tgt-monitor-bof

Kerberos TGT Monitoring & Auto-Renewal This repository contains two Async Beacon Object Files BOF. The first, tgt-monitor, monitors the system for Kerberos logon events and wakes up the agent whenever a new Kerberos TGT is captured. Similar to Rubeus' monitor command, this BOF is running...

terraform-aws-secure-baseline

terraform-aws-secure-baseline Terraform Module Registry A terraform module to set up your AWS account with the reasonably secure configuration baseline. Most configurations are based on CIS Amazon Web Services Foundations v1.4.0 and AWS Foundational Security Best Practices v1.0.0. See Benchmark...

terraform-aws-secure-baseline

terraform-aws-secure-baseline Terraform Module Registry وحدة Terraform لإعداد حساب AWS الخاص بك مع تكوين أساسي آمن بشكل معقول. تستند معظم التهيئات إلى CIS Amazon Web Services Foundations v1.4.0 و AWS Foundational Security Best Practices v1.0.0. انظر توافق المعايير للتحقق من العناصر المشمولة في...

tricorne

Tricorne A Fedora Remix for offensive security. "My treasure? If you want it, I'll let you have it. Seek it out! I left everything at that place!" Gol D. Roger The short version Kali owns Debian. BlackArch owns Arch. Parrot owns the "security-focused desktop" niche. No one owns RPM-world offensiv...

canTot

canTot canTot is a python-based cli framework based on sploitkit and is easy to use because it is similar to working with Metasploit. This similar to an exploit framework but focused on known CAN Bus vulnerabilities or fun CAN Bus hacks. It can also be used as a guide for pentesting vehicles and...

Exploit for CVE-2026-103690

CVE-2026-103690 — SQL Injection in itsourcecode Leave Manageme...

bof

BOF BOF Boiboite Opener Framework is a testing framework for field protocols implementations and devices. It is a Python 3.6+ library that provides means to send, receive, create, parse and manipulate frames from supported protocols. The library currently provides discovery and extended testing...

odat

Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid...

CVE-2023-0297_Pre-auth_RCE_in_pyLoad

CVE-2023-0297: RCE قبل المصادقة في pyLoad قصة اكتشاف ثغرة RCE قبل المصادقة في pyLoad الخلاصة تؤدي ثغرة حقن كود في إصدارات pyLoad الأقدم من 0.5.0b3.dev31 إلى تنفيذ تعليمات برمجية عن بُعد RCE قبل المصادقة عبر إساءة استخدام وظيفة js2py. يمكنك العثور على التقرير هنا وكود الاستغلال هنا. التفاصيل pyLoa...

sogen

Sogen exécute des programmes Windows et Linux sans véritable système d'exploitation, et vous permet de voir et de contrôler tout ce qu'ils font. Au lieu de réimplémenter des milliers d'API système, Sogen émule les binaires au niveau du CPU et des appels système et exécute les véritables DLL systè...

pmotadeee

🧠 FLATLINE - Consciousness Injection Protocol WARNING: This is not a game. It's a cognitive interface for reality hacking. 🎮 HOW TO PLAY Basic Gameplay 1. Download consciousness modules CSV files from this repository 2. Inject directly into AI interfaces as file uploads 3. Experience accelerated...

pisiguard

PISIGuard Protégez vos informations personnelles et sensibles lorsque vous discutez avec une IA PISIGuard : P ersonnellement I dentifiables & S ensibles I nformations G arde Démo PISIGuard. Les données sensibles sont détectées, masquées et restaurées directement dans le navigateur J’ai créé...

WeBaCoo

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ | | | | | \ / \ | | | | | | / / | / / | |/| |/ \ / | | / \ / \ \ /\ / / | / / | | /\ | | / / / ,| // / Web Backdoor Cookie Script-Kit @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ Written by: Anestis Bechtsoudis @ bechtsoudis.com Copyright C 2011-2012...

awesome-nodejs-security

A curated list of awesome Node.js Security resources. Learn Node.js Secure Coding techniques and best practices from Liran Tal Contents Tools Web Framework Hardening Static Code Analysis Dynamic Application Security Testing Input/Output Validation Secure Composition CSRF Vulnerabilities and...

CVE-2026-42533

CVE-2026-42533 — استغلال PoC لتجاوز سعة المخزن المؤقت في الكومة لخادم nginx تنفيذ برمجي عن بُعد قبل المصادقة عبر إتلاف الالتقاط ثنائي المرور تم إصدار PoC العام في 2026-07-27 — لا تنتظر، حدّث الآن. | ---|--- CVE| CVE-2026-42533 CVSS 4.0| 9.2 حرجة النوع| تجاوز سعة المخزن المؤقت في الكومة CWE-122...

Singularity

Singularity - Stealthy Linux Kernel Rootkit "Shall we give forensics a little work?" Singularity is a powerful Linux Kernel Module LKM rootkit designed for modern 6.x kernels. It provides comprehensive stealth capabilities through advanced system call hooking via ftrace infrastructure. Full...

universal-flutter-ssl-pinning

universal-flutter-ssl-pinning Reverse-engineers libflutter.so with PyGhidra to locate the SSL certificate verification function, then emits ready-to-use bypass scripts for both Frida and Renef. How it works 1. PyGhidra loads libflutter.so headlessly and scans all defined strings for sslclient 2...

CVE-2025-55182

CVE-2025-55182 Ce dépôt contient une reproduction de preuve de concept PoC de CVE-2025-55182 , une vulnérabilité critique de sécurité dans les composants serveur React RSC permettant l'exécution de code arbitraire sans authentification. Description La vulnérabilité réside dans la manière dont les...

xnLinkFinder

About - v8.2 This is a tool used to discover endpoints, discover potential parameters, generate a target specific wordlist and find secrets for a given target. It can find them by: crawling a target pass a domain/URL crawling multiple targets pass a file of domains/URLs searching files in a given...

iLEAPP

iOS Logs, Events, And Plists Parser iLEAPP parses iOS and iPadOS forensic extractions and produces HTML, TSV, timeline, KML, and LAVA output. It supports iOS/iPadOS 11 through current versions. Browse the full searchable artifact list at leapps.org/artifacts filter by LEAPP tool. Quick Start...