CVE-2026-104635

A flaw was found in protobuf. An unauthenticated remote attacker can trigger a Denial of Service DoS by submitting a deeply nested JSON document to an application configured to decode self-referential message types. Because the decoder fails to enforce recursion limits on these structures,...

CVE-2026-104635

The elixir-protobuf library (version 0.8.0 and onward) is vulnerable to uncontrolled recursion during JSON decoding. Specifically, the Protobuf.JSON.decode/3, Protobuf.JSON.decode!/3, and Protobuf.JSON.from_decoded/3 functions fail to increment or check the depth counter when processing user-defi...

xsshunter

DEPRECATED - TRY THE NEW EXPRESS VERSION See here for more info: https://github.com/mandatoryprogrammer/xsshunter-express XSS Hunter Source Code This is a portable version of the source code running on https://xsshunter.com. It is designed to be easily-installable on any server for security...

90DaysOfCyberSecurity

90-Day Cybersecurity Study Plan 📚 Table of Contents Introduction Goals and Audience Daily Breakdown Day 1-7: Network+ Concepts Day 8-14: Security+ Concepts Day 15-28: Linux Tutorials Day 29-42: Python Day 43-56: Traffic Analysis Day 57-63: Git Day 64-70: ELK Day 71-77: GCP or AWS or Azure Day...

interactsh

An OOB interaction gathering server and client library Features • Usage • Interactsh Client • Interactsh Server • Interactsh Integration • Join Discord Interactsh is an open-source tool for detecting out-of-band interactions. It is a tool designed to detect vulnerabilities that cause external...

Dr0p1t-Framework

Not maintained currently Wait for the next version Dr0p1t-Framework Have you ever heard about trojan droppers ? In short dropper is type of malware that downloads other malwares and Dr0p1t gives you the chance to create a stealthy dropper that bypass most AVs and have a lot of tricks Trust me :D ...

MemoryMapper

Memory Mapper Memory Mapper es una librería ligera que permite mapear tanto ensamblados nativos como administrados en memoria, ya sea mediante inyección en un proceso especificado por el usuario o autoinyección; la técnica de inyectar un ensamblado en el proceso que actualmente está intentando...

rekall

Rekall discontinuation This project is no longer maintained. In December 2011, a new branch within the Volatility project was created to explore how to make the code base more modular, improve performance, and increase usability. This branch was later forked to become Rekall. The modularity allow...

EvilNeko

EvilNeko EvilNeko es un proyecto para automatizar la orquestación de contenedores y operacionalizar ataques de Browser in the Browser BITB para equipos rojos. Inspirado por la investigación realizada por Mr. d0x aquí y para construir sobre las ideas del proyecto EvilNoVNC. El objetivo del proyect...

send

Enviar Un fork de Firefox Send de Mozilla. Mozilla descontinuó Send, este fork es un esfuerzo comunitario para mantener el proyecto actualizado y vivo. Bifurcado en la última versión alojada públicamente de Mozilla La marca Mozilla y Firefox se ha eliminado para que puedas auto-alojarlo legalment...

WifiPassword-Stealer

WifiPassword-Stealer Obtén todas las contraseñas WiFi registradas de la computadora objetivo. INSTALACIÓN si estás usando un archivo python pip install smtplib pip install subprocess pip install glob USO •Crea una cuenta en "https://mailtrap.io/" usando un correo temporal. •Establece tu propio SM...

kubestriker

A Blazing fast Security Auditing tool for kubernetes!! Overview & Journey of Kubestriker Kubestriker is a platform-agnostic tool designed to tackle Kuberenetes cluster security issues due to misconfigurations and will help strengthen the overall IT infrastructure of any organisation. It performs...

monkey

Monkey documentation This folder contains the Monkey Documentation site. For more information see content/development/contribute-documentation.md...

domain-locker

Domain Locker The Central Hub for all your Domain Names 🌐domain-locker.com Contents About Screenshot Features Live Demo Get Started Domain-Locker.com Self-Hosting Developing App Setup Architecture Contributing Attributions License About The aim of Domain Locker, is to give you complete visibility...

SAFE

SAFE : Self Attentive Function Embedding Paper This software is the outcome of our accademic research. See our arXiv paper: arxiv If you use this code, please cite our accademic paper as: @inproceedingsmassarelli2018safe, title=SAFE: Self-Attentive Function Embeddings for Binary Similarity,...

self-service-password

LDAP Tool Box Self Service Password Presentación Self Service Password es una aplicación PHP que permite a los usuarios cambiar su contraseña en un directorio LDAP. La aplicación puede utilizarse en directorios LDAPv3 estándar OpenLDAP, OpenDS, ApacheDS, Sun Oracle DSEE, Novell, etc. y también en...

liffy

Advanced LFI Exploitation Tool A powerful Python tool for Local File Inclusion LFI exploitation with advanced features including WAF bypass, encoding techniques, and comprehensive vulnerability detection. Liffy v2.0 is the significantly enhanced version of liffy which was originally created by...

onefuzz

❗ AVISO IMPORTANTE ❗ 31 de agosto de 2023. Desde septiembre de 2020, cuando OneFuzz se lanzó como código abierto por primera vez, hemos estado en un viaje para crear un orquestador de primer nivel para ejecutar fuzzers, impulsando la seguridad y la calidad en nuestros productos. Inicialmente...

gato

!WARNING Este repositorio está obsoleto y archivado Gato ha sido sustituido por Trajan , la herramienta multiplataforma de detección de vulnerabilidades y automatización de ataques en CI/CD de Praetorian. Trajan consolida las capacidades de ataque CI/CD de GitHub Actions Gato y GitLab Glato en un...

SafeLine

SafeLine - Make your web apps secure 🏠 Website | 📖 Docs | 🔍 Live Demo | 🙋‍♂️ Discord | 中文版 👋 INTRODUCTION SafeLine is a self-hosted WAFWeb Application Firewall to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and monitoring HTTP...