obridge

OBridge OBridge provides a simple Java source code generator for calling Oracle PL/SQL package procedures. Supported input, output parameters and return values are: BINARYINTEGER BOOLEAN CHAR CLOB BLOB DATE NCHAR NUMBER NVARCHAR2 OBJECT - Oracle Object Type PLSINTEGER TABLE - Table of Oracle Obje...

CVE-2022-43959

CVE-2022-43959 Bitrix Vulnerability CVE-2022-43959 Description Insufficiently Protected Credentials in the AD/LDAP server settings in 1C-Bitrix Bitrix24 AD/LDAP connector module before version 23.100.0 allow remote administrators to discover an AD/LDAP administrative password by reading the sourc...

zaproxy

The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...

bearer

Scan your source code against top security and privacy risks. Bearer is a static application security testing SAST tool designed to scan your source code and analyze data flows to identify, filter, and prioritize security and privacy risks. Bearer offers a free, open solution, Bearer CLI, and a...

threat-research-and-intelligence

Full Intelligence Blogs | Blog Outcomes | Report Outcomes | Public Talks ℹ️ :: Overview This repository is for the dissemination of IOCs, YARA rules and source code from threat intelligence reports published by the BlackBerry Threat Research & Intelligence team. For fully detailed reports includin...

CVE-2024-38475

CVE-2024-38475 exploit CVE-2024-38475modrewrite weakness with filesystem path matching This repository contains a Python script for testing web server vulnerabilities, specifically targeting Apache servers. The script checks for potential issues modrewrite weakness with filesystem path matching t...

Reversecore_MCP

Reversecore MCP AI-Powered Reverse Engineering & Security Analysis via Model Context Protocol An MCP server that gives AI assistants like Claude and Cursor the ability to perform reverse engineering, malware analysis, vulnerability research, digital forensics, and source code auditing through...

svn-extractor

Svn-Extractor Many a times web application pen-testers are encountered with the presence of .svn folders. For those not aware .svn folder is used by SVN version control system to perform its operations. For a blackbox pentest this folder contains huge amount of information. Some of the key areas...

blutter

Blutter Flutter Mobile Application Reverse Engineering Tool by Compiling Dart AOT Runtime Currently the application supports only Android libapp.so arm64 only. Also the application is currently work only against recent Dart versions. For high priority missing features, see TODO Environment Setup...

Blackhat-USA-2022-Materials

Black Hat USA 2022 Presentation Materials Presentation materials for my Black Hat USA 2022 Briefing and Arsenal talks Black Hat USA Briefing - Controlling the Source: Abusing Source Code Management Systems Description...

brakeman

Brakeman Brakeman is a static analysis tool which checks Ruby on Rails applications for security vulnerabilities. Installation Using RubyGems: gem install brakeman Using Bundler: group :development do gem 'brakeman', require: false end Using Docker: docker pull presidentbeef/brakeman Using Docker...

CVE-2025-55183-poc

CVE-2025-55183-poc – Next.js React Server Components Server Function Source Code Disclosure This repository contains detection tooling for a source code disclosure vulnerability in Next.js React Server Components RSC / Server Actions , tracked as CVE-2025-55183. In vulnerable applications, a...

flawfinder

About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...

aura

.. image:: https://cdn.sourcecode.ai/imgs/logotype.png :target: https://aura.sourcecode.ai/ ====== .. class:: center |homepageflair| |docsflair| |dockerflair| |licenseflair| |travisflair| |pypiflair| Source code auditing and static code analysis Aura is a static analysis framework developed as a...

CVE-2025-55182

CVE-2025-55182 Scanner This repository contains a scanner tool for CVE-2025-55182 RCE and CVE-2025-55183 Source Code Disclosure in Next.js React Server Components RSC. ⚠️ Disclaimer This tool is for educational and authorized testing purposes only. Do not use this tool on systems you do not own or...

BPFDoor-controller-source

BPFDoor-controller-source Source code to recent BPFDoor's controller variant Original: 2eacc8d91b9829b9606a7945fc5311fb5876cfb42ffccc1b91f61841237b04c1 Fixed: bpfdoorcontroller.c Original to fixed helper: formatfix.py Compile: $ apt install libssl-dev $ gcc -Wno-implicit-function-declaration...

osed-scripts

osed-scripts bespoke tooling for offensive security's Windows Usermode Exploit Dev course OSED Table of Contents Standalone Scripts egghunter.py find-gadgets.py shellcoder.py install-mona.sh attach-process.ps1 WinDbg Scripts find-ppr.py find-bad-chars.py search.py Standalone Scripts Installation:...

dnsx

A fast and multi-purpose DNS toolkit designed for running DNS queries Features • Installation • Usage • Running dnsx • Wildcard • Notes • Join Discord dnsx is a fast and multi-purpose DNS toolkit designed for running various probes through the retryabledns library. It supports multiple DNS querie...

0x00sec_code

Source Code for 0x00sec.org posts This repository contains the source code for my posts at 0x00sec.org. Remote Shell Post available at: Part I : https://0x00sec.org/t/remote-shells-part-i/269/1 Part II. Crypt your link: https://0x00sec.org/t/remote-shells-part-ii-crypt-your-link/306 Source code a...

graudit

graudit graudit is a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility grep. It's comparable to other static analysis applications like RATS, SWAAT and flaw-finder while keeping the technical requirements to a minimum and being...