SMBetray

SMBetray Version 1.0.0. This tool is a PoC to demonstrate the ability of an attacker to intercept and modify insecure SMB connections, as well as compromise some secured SMB connections if credentials are known. Background Released at Defcon26 at "SMBetray - Backdooring and Breaking Signatures" I...

waf-bypass

WAF Bypass Tool WAF Bypass Tool 是一个开源工具，用于使用预定义和可自定义的载荷分析任何 WAF 的误报和漏报安全性。在攻击者之前检查您的 WAF。WAF Bypass Tool 由 Nemesida WAF 团队在社区参与下开发。 请勿进行任何非法行为 禁止用于非法和不道德的目的。不要违法。我们对使用本软件可能产生的风险不承担任何责任。 如何运行 使用 Docker 运行 最新版本的 waf-bypass 始终可通过 Docker Hub 获取。可通过以下命令轻松拉取： docker pull nemesida/waf-bypass docker run...

waf-bypass

WAF Bypass Tool WAF Bypass Tool is an open source tool to analyze the security of any WAF for False Positives and False Negatives using predefined and customizable payloads. Check your WAF before an attacker does. WAF Bypass Tool is developed by Nemesida WAF team with the participation of...

aircrack-ng

Aircrack-ng Badges GitHub CI Others !Codespellhttps://github.com/a...

vmlinux-to-elf

vmlinux-to-elf Esta herramienta permite obtener un archivo .ELF completamente analizable a partir de una imagen de kernel vmlinux/vmlinuz/bzImage/zImage ya sea un blob binario sin procesar o un archivo .ELF existente pero sin símbolos, con los símbolos de funciones y variables recuperados. Para...

100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer

The Computer Emergency Response Team of Ukraine CERT-UA has identified more than 100 compromised websites that have been injected with malicious JavaScript to serve an information-stealing malware called LunexStealer aka Psychedelic Stealer. The activity, which was observed by the agency in...

killshot

This project is no longer maintained ! KILLSHOT A Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner Why KillShot? You can use this tool to spider your website, gather important information, and automate data collection using tools such as WhatWeb, Host,...

arduino-pico

Arduino-Pico Raspberry Pi Pico Arduino core, for all RP2040 and RP2350 boards This is a port of Arduino to the RP2040 Raspberry Pi Pico processor and RP2350 Raspberry Pi Pico 2 processor. It uses the bare Raspberry Pi Pico SDK and a custom GCC 14.3/Newlib 4.5 toolchain and supports ARM and RISC-V...

threatspec

threatspec - 通过代码实现持续威胁建模 Threatspec 是一个开源项目，旨在通过将威胁建模过程更深入地融入开发流程，从而弥合开发与安全之间的差距。这是通过让开发者和安全工程师在源代码中以注释形式编写威胁建模注解，然后动态生成报告和数据流图来实现的。这使得工程师能够在编写代码的同时捕获他们所写代码的安全上下文。在万物即代码的世界中，除了传统应用代码外，还可以包括基础设施即代码、CI/CD流水线和无服务器等。 入门 第一步 - 安装 threatspec $ pip install threatspec 您还需要安装 Graphviz 用于报告生成。 步骤 2 -...

threatspec

threatspec - continuous threat modeling, through code Threatspec is an open source project that aims to close the gap between development and security by bringing the threat modelling process further into the development process. This is achieved by having developers and security engineers write...

agentic-threat-hunting-framework

Agentic Threat Hunting Framework ATHF Quick Start • Installation • Documentation • Examples Give your threat hunting program memory and agency. The Agentic Threat Hunting Framework ATHF is the memory and automation layer for your threat hunting program. It gives your hunts structure, persistence,...

Chimera

Chimera 是一个（炫酷且非常 hack-ish）的 PowerShell 混淆脚本，旨在绕过 AMSI 和防病毒解决方案。它能消化已知会触发防病毒软件的恶意 PS1 脚本，并通过字符串替换和变量拼接来规避常见的检测签名。 Chimera 是为这篇教程创建的，并且是进一步证明绕过检测签名是多么轻而易举的事。希望这个仓库能激励某人构建出更强大、更可靠的东西。 Chimera 的工作原理... 下面是 Nishang 的 Invoke-PowerShellTcp.ps1 的片段，位于 nishang/Shells。VirusTotal 报告该 PS1 脚本有 25 个检测。 $strea...

Chimera

Chimera is a shiny and very hack-ish PowerShell obfuscation script designed to bypass AMSI and antivirus solutions. It digests malicious PS1's known to trigger AV and uses string substitution and variable concatenation to evade common detection signatures. Chimera was created for this write-up an...

chronix

Chronix 用于渗透测试人员和红队操作人员的自托管协作工作区。在安全参与期间捕获笔记、命令、输出和操作上下文。 快速开始 安装 pipx install git+https://github.com/IceCubeSandwich/chronix 初始化（创建账户和会话密钥） chronix init 运行 chronix 浏览器在 http://localhost:8000 打开。凭据在初始化时显示一次——请安全存储。 功能 时间线日志 ：带时间戳的条目，包含来源、目标、工具、命令、输出和结果字段 协作笔记 ：Markdown页面，支持自动保存和版本历史 实时同步...

CVE-2024-9441

PoC de RCE sin autenticación previa para Nortek Linear eMerge E3 CVE-2024-9441 Descripción: Este repositorio contiene una prueba de concepto PoC del exploit para Nortek Linear eMerge E3 CVE-2024-9441, que es vulnerable a ejecución remota de código RCE en estado de pre-autenticación. La...

FinalRecon

Twitter - Telegram - thewhiteh4t's Blog FinalRecon is an all in one automatic web reconnaissance tool written in python. Goal of FinalRecon is to provide an overview of the target in a short amount of time while maintaining the accuracy of results. Instead of executing several tools one after...

CVE-2023-32571-POC

Inyección de Dynamic Linq a RCE - CVE-2023-32571 Acerca de la inyección de Dynamic Linq a RCE CVE-2023-32571 Recientemente, miembros del NCC Group descubrieron una vulnerabilidad en Dynamic Linq que permite a los atacantes llamar funciones de C a través de una inyección de Linq, lo que hace posib...

Damn-Vulnerable-GraphQL-Application

Damn Vulnerable GraphQL Application Damn Vulnerable GraphQL Application 是一个有意存在漏洞的 GraphQL 实现，用于学习和实践 GraphQL 安全。 目录 关于 DVGA 运行模式 场景 前置条件 安装 安装 - Docker 安装 - Docker Registry 安装 - 服务器 截图 维护者 贡献者 致谢 免责声明 许可证 关于 DVGA Damn Vulnerable GraphQL 是一个故意设计得脆弱且不安全的 GraphQL 实现，提供一个安全环境来攻击 GraphQL 应用程序，帮助开发者和 ...

CVE-2025-50505

CVE-2025-50505 API no autorizada conduce a ejecución arbitraria de comandos y escalada de privilegios en Clash Verge Rev Descripción La vulnerabilidad se origina en un endpoint API no autenticado expuesto por el componente clash-verge-service, que se instala con privilegios elevados por defecto...

CVE-2026-41940

CVE-2026-41940 - Explotación Masiva de Omisión de Autenticación en WHM/cPanel 📋 Descripción CVE-2026-41940 es una vulnerabilidad crítica de omisión de autenticación en WHM/cPanel que permite a atacantes eludir la autenticación y obtener acceso root a un servidor sin credenciales válidas. La...