mitm-router

☠ Router de Hombre-en-el-medio 🌐 Convierte cualquier computadora Linux en una red Wi-Fi pública que realiza MITM silenciosamente en todo el tráfico HTTP. Se ejecuta dentro de un contenedor Docker usando hostapd, dnsmasq, y mitmproxy para crear una red inalámbrica honeypot abierta llamada "Public"...

mobsfscan

mobsfscan mobsfscan es una herramienta de análisis estático que puede encontrar patrones de código inseguro en tu código fuente de Android e iOS. Compatible con Java, Kotlin, Android XML, iOS Info.plist, Swift y código Objective C. mobsfscan utiliza las reglas de análisis estático de MobSF y está...

MobileHackersWeapons

Una colección de herramientas impresionantes utilizadas por hackers móviles. ¡Feliz hacking, feliz caza de bugs! Proyecto familiar Tabla de contenidos Armas Contribuir Agradecimientos a los contribuidores Armas Atributos Todos iOS Android Agradecimientos a Contribuidores El proyecto de código...

CVE-2022-22947

Added two types of reverse shell and network egress detection based on Wang Zheng's code. If any module is missing at runtime, just use pip to download that module. Enter the suspicious URL address. Note: Do not include '/' after the port. 1. First check if the vulnerability exists By default, th...

CVE-2020-1938

This repository does not have a README...

silverboxcc

Reverse engineered android malware called Red Alert V2.0. At the time of analysis, there were no longer any C2 servers running and so we were unable to observe any traffic between the malware and the C2 server. So we figured out the C2 protocol and wrote this control panel. Bot's traffic from the...

CVE-2021-2471

CVE-2021-2471 maven environment Reproduction process here Reference environment: https://github.com/SecCoder-Security-Lab/jdbc-sqlxml-xxe...

wardn

wardn Un firewall de credenciales para agentes de IA. La afirmación principal es estructural, no política: los agentes reciben tokens de relleno, nunca claves de API reales. La clave real cruza solo una costura de red — dentro del proxy wardn, en su camino hacia la API ascendente — y se elimina d...

hexora

hexora Hexora es una herramienta de análisis estático diseñada para detectar patrones maliciosos y dañinos en código Python. Combina un motor de análisis estático basado en reglas con un modelo de aprendizaje automático que puntúa archivos fuente completos para clasificarlos como maliciosos o...

wpprobe

"Because why scan blind when WordPress exposes itself?" WPProbe A fast WordPress plugin and theme scanner that detects installed plugins via REST API enumeration and themes from HTML discovery, then maps them to known vulnerabilities. Over 5000 plugins detectable without brute-force, thousands mo...

secretive

Secretive Secretive is an app for protecting and managing SSH keys with the Secure Enclave. Why? Safer Storage The most common setup for SSH keys is just keeping them on disk, guarded by proper permissions. This is fine in most cases, but it's not super hard for malicious users or malware to copy...

fuzzer-testing

fuzzer-testing Imágenes Docker estandarizadas para evaluar fuzzers de código abierto, completamente integradas con los corpora para una fácil experimentación. Fuzzers compatibles / incluidos AFL github.com/google/AFL AFLplusplus github.com/AFLplusplus Honggfuzz github.com/google/honggfuzzz QSYM...

2026-100DaysofYARA

100 Days of YARA 2026 A personal challenge to write one YARA rule every day for 100 days as part of the 100DaysofYARA initiative. More info here: https://github.com/100DaysofYARA/2026...

bLaCk-eye-RSA-Attacking-Toolkit-v0.1f-compiled

bLaCk-eye RSA Attacking Toolkit v0.1f Description RAT v0.1f compiled for Windows Since from the official site you can only download source and no executable. If you don't have time to waste with the compiler and miracl library this is ready to go...

CVE-2020-10199

Nexus Repository Manager 3 Vuln Affected versions: = 3.21.2 CVE-2020-10199, CVE-2020-10204, CVE-2020-11444 CVE-2020-10199 Remote Code Execution Echo PoC No Echo PoC $\A''.getClass.forName'java.lang.Runtime'.getMethods6.invokenull.exec'touch /tmp/cve-2020-10199' Normal User Privileges...

PoC-Deployer-System

PoC-Deployer-System A visualization tool based on CVE-2024-31317 for Zygote injection, integrating remote terminal and file transfer capabilities. Binder-CLI - Access system services via binder Screenshots UID/GID Injection| Advanced Features| Reverse Shell ---|---|--- | | Quick Start Requirement...

pentest-mcp

es-define-property Object.defineProperty, but not IE 8's broken one...

securesystemslib

securesystemslib Securesystemslib is a cryptography interface for signing and verifying digital signatures. It is developed for the TUF and in-toto projects: the key and signature containers are compatible with metadata formats from those projects. Under the hood, Securesystemslib can use various...

shellstack

ShellStack Versión 1.0 ShellStack es una herramienta de gestión de backdoors basada en PHP. Esta herramienta es útil para "HACKERS" que desean llevar un registro de cada sitio web que hackean. La herramienta genera un archivo backdoor que solo tienes que subir al sitio y colocar la URL del backdo...

nmap-CVE-2023-23333-exploit

nmap-CVE-2023-23333-exploit Nmap NSE script to dump /etc/passwd from remote system using Solarwinds CVE-2023-23333 vulnerability Save the script into a file named solar-CVE-2023-23333.nse. To run the script, you can use Nmap's --script-args option to provide the output file path: nmap -p --script...