46543 matches found
ios11-cookie-set-expire-issue
iOS 11 Cookie Set / Expire Issue There appears to be an intermittent issue with setting and expiring cookies in iOS 11 home screen web apps. Two erroneous behaviors can be observed: When a cookie is set and then the app is closed and re-opened, the cookie may no longer be present upon re-opening...
CVE-2015-7547
CVE-2015-7547 glibc vulnerability test script This provides a shell script for testing the glibc vulnerability CVE-2015-7547. It's written for rpm based systems such as Red Hat Enterprise Linux / RHEL / CentOS 5/6/7. Detection for other distributions may follow. Resolution 1. Run bin/test-glibc.s...
offensive-onos
Offensive ONOS My experiments in weaponizing ONOS applications. This is a part of research activity for my Cybersecurity M.Sc. Thesis link, focused on detection of Cross App Poisoning Attacks in Software Defined Networks. This research also led to discovery ofCVE-2023-24279 and CVE-2023-30093...
LSMS
Linux Security and Monitoring Scripts These are a collection of security and monitoring scripts you can use to monitor your Linux installation for security-related events or for an investigation. Each script works on its own and is independent of other scripts. The scripts can be set up to either...
CVE-2014-3153
This repository does not have a README...
WAF_buster
WAFbuster Disrupt WAF by abusing SSL/TLS Ciphers About WAFbuster This tool was created to Analyze the ciphers that are supported by the Web application firewall being used at the web server end.Reference:https://0x09al.github.io/waf/bypass/ssl/2018/07/02/web-application-firewall-bypass.html.It...
eternal
Introduction This is the root repository for the Eternal Software Initiative. The ESI defines a minimal machine architecture based on a modification of the Subleq OISC that is so simple that its complete specification can be written down on a napkin. We then provide an LLVM compiler backend for...
Parsero
¿Qué es Parsero? Parsero es un script gratuito escrito en Python que lee el archivo Robots.txt de un servidor web y examina las entradas Disallow. Las entradas Disallow le indican a los motores de búsqueda qué directorios o archivos alojados en un servidor web no deben ser indexados. Por ejemplo,...
ProcDump-for-Linux
ProcDump ProcDump 是经典 ProcDump 工具（来自 Windows 的 Sysinternals 套件）在 Linux 和 Mac 上的重新实现。ProcDump 为 Linux 和 Mac 开发者提供了一种便捷的方式，基于性能触发器为应用程序创建核心转储（core dump）。ProcDump for Linux and Mac 是 Sysinternals 的一部分。 安装与使用 系统要求 最低 Linux 操作系统版本： Red Hat Enterprise Linux / CentOS 7 Fedora 29 Ubuntu 16.04 LTS gdb =...
CVE-2021-37832
CVE 2021-37832 Hotel Druid 3.0.2 SQL Injection Vulnerability A SQL injection vulnerability exists in version 3.0.2 of Hotel Druid when SQLite is being used as the application database. A malicious attacker can issue SQL commands to the SQLite database through the vulnerable idappartamenti...
CVE-2019-2107
CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video with tiles enabled - pspps-i1tilesenabledflag you can possibly do RCE. The codec affected i...
CVE-2021-41773
CVE-2021-41773 Exploitation of CVE-2021-41773 a Directory Traversal in Apache 2.4.49...
threat-modeling-mcp-server
Threat Modeling MCP Server A Model Context Protocol MCP server for comprehensive threat modeling with automatic code validation. Table of Contents Overview Quick Start Prompts Key Features Prerequisites Installation Running with Kiro CLI Output File Management Quick Reference Tools Overview Threa...
distributed-system-testing
Distributed Systems Testing Skills Two skills for AI coding agents that design and run claim-driven tests for distributed and stateful systems. Together they produce a structured Markdown test plan and a findings report with 10-state verdicts and an explicit SUT / harness / checker / environment...
pycdc
Decompyle++ 一款Python字节码反汇编器/反编译器 Decompyle++ 旨在将编译后的 Python 字节码转换回有效且可读的 Python 源代码。尽管其他项目也以不同程度的成功实现了这一点，但 Decompyle++ 的独特之处在于它试图支持任何 Python 版本的字节码。 Decompyle++ 包含一个字节码反汇编器 pycdas 和一个反编译器 pycdc。 顾名思义，Decompyle++ 是用 C++ 编写的。 如果您希望贡献代码，请访问 https://github.com/zrax/pycdc 在 GitHub 上 fork 我们。 构建...
CVE-2024-3495-Poc
CVE-2024-3495-Poc CVE-2024-3495 Country State City Dropdown CF7 Accept-Encoding: gzip, deflate Accept: / Accept-Language: en-US;q=0.9,en;q=0.8 User-Agent: Mozilla/5.0 W...
log4fix
log4fix Esta herramienta sirve para detectar y corregir la vulnerabilidad log4j log4shell CVE-2021-44228 buscando y eliminando la clase JndiLookup de los archivos .jar/.war/.ear sin dependencias y de forma gratuita. Esta herramienta ha sido probada en: - Linux de 32 bits y 64 bits - Windows de 32...
zeek-spicy-ipsec
IPSec Este es un analizador de protocolos Zeek que detecta VPN IPSec basado en Spicy. Debes instalar Spicy para usar este paquete. Un blog que detalla el desarrollo de este analizador: https://zeek.org/2021/04/20/zeeks-ipsec-protocol-analyzer/ RFCs: https://tools.ietf.org/html/rfc2406 ESP...