craw

CRAW: Codec Robust Audio Watermarking Source code for CRAW , a robust audio watermarking method built on STFT-magnitude-domain embedding. An encoder embeds a binary message into an audio clip's magnitude spectrogram phase is preserved from the clean signal; a decoder recovers the message under a...

Winstrument

Winstrument Winstrument is a framework of modular scripts to aid in instrumenting Windows software using Frida for reverse engineering and attack surface analysis. Contents Installation Usage Project Structure Modules CLI Troubleshooting Copyright Installation This project supports python 3.7...

WindowsFirewallHookDriverEnumeration

Windows Firewall Hook Driver Enumeration Tools to enumerate Windows Firewall Hook Drivers on Windows 2000, XP and 2003. We've seen a malicious code sample which uses this technique. The Hooking Technique The Windows Firewall Hook functionality in XP/2003 technique 12345 uses an IOCTL of...

CVE-2026-1529-PoC-keycloak-unauthorized-registration-via-improper-invitation-token-validation

CVE-2026-1529 Keycloak Exploit Tool Keycloak: Unauthorized organization registration via improper invitation token validation Disclaimer This tool is for educational and security testing purposes only. Use only on systems you have explicit permission to test. Unauthorized access to computer syste...

anomaly-flow

Anomaly-Flow Framework for implementing Intrusion Detection Systems NIDS aimed at identifying anomalies in network flows using Machine Learning models. Reference paper: Anomaly-Flow: A Multi-domain Federated Generative Adversarial Network for Distributed Denial-of-Service Detection Create the...

CVE-2026-2413

CVE-2026-2413 Ally – Web Accessibility & Usability = 4.0.3 - Unauthenticated SQL Injection via URL Path Description The Ally – Web Accessibility & Usability plugin for WordPress is vulnerable to SQL Injection via the URL path in all versions up to, and including, 4.0.3. This is due to insufficien...

BlackLotus-analysis-stage2-bootkit-rootkit-stage

BlackLotus-analysis-stage2-bootkit-rootkit-stage BlackLotus stage 2 bootkit-rootkit analysis Before we dive into this divine shitbelive me this is some divine shit as nobody can do this withouth GOD's Willat least that's my opinion on this ,here's the hash for the bootkit file Frist things first...

pulsexploit

pulsexploit Automated script for Pulse Secure SSL VPN exploit CVE-2019-11510 using hosts retrieved from Shodan API. You must have a Shodan account to use this script. Click here if you don't have Shodan account. Installation 1. Install dependencies. CentOS & Fedora yum install git python3 -y Ubun...

JXL_Infotainment_CVE-2025-69515

CVE-2025-69515 Attack Name 📂 Additional Details Afftected product Affected Components GNSS Receiver Module / GPS Chipset Infotainment Navigation Module Location Services Framework Attack Vector The infotainment unit can be targeted by broadcasting spoofed GPS signals using an SDR device. Because...

CVE-2024-4956

CVE-2024-4956 This repository contains a Python utility for automating the exploitation of CVE-2024-4956 and is capable of mass testing file paths from an input file while automating the process of saving existing file path contents to disk for analysis. Details for the vulnerability can be found...

richkit

Richkit Richkit is a python3 package that provides tools taking a domain name as input, and returns addtional information on that domain. It can be an analysis of the domain itself, looked up from data-bases, retrieved from other services, or some combination thereof. The purpose of richkit is to...

SFPolDevChk

Salesforce Policy Deviation Checker Released as open source by NCC Group Plc - https://www.nccgroup.com/ Developed by Jerome Smith @exploresecurity With thanks to Stephen Tomkinson @neonbunny9 https://www.github.com/nccgroup/SFPolDevChk Released under AGPL - refer to LICENSE for more information...

call_map

========== Call Map .. default-role:: code About Call Map is a tool for navigating call graphs in Python, with plans to support other languages. Below is a screen shot after running callmap -m toolz, then clicking on some functions. .. figure:: docs/UI-clicked-on-function.png While Call Map is...

adobe-flash-cve2018-15982

Adobe Flash CVE-2018-15982 This script creates a swf payload for CVE-2018-15982, which is based off of the PoC from https://github.com/smgorelik/Windows-RCE-exploits. The vulnerability was discovered by Chenming Xu and Ed Miles of Gigamon ATR. The vulnerability is a use-after-free flaw enabling...

cve-images

cve-images — intentionally vulnerable lab images A collection of deliberately vulnerable Docker images for security study in an isolated lab. Started as nginx CVE reproductions and is growing into a broader set of vulnerable-by-design images e.g. DVWA. ⚠️ Safety These images are vulnerable on...

Wallet-Transaction-Monitor

Wallet Transaction Monitor This script monitors a Bitcoin wallet address and notifies the user when there are changes in the balance or new transactions. It provides real-time updates on incoming and outgoing transactions, along with the corresponding amounts and timestamps. Additionally, it can...

salus

Salus: Guardian of Code Safety and Security 🔍 Overview Salus Security Automation as a Lightweight Universal Scanner, named after the Roman goddess of protection, is a tool for coordinating the execution of security scanners. You can run Salus on a repository via the Docker daemon and it will...

W0nTsEEMe

W0nTsEEMe simple keylogger using python written for ubuntu Requirements: keyboard module to get it: pip install keyboard Also it must be run as sudo Under construction.N0t finished yet...

bigint-buffer-js

bigint-buffer-js Drop-in replacement for [email protected] without the native binding. bigint-buffer ≤ 1.1.5 has a buffer overflow in the native toBigIntLE CVE-2025-3194 / GHSA-3gc7-fjrx-p6mg and no fixed version has been published. It is pulled in transitively by @solana/buffer-layout-utils...

CAPEsolo

Python GUI to run capemon in standalone VM. Provides a subset of CAPE Configuration And Payload Extraction processing and results. The Interface Tabs across the top: Start, then one per result view Info, Behavior, Signatures, Payloads, Yara, Configs, Strings, Debugger, JS Log, Network. The Start...