rosenbridge

project:rosenbridge : hardware backdoors in x86 CPUs github.com/xoreaxeaxeax/rosenbridge // domas // @xoreaxeaxeax Overview project:rosenbridge reveals a hardware backdoor in some desktop, laptop, and embedded x86 processors. The backdoor allows ring 3 userland code to circumvent processor...

DedSec

DedSec 项目 官方网站 DedSec 项目 要查看完整希腊语版本，请继续点击此处。 DedSec 项目 是一个为 Android + Termux 构建的广泛教育工具包，它在一个地方汇集了许多脚本、实用程序、本地 Web 界面和实践环境。其目的是帮助用户了解工具的工作原理，理解防御意识，并从一个单一项目中组织常见的 Termux 工作流程。 目录 如何安装和设置 DedSec 项目 网站帮助路径 设置与配置 探索工具包 开发者基础 网络工具 个人信息收集 虚假页面 游戏 其他工具 未分类 仅限赞助者 ButSystem.py 专属 联系我们与致谢 免责声明与使用条款 如何安装和设置...

osmedeus

Osmedeus Osmedeus - A Modern Orchestration Engine for Security What is Osmedeus? Osmedeus is a security focused declarative orchestration engine that simplifies complex workflow automation into auditable YAML definitions, complete with encrypted data handling, secure credential management, and...

dracon-utilities

Dracon Utilities Three small Rust CLI tools that look after a Linux development machine: one keeps your git repos committed and backed up, one keeps your disk and memory from falling over, and one stops secrets from landing in your git history. They run as ordinary user-level systemd services — n...

AllTools

所有工具 所有相当稳定的工具 AccessMask - 解码常见对象类型的访问掩码 BgInfo - Sysinternals BgInfo 工具的 WPF 版本 BITSMgr - BITS 任务管理器应用程序 CLR Explorer - 查看 .NET 进程信息/转储文件 CpuStres - 线程/CPU 压力测试应用 CpuStress v3 - 线程/CPU 压力测试应用 DebugPrint - 监视 OutputDebugString/DbgPrintEx 调用（无需驱动） DriverMon - 监视任意驱动程序活动 ErrorLookup - Win32...

avml

AVML Acquire Volatile Memory for Linux Summary A portable volatile memory acquisition tool for Linux. AVML is an X8664 userland volatile memory acquisition tool written in Rust, intended to be deployed as a static binary. AVML can be used to acquire memory without knowing the target OS distributi...

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...

idb

Idb idb is a tool to simplify some common tasks for iOS pentesting and research. Originally there was a command line version of the tool, but it is no longer under development so you should get the GUI version. idb has a new homepage athttp://www.idbtool.com All documentation and news are posted...

[SECURITY] Fedora 43 Update: bluez-5.87+1.git8750129efca8-1.fc43

Utilities for use in Bluetooth applications: - avinfo - bluemoon - bluetoothctl - bluetoothd - btattach - btmon - hex2hcd - mpris-proxy The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A...

RLSA-2026:66403 Moderate: coreutils security update

The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages. Security Fixes: coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values CVE-2026-56392 For more details about the...

v0lt

v0lt v0lt 尝试将我在安全 CTF 中使用/正在使用/将要使用的每一个工具以 Python 风格重新整合。许多练习是用 bash 脚本解决的，但 Python 可能更灵活，这就是原因。它与 Gallopsled 无关。这是一个玩具工具包，只包含小而具体的工具。 这个项目不再维护，因为这些工具本身足够小，几乎可以一直工作，无需任何维护。不过如果你想提交 PR，请随意 : 需求与安装 依赖： Libmagic Python3 BeautifulSoup Requests filemagic hexdump passlib 安装： root@kitploit: for v0lt...

Citadel

介绍 Citadel 是一个收集了各种用于渗透测试相关任务的脚本集。 包含的脚本列表 vars.zsh msfresourcescripts dnsdump.py fileinfo.zsh fileserver.py opcodes.zsh stackpush.zsh sslconvert.zsh gitdownload.zsh cardmon.zsh powershellcmdstager.py sfparser.py xmltojson.py enumforms.py linker.sh initcommit.sh shellstorm.py vars.zsh...

CVE-2026-36433

An issue in Actions Semiconductor Co. Ltd Tool- Media Player Utilities v.4.46 allows a physically proximate attacker execute arbitrary code via the Production.dll and RdiskUpgrade.exe components...

yealink_tools

Ingeniería inversa del firmware de Yealink Este repositorio contiene algunas utilidades de script utilizadas durante la ingeniería inversa del firmware de los teléfonos VoIP de Yealink. Para obtener más información sobre esta investigación, lea la entrada del blog...

CVE-2026-36433

Actions Semiconductor Media Player Utilities v.4.46 contains an arbitrary code execution vulnerability in the firmware update toolkit components Production.dll and RdiskUpgrade.exe . According to PT Security, the toolkit performs no signature verification, no checksum, and no authentication , all...

EUVD-2026-75164

An issue in Actions Semiconductor Co. Ltd Tool- Media Player Utilities v.4.46 allows a physically proximate attacker execute arbitrary code via the Production.dll and RdiskUpgrade.exe components...

AllTools v1.7

AllTools All reasonably stable tools AccessMask - decode access mask for common object types BgInfo - WPF version of the Sysinternals BgInfo tool BITSMgr - BITS jobs manager application CLR Explorer - View .NET process information / dump file CpuStres - thread/CPU stress testing app CpuStress...

PT-2026-86449

CVE-2026-36433 — Arbitrary code execution in Actions Semiconductor Media Player Utilities v.4.46 No signature. No checksum. No auth. Their own firmware update toolkit Production.dll + RdiskUpgrade.exe accepts any firmware you hand it over USB. https://t.co/meTetZ91W1 CVE...

CVE-2026-85672

zerox 1.1.20 contains an OS command injection vulnerability in the file download mechanism where the temporary file extension derived from document URLs is interpolated unsanitized into shell commands executed by poppler utilities. Attackers can craft document URLs with malicious file extensions...

CVE-2026-85672

zerox 1.1.20 (getomni-ai) is affected by an OS command injection in its file download mechanism. The temporary file extension derived from document URLs is interpolated unsanitized into shell commands executed by poppler utilities. An attacker can craft a document URL with a malicious file extens...