offensive-onos

Offensive ONOS My experiments in weaponizing ONOS applications. This is a part of research activity for my Cybersecurity M.Sc. Thesis link, focused on detection of Cross App Poisoning Attacks in Software Defined Networks. This research also led to discovery ofCVE-2023-24279 and CVE-2023-30093...

singularity

Singularity of Origin Recent updates: NEW 2025-11-25 : Chrome release 142 added Local Network Access LNA, which prevents DNS rebinding attack techniques implemented in Singularity. Singularity of Origin's LNA-from-Non-Secure-Contexts branch implements support for Trial for Local Network Access fr...

darling

Darling Darling is a runtime environment for macOS applications. Please note that most GUI applications will not run at the moment. Download Packages for some distributions are available for download under releases. Build Instructions For build instructions, visit Darling Docs. Prefixes Darling h...

kalitorify

Transparent Proxy through Tor for Kali Linux About kalitorify kalitorify is a shell script for Kali Linux which use iptables settings to create a Transparent Proxy through the Tor Network , the program also allows you to perform various checks like checking the Tor Exit Node i.e. your public IP...

sdnpwn

What is sdnpwn? sdnpwn is a toolkit and framework for testing the security of Software-Defined Networks SDNs. For more information check out this article: https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ Installation First download sdnpwn using git git clone https://github.com/smythtech/sdnpwn Make...

CoBRA

CoBRA Re construcción A ritmética B asada en Co eficientes — un simplificador de expresiones booleanas-aritméticas mixtas. CoBRA desofusca expresiones que intercalan operaciones aritméticas +, -, con operaciones bit a bit &, |, ^, y desplazamiento — una técnica comúnmente usada en ofuscación de...

CVE-2024-24919

Divulgación de información en Check Point Security Gateways - CVE-2024-24919 Permitiendo potencialmente a un atacante leer cierta información en Check Point Security Gateways una vez conectados a Internet y habilitados con Remote Access VPN o Mobile Access Software Blades. Hay disponible un parch...

dependency-track

OWASP Dependency-Track Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track takes a unique and highly beneficial approach by leveraging the capabilities of Software Bill of Materials SBO...

ROOT-APP-NPM-CVE-2026-44288 CVE-2026-44288 in protobufjs - Patched by Root

Root has patched CVE-2026-44288 in the protobufjs package for Root:npm. Multiple fixed versions available...

The vulnerability of the software for centralized printer and MFP supervision, related to inconsistencies in responses to incoming requests, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the software for centralized printer control and the Printsupervision printer system is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

aapanel

aapanel aapanel 6.6.6 - CVE-2020-14950 Descripción : permite a usuarios autenticados remotos ejecutar comandos arbitrarios a través del menú de configuración de Software Store. Versión afectada : Todas = 6.6.6 Información Para hacer este PoC, simplemente instalé el software usando docker-compose...

awesome-cybersecurity-blueteam

Awesome Equipo Azul de Ciberseguridad Una colección de recursos, herramientas y otras cosas brillantes para los equipos azules de ciberseguridad. Los equipos azules de ciberseguridad son grupos de personas que identifican fallos de seguridad en los sistemas de tecnología de la información,...

pyfiscan

pyfiscan About Pyfiscan is free web-application vulnerability and version scanner and can be used to locate out-dated versions of common web-applications in Linux-servers. Example use case is hosting-providers keeping eye on their users installations to keep up with security-updates. Fingerprints...

Software-Component-Verification-Standard

OWASP Software Component Verification Standard El Estándar de Verificación de Componentes de Software SCVS es un esfuerzo impulsado por la comunidad para establecer un marco de referencia que permita identificar actividades, controles y mejores prácticas, que pueden ayudar a identificar y reducir...

hackrf

HackRF Este repositorio contiene diseños de hardware y software para HackRF, una plataforma de radio definida por software SDR de bajo costo y código abierto. foto de fd0 de https://github.com/fd0/hackrf-one-pictures autor principal: Michael Ossmann [email protected] Información sobre HackRF...

uncaptcha

uncaptcha Defeating Google's audio reCaptcha system with 85% accuracy. Disclaimer unCaptcha is intended to be a proof of concept. As of the time of our paper, we found it to successfully solve reCaptcha's audio challenges with 85% success. Since that time, reCaptcha appears to include some...

bitlocker-attacks

Ataques a BitLocker Una lista de ataques públicos a BitLocker. Cualquier ataque público con el potencial de atacar BitLocker pero cuyo método exacto aún no sea público como baton drop queda fuera del alcance. La mayoría de los ataques son para cuando la VMK está sellada únicamente por el TPM, que...

Consent-O-Matic

Consent-O-Matic | ---|--- La mayoría de los sitios web hoy en día quieren procesar tus datos y te piden consentimiento mediante banners de cookies. Aunque estos banners están pensados para darte control, en la práctica a menudo resultan en clics repetitivos y que consumen tiempo, especialmente si...

HIDEAGEM

888 888 8888888 8888888b. 8888888888 d8888 .d8888b. 8888888888 888b d888 888 888 888 888 "Y88b 888 d88888 d88P Y88b 888 8888b d8888 888 888 888 888 888 888 d88P888 888 888 888 88888b.d88888 8888888888 888 888 888 8888888 d88P 888 888 8888888 888Y88888P888 888 888 888 888 888 888 d88P 888 888 8888...

cornucopia

Proyecto OWASP Cornucopia OWASP Cornucopia es un mecanismo en forma de juego de cartas para ayudar a los equipos de desarrollo de software a identificar requisitos de seguridad en procesos de desarrollo ágiles, convencionales y formales. Es independiente del lenguaje, la plataforma y la tecnologí...