CVE-2016-3113

CVE-2016-3113 PoC Une preuve de concept pour exploiter la vulnérabilité XSS réfléchie dans l'interface web oVirt RedHat. Dans ce PoC, une machine virtuelle de l'environnement IaaS oVirt est démarrée via la session navigateur de la victime. Le code JS a été volontairement simplifié en raison de...

tsunami-security-scanner

Tsunami Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence. To learn more about Tsunami, visit our documentation. Tsunami relies heavily on its plugin system to provide basic scanning capabilities...

CVE-2018-20250-WinRAR

CVE-2018-20250-WinRAR Ce contenu est la reproduction par l'auteur de la vulnérabilité WinRAR CVE-2020-0601, réalisée en combinant des ressources et articles pertinents. Il est recommandé de consulter le blog de l'auteur pour reproduire cette vulnérabilité et comprendre le principe de détournement...

intercept

!zreadhttps://img.shields.io/badge/AskZread-.svg?style=plastic&color=00b0aa&labelColor=000000&logo=data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMTYiIGhlaWdodD0iMTYiIHZpZXdCb3g9IjAgMCAxNiAxNiIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHBhdGggZD0iTTQuOTYxNTYgMS42MDAxSDIuMjQxNTZD...

smolvm

smolvm Des microVMs branchables pour les agents IA. Intégrez des machines virtuelles légères dans vos logiciels, des environnements de développement portables et du sandboxing local. Installation curl -sSL https://smolmachines.com/install.sh | bash macOS + Linux Windows : décompressez la release...

CVE-2022-27254

CVE-2022-27254 PoC pour la vulnérabilité dans le système de clé sans fil à distance de Honda CVE-2022-27254 Avertissement : À des fins éducatives uniquement. Veuillez noter que les découvreurs de cette vulnérabilité sont Ayyappan Rajesh, un étudiant à l'UMass Dartmouth et HackingIntoYourHeart. Le...

zap-hud

ZAP Heads Up Display The HUD is no longer under active development Unfortunately the HUD is no longer under active development due to the fact no one is focusing on it. The HUD is a unique and innovative interface that we know some people love. But it also needs a non trivial amount of maintenanc...

cloudquery

CloudOps, without the chaos CloudQuery is a cloud asset inventory built for platform teams. Sync your cloud infrastructure metadata into your data warehouse, powering insights and automation. Unify data and provide context across AWS, Azure, GCP, and 70+ cloud and SaaS sources such as Wiz, Finout...

pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

tcpcopy

TCPCopy - A TCP Stream Replay Tool TCPCopy is a TCP stream replay tool for realistic testing of Internet server applications. Getting to Know TCPCopy An Overview of TCPCopy for Beginners A General Overview of TCPCopy Architecture TCPCopy Testing Use Cases TCPCopy Pre-Warming Examples Description...

prowler

Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...

microctfs

microctfs Small CTF challenges running on Docker logviewer Build and Start logviewer challenge exposed on port 8000 cd logviewer docker build -t logviewer . docker run -d -p 8000:80 --name logchallenge logviewer Restart logviewer challenge docker rm -f logchallenge && docker run -d -p 8000:80...

sx

sx is the command-line network scanner designed to follow the UNIX philosophy. The goal of this project is to create the fastest network scanner with clean and simple code. 📖 Table of Contents Features Install Build from source Quick Start References Contributing Credits License ✨ Features ⚡ 30x...

jackhammer

Jackhammer: One Security vulnerability assessment/management tool to solve all the security team problems. What is Jackhammer? Jackhammer is a collaboration tool built with an aim of bridging the gap between Security team vs dev team, QA team and being a facilitator for TPM to understand and trac...

MaFrida

MaFrida Un module Magisk simple mais puissant qui automatise le démarrage du serveur Frida au boot et fournit une interface en ligne de commande pratique pour gérer différentes versions de Frida sur Android. Fonctionnalités Démarre automatiquement frida-server au boot. Bascule facilement entre...

beef

=============================================================================== Copyright c 2006-2026 Wade Alcorn - [email protected] Browser Exploitation Framework BeEF - https://beefproject.com See the file 'doc/COPYING' for copying permission...

mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...

CVE-2026-21002-Serverless-Cold-Start-Credential-Leakage-via-Reused-tmp

CVE-2026-21002 – Утечка учётных данных при холодном старте бессерверных функций через повторное использование /tmp Программный код симуляция Python AWS Lambda lambdafuncsim.py - Simulated serverless function import os, tempfile, time SECRETFILE = '/tmp/credentials' reused across warm starts def...

CVE-2026-23007-Serverless-Cold-Start-Memory-Remanence-Data-Leakage-

CVE-2026-23007 – Остаточные данные в памяти при холодном старте бессерверных приложений утечка данных Программный код имитация Lambda на Python lambdaremanence.py - Simulated Lambda environment reuse import os, secrets def firstinvocation: Simulates storing a secret in a global variable global...

columbus-server

Columbus server This repository is deprecated! ‼️ The server component is moved to https://github.com/elmasy-com/columbus. Columbus Project is an API first subdomain discovery service, blazingly fast subdomain enumeration service with advanced features. Columbus returned 638 subdomains of tesla.co...