，为用户提供一组排序后的攻击序列。该工具旨在简化流程，使非安全专家也能通过尽可能自动化的基本输入，生成清晰、可操作的威胁情报，并产出易于解读的报告。 该系统利用已知网络拓扑和系统漏洞信息，确定所有能够达成攻击者目标的攻击序列，并为所选序列输出所需步骤（以 Metasploit 命令形式）。 系统输入包括： 初始条件 ：对攻击者当前知识与访问权限进行建模 攻击者目标 ：指示状态变化（例如改变 ICS 系统的温度）或远程访问特定目标主机 漏洞信息 ：Nessus 或 Nmap...
pentest-a2p2v-core
README Automated Attack Path Planning and Validation A2P2V is a planning and cyber-attack tool that provides the capability for users to determine a set of ranked attack sequences given a specific attacker goal. The aim of the tool is to simplify process so that non-security experts can generate...
CVE-2017-1000117
Test repository to check Git's vulnerability CVE-2017-1000117 How it works? Clone this repository recursively. The sentence 「うんこもりもり」which means like "Lots of shit." will be shown on your terminal. root@kitploit: $ git clone --recursive https://github.com/greymd/CVE-2017-1000117.git Cloning into...
openapi-parser
openapi-parser !UPDATE This extension has been updated to use the latest Burp Montoya Java API. The extension has undergone a complete overhaul to improve both its UI/UX and performance. These changes ensure that the extension is modern and optimised for use. openapi-parser is a extension designe...
CVE-2020-14179
CVE-2020-14179 Scanner Sample scan ./CVE-2020-14179.pl -u jira.atlassian.com OR ./CVE-2020-14179.pl -u https://jira.atlassian.com List scan ./CVE-2020-14179.pl -l list.txt Show Options ./CVE-2020-14179.pl How to install and use linux git clone https://github.com/c0brabaghdad1/CVE-2020-14179.git c...
CVE-2025-30065
💥 CVE-2025-30065 - Parquet Deserialization PoC This project demonstrates a safe proof-of-concept for CVE-2025-30065 using Apache Parquet and Java deserialization. When a Parquet file containing a serialized Java object is read, the payload executes a visible command to prove code execution. 📦 Usa...
rosemary
Rosemary Cross-platform kernel-level pivoting platform over QUIC. No TUN/TAP. No proxychains. No proxy settings. Rosemary transparently intercepts traffic on remote hosts at the kernel level: no proxy settings, no TUN/TAP devices, no proxychains. Agents connect back to the server over QUIC. You...
troll-a
Troll-A Troll-A is a command line tool for extracting secrets such as passwords, API keys, and tokens from WARC Web ARChive files. Troll-A is an easy-to-use , comprehensive , and fast solution for finding secrets in web archive. Features Protocols: Supports retrieving web archives directly from a...
wapiti
================================== Wapiti - Web 漏洞扫描器 .. image:: https://img.shields.io/pypi/v/wapiti3?label=PyPI&logo=PyPI&logoColor=white&color=blue :alt: PyPI version :target: https://pypi.python.org/pypi/wapiti3 .. image:: https://img.shields.io/pypi/pyversions/wapiti3 :alt: Supported Python...
stumpy
|PyPI Version| |Conda Forge Version| |PyPI Downloads| |License| |Test Status| |Code Coverage| |RTD Status| |Binder| |JOSS| |NumFOCUS| .. |PyPI Version| image:: https://img.shields.io/pypi/v/stumpy.svg :target: https://pypi.org/project/stumpy/ :alt: PyPI Version .. |Conda Forge Version| image::...
Z0FCourse_ReverseEngineering
Reverse Engineering Course This course aims to take an individual from beginner to intermediate advanced is really only achieved through experience in reverse engineering. While this course focuses on Windows 64-bit, the technical knowledge applies to 32-bit Windows and the theory to any OS. The...
CVE-2023-29489
CVE-2023-29489 The security vulnerability is recorded in the Common Vulnerabilities and Exposures CVE system. Specifically, this vulnerability is related to cPanel, a popular hosting management software. This flaw allows for cross-site scripting XSS attacks through specially crafted requests."...
CVE-2021-38163
CVE-2021-38163 CVE-2021-38163 - exploit for SAP Netveawer SAP NetWeaver Visual Composer 7.0 RT versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated as a non-administrative user can upload a malicious file over a network and trigger its processing, which is capable of...
HTTP3ONSTEROIDS
Table of contents Vulnerability Description Source Code Review Lab Setup Identifying the issue References Vulnerability Description HAProxy's HTTP/3 implementation fails to block a malformed HTTP header field name , and when deployed in front of a server that incorrectly process this malformed...