WebKit-CVE-2016-4622

Analyse CVE-2016-4622 de WebKit : Plongée approfondie dans la vulnérabilité du chemin rapide Slice ValueOf Analyse complète et exploitation de la vulnérabilité du moteur JavaScript Core de WebKit permettant la divulgation mémoire via la manipulation de Array.slice Table des matières Résumé exécut...

Exploit for CVE-2026-12513

CVE-2026-12513: Shared Files Quick Links: Explore the res...

dhcpoptinj

Injecteur d'options DHCP Avez-vous déjà voulu intercepter des requêtes DHCP et y insérer quelques options DHCP supplémentaires, à l'insu de l'expéditeur ? Probablement pas. Cependant, si le besoin se présentait, dhcpoptinj vous aidera espérons-le. Pourquoi Il peut y avoir de nombreuses raisons de...

dhcpoptinj

DHCP option injector Have you ever wanted to intercept DHCP requests and squeeze in a few extra DHCP options, unbeknownst to the sender? Probably not. However, should the need ever come, dhcpoptinj will hopefully help you. Why There can be many a reason to mangle DHCP requests, although chances a...

creepy-plugins

creepy-plugins Description Plugins for cree.py The architecture of cree.py allows for multiple user-defined sources for geolocation information. These sources are defined as plugins and can be installed in creepy by copying them into the plugins folder under the installation directory. New plugin...

creepy-plugins

creepy-plugins Описание Плагины для cree.py Архитектура cree.py позволяет использовать множество пользовательских источников геолокационной информации. Эти источники определяются как плагины и могут быть установлены в creepy путём копирования их в папку plugins в каталоге установки. Новые плагины...

malware-jail

malware-jail Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js malware-jail is written for Node's 'vm' sandbox. Currently implements WScript Windows Scripting Host context env/wscript.js, at least the part frequently used by malware...

DutchOven

DutchOven Application-scoped Windows network brownouts for deterministic red-team validation. Native C • Windows Filtering Platform • IPv4 + IPv6 • Dynamic cleanup Read the accompanying blog post → Quick start • Profiles • CLI • How it works • Build • BOF • Validation !CAUTION Controlled...

SiemX

SIEM-X A lightweight Security Orchestration, Automation, an...

bug-bounty-library

Bug Bounty / Original Findings Library Folders are numbered in the order a hunter actually works - first to last. Start at 00-hunt/00-INDEX. Run the hunt from 00-hunt/ALPHA. This README is only the map. Authorization only. Safe harbor, VDP, GitHub PVR, or coordinated disclosure. No other-customer...

instarecon

InstaRecon Automated basic digital reconnaissance. Great for getting an initial footprint of your targets and discovering additional subdomains. InstaRecon will do: DNS lookups A, PTR, MX, NS DNS lookups recursively on all hosts discovered Whois on domain and IP lookups Google dorks looking for...

instarecon

InstaRecon Reconnaissance numérique de base automatisée. Idéal pour obtenir une première empreinte de vos cibles et découvrir des sous-domaines supplémentaires. InstaRecon effectuera : Requêtes DNS A, PTR, MX, NS Requêtes DNS récursives sur tous les hôtes découverts Requêtes Whois sur le domaine ...

house

root@kitploit: / | \ / / | | / // \ \ Y | /\ \ / | / /|// \ / House / / Dynamic Mobile Analysis Tool Contact: [email protected] House : A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python. It is designed for helping assess mobile...

agentic-dm-gateway

Agentic DM Gateway Security control plane for LLM agents over private chat typically Discord DMs. It sits in front of your agent. It decides who may talk, whether the session is unlocked, whether the process is paused, and whether this message is safe enough to forward. Your model and tools stay...

ctf-writeups

COMPFEST 18 CTF 2026 — OuSec Team Writeups Event: COMPFEST C...

krane

Krane Kubernetes RBAC Analysis made Easy Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its...

krane

Krane Kubernetes RBAC Analysis made Easy Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its...

NetSet

NetSet Operational Security utility and automator. Version 1.1.0 NetSet is designed to automate a number of operations that will help the user with securing their network traffic. It also provides an easy way to gather proxies and run utilities through Tor. All the utilities installed and used by...

GyoiThon

GyoiThon : Next generation penetration test tool Japanese page is here. Presentation January 25th,2018:JANOG41 March 23th,2018:Black Hat ASIA 2018 Arsenal August 12th,2018:DEFCON26 DemoLabs October 24th,2018:OWS in CSS2018 November 3rd,2018:AV TOKYO 2018 HIVE December 22-23th,2018:SECCON YOROZU...

violin

Violin ☤ — 감독형 에이전트 Hermes 침투 테스트 프로필 플레이북 35개 · 참조 17개 · 템플릿 13개 · 필수 실행 가드 · Hermes 네이티브 Violin은 Hermes 네이티브 에이전트 침투 테스트 프로필 로, 감독되고 승인된 침투 테스트를 위한 것입니다 — 정찰부터 안전한 익스플로잇 검증, 보고까지. Hermes의 내장 도구 세트, 7개의 라우팅된 스킬, 그리고 대상 실행 경계에서 필수인 violin-guard 플러그인을 사용합니다. 독립형 CLI는 릴리스 검사, 진단, 관리 복구를 지원하며, 대상 명령...