CVE-2026-42945-NGINX-Rift-Check-Script

This repository does not have a README...

machscope

machscope machscope is a terminal-native macOS explorer that turns processes, launchd jobs, Mach services, bundles, signatures, entitlements, and Mach-O linkage into one interrogable graph. It exists to answer a simple question brutally well: What is this process, service, binary, or bundle reall...

Janus-CVE-2017-13156

Janus-CVE-2017-13156 Instructions for use : java -jar Janus.jar Janus dexfile apkfile outputfile Janus.jar : source/Janus.jar...

CVE-2026-71563

Missing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An authorization flaw in the MCP answer retrieval tool allows holders of a global API key to access answer content associated with hidden, deleted, or pending-review questions. Users are...

getSPNless

getSPNless Python tool to obtain Kerberos service tickets using the SPN-less technique. Based on Exploiting RBCD Using a Normal User Account. This tool uses the impacket project. Installation These tools are only compatible with Python 3.5+. Clone the repository from GitHub, install the...

BackDoorSim

BackdoorSim Overview BackdoorSim is a remote administration and monitoring tool designed for educational and testing purposes. It consists of two main components: ControlServer and BackdoorClient. The server controls the client, allowing for various operations like file transfer, system monitorin...

themida-devirt

Themida/CodeVirtualizer Devirtualizer Example This project demonstrates the effect of devirtualizing code protected by Themida or CodeVirtualizer. Below, you can see a simple example showing the code before virtualization and the code after devirtualization side by side. Before Virtualization|...

lightkeeper

lightkeeper A port of the Lighthouse plugin to GHIDRA. Icons made by Pixel perfect from www.flaticon.com...

autodeauth

autodeauth A tool/service built to automatically deauth local networks Tested on Raspberry Pi OS and Kali Linux Setup $ chmod +x setup.sh $ sudo ./setup.sh This can be changed by editing /etc/systemd/system/autodeauth.service ? Enter your WiFi interface to use with the autodeauth service: wlan0...

ExtractUsnJrnl

The change journal on NTFS is a file found at $Extend$UsnJrnl. It is a system metafile that is not possible to find in a normal dir listing, or even posible to by regular means. The relevant data is found in the alternate data stream named $J. There's also another ADS called $Max which is rather...

dredge-cargo

This is NOT a password manager. NOT a notes app. And definetely NOT a deep-sea benthic abberant specimen taxonomic provenance registry. But it does the first two better than either. Just kidding not really. Install • Quick Start • Features • The Link Command • Commands • How It Works • Security •...

ByteCaster

ByteCaster Swiss Army Knife for payload encryption, obfuscation, and conversion to byte arrays – all in a single command! It supports 3 encryption algorithms, 4 encoding / obfuscation algorithms and 14 output formats. Installation Download the compiled binary or compile Go source code. Usage...

CVE-2020-13942

CVE-2020-13942 Run httpx or httprob on the targets before using the script. USAGE ./CVE-2020-13942.sh target.txt Credit This script was made from Rohit Gautam Repo...

windows-security-cve-2017-8543

Example InSpec Profile This example shows the implementation of an InSpec profile...

CVE-2026-70559-PoC

CVE-2026-70559-PoC To Get This PoC - Join https://t.me/thecodeb0ss...

kaiju

CERT Kaiju Binary Analysis Framework for GHIDRA CERT Kaiju is a collection of binary analysis tools for Ghidra. This is a Ghidra/Java implementation of some features of the CERT Pharos Binary Analysis Frameworkpharos, particularly the function hashing and malware analysis tools, but is expected t...

GrafXploit

Automated Exploit Tool for Grafana CVE-2021-43798 Overview This project is an automated exploit tool designed to scan for and extract sensitive information from compromised Grafana instances vulnerable to CVE-2021-43798. The tool identifies vulnerable plugins and extracts SSH keys from compromise...

oversight

Oversight v0.5.8 Oversight is a terminal-based security intelligence tool designed to audit shell scripts and commands before they touch your system. It bridges the gap between "blind trust" and "manual auditing" by providing a high-speed, interactive analysis of both local files and remote scrip...

cottage

cott age is a GitOps tool for teams to manage age-encrypted secrets in git repositories. It provides a simple workflow to encrypt/decrypt secrets, manage recipients, and keep secrets out of the repo while still allowing for easy sharing via VCS. cottage also generates redacted previews of encrypt...

sshpass-win32

sshpass-win32 Like https://linux.die.net/man/1/sshpass Pre-Requirements To run sshpass, you must install: Windows 10 Insider build 17733 or later Install Winget winget install xhcoding.sshpass-win32 Scoop scoop install sshpass Usage Usage: sshpass options command arguments -h, --help show this he...