aco-prompt-shield

aco-prompt-shield 🛡️ अपने LLM तक पहुंचने से पहले प्रॉम्प्ट इंजेक्शन हमलों को रोकें — शून्य API लागत, पूरी तरह से स्थानीय रूप से चलता है, 2 मिनट में एकीकृत करें। प्रॉम्प्ट इंजेक्शन LLM अनुप्रयोगों के लिए 1 सुरक्षा जोखिम है। aco-prompt-shield ज्ञात जेलब्रेक पैटर्न को पकड़ता है, ML के माध्यम से अर्थग...

xcat

XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...

hollows_hunter

hollowshunter Hollows Hunter is a command-line application based on PE-sieve passive memory scanner. Recognizes and dumps a variety of potentially malicious implants replaced/implanted PEs, shellcodes, hooks, in-memory patches. While in case of PE-sieve you can select the process only by its PID,...

Compose Aperisite

AperiSite المتطلبات Docker; Docker Compose; وقت أقل لإعداد البيئة، وقت أكثر للتأليف. التنزيل git clone https://gitlab.com/AperiKube/compose-aperisite aperisite pushd aperisite/ git submodule update --init --recursive git submodule foreach --recursive git checkout master تحضير الحاويات اسحب الحاوي...

Indushell

Indushell PoC لبرنامج C&C لبرمجية Industroyer الخبيثة العمل الأصلي بواسطة: xpn https://github.com/xpn عرض توضيحي: https://www.youtube.com/watch?v=3bulqYmPTps مقال المدونة: https://www.secarma.co.uk/labs/industroyers-command-and-control-protocol...

xcrawl3r

xcrawl3r xcrawl3r is a command-line utility designed to recursively spider webpages for URLs. It works by actively traversing websites - following links embedded in webpages, and parsing files including sitemaps & robots.txt - to uncover every URL. Unlike xurlfind3r that doesn't interact directly...

fingerprint

fingerprint विंडोज में रजिस्ट्री और फ़ाइल परिवर्तनों की निगरानी - विंडोज रजिस्ट्री और फ़ाइलों के लिए फोरेंसिक विश्लेषण "fingerprint" विंडोज सिस्टम की स्थिति को फ़ाइलों और रजिस्ट्री के संदर्भ में रिकॉर्ड करता है। ऐसे फिंगरप्रिंटों की तुलना करके सभी परिवर्तित डेटा खोजा जा सकता है। प्रोकमॉन लॉगफ़ाइल...

CVE-2019-11581

CVE-2019-11581 ثغرة حقن القوالب في Atlassian JIRA وتنفيذ الأوامر عن بُعد RCE عرض توضيحي python CVE-2019-11581.py http://xx.xx.xx.xx:8080/ "Command" تحميل الإصدار المعرّض للثغرة https://product-downloads.atlassian.com/software/jira/downloads/atlassian-jira-software-7.13.0-x64.exe إثبات المفهوم PoC...

killchain

killchain “Kill Chain” is a unified console with an anonymizer that will perform these stages of attacks: Reconnaissance Weaponization Delivery Exploit Installation Command & Control And Actions Dependent tool sets are: 1. Tor -- For the console build-in Anonymizer. 2. Set -- Social-Engineer...

buster

Description Buster is an advanced OSINT tool used to: Get social accounts of an email using multiple sourcesgravatar,about.me,myspace,skype,github,linkedin,previous breaches Get links to where the email was found using google,twitter,darksearch and paste sites Get breaches of an email Get domains...

the-bastion

🔒 The Bastion Overview Bastions are a cluster of machines used as the unique entry point by operational teams such as sysadmins, developers, database admins, ... to securely connect to devices servers, virtual machines, cloud instances, network equipment, ..., usually using ssh. The Bastion...

SUDO_KILLER

⭐ GitHub पर हमें स्टार करें — अपना समर्थन दिखाने के लिए! 💡 डार्क मोड में सबसे अच्छा देखा जाता है : SUDOKILLER प्रोजेक्ट SANS Difference Award 2023 के ओपन-सोर्स टूल श्रेणी में फाइनल में पहुंचा। योगदान समय के साथ स्टारगेज़र्स समर्थन श्रेय अस्वीकरण लाइसेंस परिचय SUDOKILLER एक उपकरण है जो साइबर सुरक्...

sunsetscan

SunsetScan Network security auditing for humans — powered by nmap, built for everyone. Website: sunsetscan.com SunsetScan is a local-network security auditing tool for home network owners and IT staff who want the depth of nmap without learning nmap syntax. Point it at your network and it finds...

gosec

gosec - Go Security Checker Inspects source code for security problems by scanning the Go AST and SSA code representation. Quick links GitHub Action Local installation Quick start Common usage patterns Selecting rules Output formats Features Pattern-based rules for detecting common security issue...

ATutor-Instructor-Backup-Arbitrary-File

ATutor-Instructor-Backup-Exploit عنوان الاستغلال: ATutor 2.2.4 'النسخ الاحتياطي' تنفيذ أوامر عن بعد CVE-2019-12170 دالة بحث جوجل: inurl:/ATutor/login.php التاريخ: 5/13/2019 مؤلف الاستغلال: liquidsky Joseph McPeters الصفحة الرئيسية للبائع: https://atutor.github.io/ رابط البرنامج:...

shootback

shootback shootback is a reverse TCP tunnel let you access target behind NAT or firewall 反向TCP隧道, 使得NAT或防火墙后的内网机器可以被外网访问. Consumes less than 1% CPU and 8MB memory under 800 concurrency. slaver is single file and only depends on python2.7/3.4+ standard library. How it works Typical Scene 1. Access...

CVE-2022-1388

CVE-2022-1388 BIG IP REST RCE في إصدارات F5 BIG-IP 16.1.x قبل 16.1.2.2، وإصدارات 15.1.x قبل 15.1.5.1، وإصدارات 14.1.x قبل 14.1.4.6، وإصدارات 13.1.x قبل 13.1.5، وجميع إصدارات 12.1.x و11.6.x، قد تتجاوز الطلبات غير المفصح عنها مصادقة iControl REST. استخدم أمر cURL التالي في سطر واحد لاختبار هذه...

aircrack-ng

Aircrack-ng Badges GitHub CI Others !Codespellhttps://github.com/a...

getaltname

GSAN - Get Subject Alternative Names GSAN is a tool that can extract Subject Alternative Names SAN found in SSL Certificates directly from https servers which can provide you with DNS names subdomains or virtual servers. It doesn't rely on Certificate Transparency logs, it connects directly to th...

CVE-2025-20029-simulation

🔐 محاكاة هجوم قابلة لإعادة التنفيذ – CVE-2025-20029 ⚠️ يحاكي هذا المستودع ثغرة CVE-2025-20029 في بيئة آمنة وخاضعة للتحكم. وهو لا يتفاعل مع أنظمة F5 BIG-IP الحقيقية أو يستغل أي خدمة إنتاجية. الهدف تعليمي: دراسة نمط الثغرة واختبار الحمولات payloads بأمان. 🛠 حول CVE-2025-20029 CVE-2025-20029 هي ثغرة...