apidetector

APIDetector is a powerful and efficient tool designed for testing exposed Swagger endpoints in various subdomains with unique smart capabilities to detect false-positives. It's particularly useful for security professionals and developers who are engaged in API testing and vulnerability scanning...

sharingan

Sharingan Sharingan is a recon multitool for offensive security / bug bounty WIP, will I ever finish? Who knows Cloning for development Outside of your gopath git clone https://github.com/leobeosab/sharingan Installing go get github.com/leobeosab/sharingan/cmd/sharingancli Dependencies NMap Go...

sharingan

Sharingan Sharingan 是一款用于进攻性安全/漏洞赏金的侦察多功能工具。 开发中，我能否完成？谁知道呢。 克隆以进行开发 在您的 gopath 之外 git clone https://github.com/leobeosab/sharingan 安装 go get github.com/leobeosab/sharingan/cmd/sharingancli 依赖 NMap Go 使用方法 注意 标志的顺序很重要，它必须是 sharingancli globalflags command commandflags。如果这不是您想要的功能，我可以更改它，但我喜欢它的简洁性...

lightbulb-framework

LightBulb LightBulb is an open source python framework for auditing web application firewalls and filters. Synopsis The framework consists of two main algorithms: GOFA : An active learning algorithm that infers symbolic representations of automata in the standard membership/equivalence query mode...

Vulnerabilities in WatchGuard Fireware OS

WatchGuard has identified several vulnerabilities in the Fireware OS. The impact of these vulnerabilities varies, as does the access rights required for exploitation. – An attacker with write permissions to the system can exploit a vulnerability in SAML single sign-on sessions to load malicious...

dwarf2json

Introduction dwarf2json is a Go utility that processes files containing symbol and type information to generate Volatility3 Intermediate Symbol File ISF JSON output suitable for Linux and macOS analysis. To build Go 1.18+ required: $ go build To run: $ ./dwarf2json --help Usage: ./dwarf2json...

dwarf2json

Introducción dwarf2json es una utilidad de Go que procesa archivos que contienen información de símbolos y tipos para generar la salida JSON de Intermediate Symbol File ISF de Volatility3, adecuada para el análisis de Linux y macOS. Para compilar se requiere Go 1.18+: $ go build Para ejecutar: $...

tmpmail

从终端获取临时邮箱，使用 POSIX sh 编写 tmpmail 是一个用 POSIX sh 编写的命令行工具，它允许您创建一个临时电子邮件地址并接收发送到该临时地址的邮件。它使用 1secmail 的 API 来接收邮件。 默认情况下，使用 w3m 在终端中渲染 HTML 邮件。但如果您更喜欢其他基于文本的浏览器，或者希望在 GUI 浏览器（如 Firefox）中查看邮件，只需使用 --browser 参数，后跟启动所选浏览器的命令即可。 依赖 w3m curl jq xclip 安装 本地安装 下载 tmpmail 文件并赋予执行权限 $ curl -L...

tmpmail

A temporary email right from your terminal written in POSIX sh tmpmail is a command line utility written in POSIX sh that allows you to create a temporary email address and receive emails to the temporary email address. It uses 1secmail's API to receive emails. By default w3m is used to render th...

binbloom

About The purpose of this project is to analyse a raw binary firmware and determine automatically some of its features. This tool is compatible with all architectures as basically, it just does simple statistics on it. Main features: Loading address : binbloom can parse a raw binary firmware and...

CVE-2021-40845

CVE-2021-40845 I. VULNERABILIDAD AlphaWeb XE: carga insegura de archivos autenticada que conduce a RCE II. REFERENCIA CVE CVE-2021-40845 III. PROVEEDOR https://www.zenitel.com/ IV. DESCRIPCIÓN La parte web del servidor de audio Zenitel AlphaCom XE hasta la versión 11.2.3.10, denominada AlphaWeb X...

lisa.py

Integración MCP de LLDB Este proyecto proporciona una integración del Protocolo de Contexto de Modelo MCP para LLDB, permitiendo que asistentes de IA como Claude interactúen con tus sesiones de depuración a través de una interfaz estandarizada. Descripción general La integración consta de dos...

CVE-2025-24893-POC

CVE-2025-24893 Instalar bun: curl -fsSL https://bun.com/install | bash Para instalar dependencias: bun install Para ejecutar: bun run CVE-2025-24893.ts Este proyecto fue creado usando bun init en bun v1.2.19. Bun es un runtime de JavaScript rápido y todo en uno. Cómo usar: Usage: bun...

dnsdiag

DNS Measurement, Troubleshooting and Security Auditing Toolset Have you ever wondered if your ISP is intercepting your DNS traffic? Have you noticed any unusual behavior in your DNS responses, or been redirected to the wrong address and suspected something might be off with your DNS? We offer a...

cheatengine-mcp-bridge

Demostración Cheat Engine MCP Bridge Permite que centros de datos de IA multimillonarios analicen la memoria del programa por ti. Crea mods, trainers, auditorías de seguridad, bots de juegos, acelera la ingeniería inversa, o haz cualquier otra cosa con cualquier programa y juego en una fracción d...

CVE-2025-55182-NextJS-Scanner-React2Shell-PoC

Herramienta de Explotación CVE-2025-55182 Una herramienta integral de investigación de seguridad para probar la vulnerabilidad de ejecución remota de código RCE en React Server Components de Next.js CVE-2025-55182. Descripción general Este kit proporciona capacidades automatizadas de detección y...

frida

Frida Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers. Learn more at frida.re. Two ways to install 1. Install from prebuilt binaries This is the recommended way to get started. All you need to do is: pip install frida-tools CLI tools pip install frida...

CVE-2026-87902

CVE-2026-87902 - WordPress Core Unauthenticated LFI → RCE Validation Lab Security-research material for reproducing and validating CVE-2026-87902 GHSA-7hp8-65ch-5whp in an isolated, loopback-only Docker lab: an unauthenticated local file inclusion in WordPress core page-template resolution,...

spiderfoot

SpiderFoot is an open source intelligence OSINT automation tool. It integrates with just about every data source available and utilises a range of methods for data analysis, making that data easy to navigate. SpiderFoot has an embedded web-server for providing a clean and intuitive web-based...

scoringengine

Scoring Engine Scoring Engine is an open-source platform for running Red/White/Blue team cybersecurity competitions. It automates service checks each round and provides a web-based scoreboard and configuration interface. Features Automated scheduling and execution of service checks Distributed...