udpack

UDPack UDPack is an extensible generic UDP packet obfuscator. The purpose of this application is to sit in the path of a UDP data stream, and obfuscate, deobfuscate or otherwise modify the packets. Python 3.4 or above is required, since this script uses the asyncio library. Using the latest Pytho...

CVE-2023-44487

CVE-2023-44487 Basic vulnerability scanning to see if web servers may be vulnerable to CVE-2023-44487 This tool checks to see if a website is vulnerable to CVE-2023-44487 completely non-invasively. 1. The tool checks if a web server accepts HTTP/2 requests without downgrading them 2. If the web...

LFISuite

LFI Suite What is LFI Suite? LFI Suite is a totally automatic tool able to scan and exploit Local File Inclusion vulnerabilities using many different methods of attack, listed in the section Features. Features Works with Windows, Linux and OS X Automatic Configuration Automatic Update Provides 8...

365cam-stream

365Cam Stream Stream your cheap WiFi camera directly to your computer — no app, no cloud, no account needed. Bought a small WiFi camera from AliExpress / Amazon / Temu and it only works through a phone app? This tool lets you view the camera feed directly in your browser over your local network...

CVE-2026-33606

A flaw was found in Dovecot. A malicious user can craft specific mail content that, when an administrator later uses the dsync tool with the stream protocol, is interpreted as dsync commands. This command injection allows the user to modify the state of mailboxes on the destination, including...

RTSPbrute

RTSPBrute Inspired by Cameradar Features Find accessible RTSP streams on any target Brute-force stream routes Brute-force credentials Make screenshots on accessible streams Generate user-friendly report of the results: .txt file with each found stream on new line .html file with screenshot of eac...

tenzir

Data Pipelines for Security Teams Collect, transform, enrich, and route your telemetry—all in one place. What is Tenzir? Tenzir is the data pipeline engine for security teams. If you need to collect, parse, shape, normalize, aggregate, store, query, and route security telemetry data at scale,...

snuffleupagus

Snuffleupagus Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! Key Features • Download • Examples • Documentation • License • Thanks Snuffleupagus is a PHP 7+ and 8+ module designed to drastically raise the cost of attacks against websites, by killing entire b...

bucket-stream

🚨 Bucket Stream 已不再维护。如果您需要红队行动的支持或咨询，请发送邮件至 [email protected] 🚨 Bucket Stream 通过监控证书透明度日志发现有趣的 Amazon S3 存储桶。 该工具仅监听各种证书透明度日志（通过 certstream），并尝试从证书域名的排列中寻找公开的 S3 存储桶。 请负责任地使用。 我创建此工具主要是为了强调公开 S3 存储桶相关的风险，并为常规的字典攻击提供不同的思路。如果您使用 S3 存储桶，以下是一些快速提示： 1. 随机化您的存储桶名称！没有必要使用...

bkcrack

bkcrack 使用 Biham 和 Kocher 的已知明文攻击破解传统 ZIP 加密。 概述 ZIP 归档可能包含许多条目，其内容可以被压缩和/或加密。 具体来说，条目可以使用基于密码的对称加密算法进行加密，该算法通常称为传统 PKWARE 加密、传统加密或 ZipCrypto。 该算法生成一个伪随机字节流（密钥流），通过与条目内容（明文）进行异或运算来产生加密数据（密文）。 生成器的状态由三个 32 位整数组成，使用密码初始化，并在加密过程中随着明文不断更新。 这种加密算法容易受到已知明文攻击，如 Eli Biham 和 Paul C. Kocher 的研究论文《对 PKZIP...

bkcrack

bkcrack Crack legacy zip encryption with Biham and Kocher's known plaintext attack. Overview A ZIP archive may contain many entries whose content can be compressed and/or encrypted. In particular, entries can be encrypted with a password-based symmetric encryption algorithm referred to as...

project_bias

projectbias Un motor de flujo criptográfico de alto rendimiento y sin sesgo escrito en Ada y verificado formalmente con SPARK. El motor garantiza cero sesgo estadístico al mapear entropía bruta hacia alfabetos personalizados, descartando valores con sesgo de módulo, obteniendo los bytes de...

TwitWork

TwitWork What is TwitWork? Demonstration Require Installation Development setup Download precompiled exe What is TwitWork? Monitor twitter stream. TwitWork use the twitter stream which allows you to have a look at tweets in real-time. There is an input that allows you to filter the flow on one or...

ids_bypass

Disclaimer These programs is for Educational purpose ONLY. Do not use it without permission. injectserver: Proof-Of-Concept for CVE-2018-6794. If as a server side you break a normal TCP 3 way handshake packets order and inject some response data before 3whs is complete then data still will be...

SymaX5SW-Rx-Tx

SymaX5SW Rx and Tx Research carried out on a SYMA X5SW Drone with three defined objectives. 1. Intercept the telemetry of the Drone and display it in a graphical interface in real-time. 2. Create a transmitter command control, using RF, Arduino modules and C code. 3. Intercept the video stream of...

ApacheSolrRCE

Project Statement For information security teaching and communication only. Do not use for illegal testing or attacks. ApacheSolrRCE ApacheSolrRCE CVE-2019-0193 one-click write shell, the principle is to write a web shell through code execution of Java file stream. Note: The author is not very...

shomon

ShoMon is a Shodan alert feeder for TheHive written in GoLang. With version 2.0, it is more powerful than ever! Functionalities Can be used as Webhook OR Stream listener Webhook listener opens a restful API endpoint for Shodan to send alerts. This means you need to make this endpoint available to...

tweetable-polyglot-png

tweetable-polyglot-png Pack up to 3MB of data into a tweetable PNG polyglot file. See it in action here: https://twitter.com/David3141593/status/1371974874856587268 Other image hosts I've verified this technique to work on: Imgur https://i.imgur.com/kNhGrN3.png Github repo thumbnail/header image...

CVE-2026-68763

A flaw was found in Apache Tomcat. This vulnerability, an uncontrolled resource consumption issue, arises from an allocation leak in the HTTP/2 backlog tracking when a stream is reset. A remote attacker could exploit this to cause a Denial of Service DoS, making the server unresponsive or...

Dshell

Dshell An extensible network forensic analysis framework. Enables rapid development of plugins to support the dissection of network packet captures. Key features: Deep packet analysis using specialized plugins Robust stream reassembly IPv4 and IPv6 support Multiple user-selectable output formats...