pagesource

pagesource A Python CLI tool that captures all resources loaded by a webpage like browser DevTools Sources tab and saves them with the original directory structure. Installation pip install pagesource IMPORTANT: Install Playwright browser after package installation playwright install chromium Usa...

SMS4_Decrypt

SMS4Decrypt 0x01 Introduction The SMS4 algorithm is an encryption algorithm used in the WAPI wireless network standard widely adopted in China. It is a block cipher algorithm with a 32-round iterative unbalanced Feistel structure, with both key length and block length of 128. The SMS4 algorithm...

PortexAnalyzerGUI

PortexAnalyzerGUI Graphical interface for PortEx, a Portable Executable and Malware Analysis Library Download Releases page Features Header information from: MSDOS Header, Rich Header, COFF File Header, Optional Header, Section Table, .NET Metadata PE Structures: Import Section, Resource Section,...

resym

ReSym Artifact This repository provides artifacts for the paper "ReSym: Harnessing LLMs to Recover Variable and Data Structure Symbols from Stripped Binaries" CCS 2024. 🏆 ACM SIGSAC Distinguished Paper Award Winner Note : We are actively maintaining/updating our artifacts. Please make sure you ar...

httrack

HTTrack Website Copier - Development Repository About Copy websites to your computer Offline browser HTTrack is an offline browser utility, allowing you to download a World Wide website from the Internet to a local directory, building recursively all directories, getting html, images, and other...

huntr-com-bug-bounties-collector

huntr.com bugs collector New bug bountyvulnerabilities collector Requirements Chrome with GUI If you encounter trouble with script execution, check the status of VMs GPU features, if available. Chrome WebDriver Preview python3 main.py 2024-02-20 16:14:47.836189 1. Arbitrary File Reading due to La...

templates

Report Templates Directory Structure notes: Script generate-directories.py grabs the current latest version of the VRT structure from GitHub and creates any missing directories. Does not remove or rename directories based on items removed from VRT. Script follows standard entry names and keeps...

BadBlood

BadBlood BadBlood by Secframe fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an...

Winrar-Exploit-CVE-2023-38831

WinRAR Exploit Builder WinForms / .NET Framework WinRAR Version Below 6.23 Overview This repository contains a small Windows desktop/console utility written in C .NET Framework 4.8 that demonstrates an archive-structure technique commonly discussed in security research contexts. About...

MOSAIC

MOSAIC What is the purpose of this initiative? MOSAIC provides a coordination structure for organziations creating AI security standards and guidelines, reducing inconsistencies, duplicate work, misalignment, and gaps. The end goal is to let the standards and guideline landscape provide clear...

ReadyScript SQL Injection

The vulnerability of the ReadyScript e-commerce management system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CRM Platform SQL Injection

The vulnerability of the platform for creating individual web applications in CRM involves the failure to take measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

Webasyst Shop-Script CMS SQL Injection

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

Webasyst Shop-Script CMS SQL Injection

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

Webim chat platform JavaScript Execution

The vulnerability of the Webim chat platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code remotely...

FOQUZ Platform XSS

The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

FOQUZ Platform XSS

The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

CrocoTime employee working time management system Code Execution

The vulnerability in the CrocoTime employee working hours tracking system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ShimMe

ShimMe Tools from the DEFCON 32 talk "SHIM me what you got - Manipulating Shim and Office for Code Injection" Office Injector - Invokes an RPC method in OfficeClickToRun service that will inject a DLL into a suspended process running as NT AUTHORITY\SYSTEM launched by the task scheduler service,...

sast-rules

Semgrep rules This is the central Semgrep rule repository that hosts the Semgrep rules for the GitLab semgrep analyzer. The repository is structured as follows: . ├── mappings │ ├── findsecbugs.yml │ ├── eslint.yml │ └── ... ├── rules │ ├── lpgl │ │ ├── java │ │ │ ├── webview │ │ │ │ ├──...