ofrak

OFRAK OFRAK Open Firmware Reverse Analysis Konsole is a binary analysis and modification platform. OFRAK combines the ability to: Identify and Unpack many binary formats Analyze unpacked binaries with field-tested reverse engineering tools Modify and Repack binaries with powerful patching...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

wssip

This repository does not have a README...

Adalanche

Adalanche Open Source Attack Graph Visualizer and Explorer Adalanche gives instant results, showing you what permissions users and groups have in an Active Directory. It is useful for visualizing and exploring who can take over accounts, machines or the entire domain, and can be used to find and...

ntopng

ntopng Introduction ntopng® is a web-based network traffic monitoring application released under GPLv3. It is the new incarnation of the original ntop written in 1998, and now revamped in terms of performance, usability, and features. While you can read more about ntopng on the ntop web site...

Covenant

Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraft easier, and serve as a collaborative command and control platform for red teamers. Covenant is an ASP.NET Core, cross-platform application that includes a...

ssrf-king

🔥 ssrf-king 🔥 v1.12 Latest SSRF plugin for burp that Automates SSRF Detection in all of the Request alt text If you are facing any problems or would like a new feature that is not listed below Please create a new issue below in this form Create New Issue Upcoming Features Checklist ✔️ It will soon...

EUVD-2026-117062

Sonatype Nexus Repository 3 allows a user account that can push manifests to a hosted OCI repository a user account that holds the edit permission on that repository to store script content in the artifact type field of an OCI manifest. The script runs in the browser of a user who opens the...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start Download the Repo = run npm i Afer Installing all dependency just run the application node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4 Broken Session Management ✅5 We...

cracked

Cracked Download and train your retro-engineering skills 🖳 What is Cracked? Cracked is a TUI for downloading quickly crackmes.one challenges while staying in your terminal. How to use Cracked? Installation cargo install cracked Usage $ cracked --help Usage: cracked OPTIONS Options: -n, --name...

CVE-2025-62819

Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certificate via the RA Registration Authority User Interface. This allows a remote user, authenticated with a valid client certificate, to renew their certificate even if the end entity status...

CVE-2025-62819

Keyfactor EJBCA through version 9.3.3 contains an authorization flaw in the RA (Registration Authority) User Interface . The system performs insufficient checks when a remote user self-renews a client certificate, allowing them to bypass end entity status or profile settings that should otherwise...

EUVD-2025-211240

Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certificate via the RA Registration Authority User Interface. This allows a remote user, authenticated with a valid client certificate, to renew their certificate even if the end entity status...

CVE-2025-62819

Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certificate via the RA Registration Authority User Interface. This allows a remote user, authenticated with a valid client certificate, to renew their certificate even if the end entity status...

CVE-2025-62819: n/a: Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certificate via…

Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certificate via the RA Registration Authority User Interface. This allows a remote user, authenticated with a valid client certificate, to renew their certificate even if the end entity status...

PT-2026-135437

Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certificate via the RA Registration Authority User Interface. This allows a remote user, authenticated with a valid client certificate, to renew their certificate even if the end entity status...

arachni-ui-web

Notice Arachni is heading towards obsolescence, try out its next-gen successor Ecsypno SCNR! Arachni - Web User Interface Version | 0.6.1.1 ---|--- Homepage | http://arachni-scanner.com Blog | http://arachni-scanner.com/blog Github | http://github.com/Arachni/arachni-ui-web Documentation |...

CVE-2026-117681

A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user interface proxy automatically disables Transport Layer Security TLS certificate verification for connections to internal backend services in environments lacking a default service certificate authority...

CVE-2026-117681: A flaw was found in konflux-ci

A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user interface proxy automatically disables Transport Layer Security TLS certificate verification for connections to internal backend services in environments lacking a default service certificate authority...

PT-2026-134488

Name of the Vulnerable Software and Affected Versions konflux-ci affected versions not specified Description A flaw in the user interface proxy allows privilege escalation when Transport Layer Security TLS certificate verification is automatically disabled for connections to internal backend...