SigPloit

List of Contributors Rosalia D'Alessandro Ilario Dal Grande SigPloit SigPloit a signaling security testing framework dedicated to Telecom Security professionals and reasearchers to pentest and exploit vulnerabilites in the signaling protocols used in mobile operators regardless of the geneartion...

prompt-injection-email-samples

Prompt-Injection Email Samples A small, open test set of emails for checking whether your email security controls and AI mailbox assistants handle indirect prompt injection : instructions hidden in an email that try to hijack an AI assistant when it reads, summarizes or acts on that email. The se...

Samuraizer

Samuraizer — Cyber‑Security Knowledge Base Engine NotebookLM on steroids — purpose-built for security researchers. 💡 Why Samuraizer? Every security researcher knows the feeling — you find an interesting GitHub repo, a fresh CVE writeup, a blog post about a new exploitation technique. You forward ...

cve-2020-13933

cve-2020-13933 cve-2020-13933 Apache Shiro privilege bypass vulnerability This reproduction is very simple. First, set up the environment using IDEA + Shiro Reference: https://www.cnblogs.com/ph4nt0mer/p/13535999.html Then run, access, and capture packets...

Information-Security

Information-Security Information Security Resource Compilation...

graphw00f

Credits to Nick Aleks for the logo! graphw00f - GraphQL Server Fingerprinting Table of Contents How does it work? Detections GraphQL Threat Matrix Prerequisites Installation Configuration Example Usage Fingerprinting GraphQL Detecting & Fingerprinting GraphQL Support & Issues Resources How does i...

mac-monitor

🎉 Welcome to "Mac Monitor's" official new home! Mac Monitor is an advanced, stand-alone system monitoring tool tailor-made for macOS security research, malware triage, and system troubleshooting. Leveraging Apple's Endpoint Security ES and System Extension APIs, it collects and enriches system...

CVE-2023-28588_Singlefile

This repository does not have a README...

coalmine

Cloud Canary Token Management — Deploy, monitor, and rotate deceptive credentials across AWS and GCP to detect unauthorized access. !WARNING Alpha Version — Coalmine is in early development. Basic functionality is the current priority, and the application should not be considered fully security...

sysmon-config

sysmon-config | A Sysmon configuration file for everybody to fork This is a Microsoft Sysinternals Sysmon configuration file template with default high-quality event tracing. The file should function as a great starting point for system change monitoring in a self-contained and accessible package...

pared

Pared Pared is a secure, high-performance Linux host security control plane and real-time administrative web console written in Crystal. Built on Kemal and Blueprint server-rendered components with SQLite3, a small vanilla-JS/WebSocket layer, and native libsystemd journal streaming, it unifies...

CrossC2

CrossC2 framework README | 中文文档 | READMEFULL | 中文完整文档 CobaltStrike support Support CobaltStrike's security assessment of other platforms Linux/MacOS/..., and include the development support of Unix post-penetration module | CS3.14bug fixes| CS4.0| CS4.X 4.14.8 ---|---|---|--- Master branch| ✅| |...

osmedeus

Osmedeus Osmedeus - A Modern Orchestration Engine for Security What is Osmedeus? Osmedeus is a security focused declarative orchestration engine that simplifies complex workflow automation into auditable YAML definitions, complete with encrypted data handling, secure credential management, and...

AtlasReaper

AtlasReaper AtlasReaper is a command-line tool developed for offensive security purposes, primarily focused on reconnaissance of Confluence and Jira. It also provides various features that can be helpful for tasks such as credential farming and social engineering. The tool is written in C. Blog...

CVE-2022-39802

3242933 – CVE-2022-39802 File path traversal vulnerability in SAP Manufacturing Execution General information Risk: CRITICAL Versions Affected: SAP MFG EXECUTION CORE 15.1 SAP MFG EXECUTION CORE 15.2 SAP MFG EXECUTION CORE 15.3 Vendor URL: https://sap.com Bug: File path traversal vulnerability...

Mindmap

Hacking Articles- Cyber Security Mindmap A comprehensive collection of cybersecurity mind maps covering technologies, tools, methodologies, courses, and certifications used in the security industry. This repository organizes complex cybersecurity concepts into visual tree structures, making it...

React2Shell-Scanner

🔬 React2Shell Scanner Web Application Security Assessment Framework for React and Next.js Applications ⚠️ Important Notice This tool is designed for authorized security testing only. ✅ Authorized penetration testing ✅ Bug bounty programs within scope ✅ Security research with permission ✅ Testing...

doggie_workshop

EvilDoggie Workshop Car Simulator Project Presentation Welcome to the EvilDoggie Workshop Car Simulator repository! This tool replicates the car CAN Bus environment used in the Black Hat Arsenal 2025 session. Developed by Faraday Security, the simulator emulates multiple Electronic Control Units...

MS14-068

This repository does not have a README...

zi

Zi Manage your Zsh plugins, snippets, and command-line tools. Quick start · Documentation · Releases · Discussions Zi is the Z-Shell ecosystem's plugin manager, formerly known as zplugin and zinit. Features Responsive startup: defer plugin loading until after the first prompt with Turbo mode...