Matroschka

Матрёшка About Matroshka is a command-line steganography tool written in pure Python. You can use it to hide and encrypt images or text in the least significant bits of pixels in an image. Encryption The encryption uses HMAC-SHA256 to authenticate the hidden data. Therefore the supplied MAC...

log4shell-cloud-scanner

.. image:: images/Mitigalogo.png Introduction we are providing DevOps and security teams script to identify cloud workloads that may be vulnerable to the Log4j vulnerabilitylog4shell in their AWS account. We currently support "CVE-2021-44228" and "CVE-2021-45046" RCE vulnerabilities. The script...

Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Software have been addressed in recent security patch releases. Vulnerability Details CVEID:CVE-2026-55654 DESCRIPTION: A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI Generic Securit...

libptrace

libptrace libptrace is an event driven process/thread debugging, tracing, and manipulation framework. It is written in C and has Python 2.7 and 3.7 bindings. It is meant to be used as a library. The API has been designed with cross-platform support in mind. Although the current version only runs ...

fb-sleep-stats

fb-sleep-stats: Using Facebook to track your friends' sleep A small tool to show the potential privacy implications modern social media have. By tracking online/offline status of people on Facebook, it is possible to get an accurate image of their sleep pattern. Read the blog post:...

EUVD-2026-73130

Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network...

CVE-2026-69382

CVE-2026-69382 affects Microsoft Exchange Server due to the use of a broken or risky cryptographic algorithm , allowing an unauthorized, unauthenticated attacker to disclose information over a network . The CVSS 3.1 base score is 5.9 (MEDIUM) , reflecting a network attack vector with high complex...

Dagon

Dagon - Manipulación Avanzada de Hashes Llamado así por el príncipe del Infierno, Dagon day-gone es un sistema avanzado de cracking y manipulación de hashes, capaz de realizar fuerza bruta en múltiples tipos de hash, crear diccionarios de fuerza bruta, verificación automática de algoritmos de has...

twitter-advanced-search

🔍 Advanced Search on Twitter These operators work on Web, Mobile, Tweetdeck. There is some overlap, but largely these will not work for v1.1 Search, Premium Search, or v2 Search APIs. Adapted from TweetDeck Help, @lucahammer Guide, @eevee Twitter Manual, @pushshift and Twitter / Tweetdeck itself...

CVE-2024-21754-Forti-RCE

FortiOS and FortiProxy Password Hashing Vulnerability to RCE CVE-2024-21754 Overview A critical vulnerability, classified as CVE-2024-21754, has been identified in FortiOS and FortiProxy versions up to 7.4.3, 7.2, 7.0, 6.4, and 2.0. This vulnerability, categorized under CWE-916, involves the use ...

Clematis

Clematis 中文 | English 🛠️ A powerful tool for converting PE files EXE/DLL into position-independent shellcode. ✨ Key Features Support for converting PE files EXE/DLL to shellcode Compatible with both x86 and x64 architectures Command-line argument support Built-in LZNT1 compression algorithm for...

python: Python tarfile module: Directory traversal allows creation of empty directories outside extraction destination

A flaw was found in the Python tarfile module. This vulnerability allows an attacker to create empty directories outside of the intended extraction destination on POSIX Portable Operating System Interface platforms. This occurs when processing a specially crafted archive containing member names...

tlsx

Características • Instalación • Uso • Ejecutar tlsx • Únete a Discord Un recolector de TLS rápido y configurable centrado en la recopilación y análisis de datos basados en TLS. Características Conexión TLS rápida y totalmente configurable Múltiples modos de conexión TLS Múltiples sondas TLS...

macos_xprotect

Introduction to macOS - XProtect Continuing my blogpost series on intoruction to macOS, I've decided to dedicate a short blogpost to XProtect. What is XProtect? XProtect is Apple's built-in antivirus and malware signature system for macOS. It operates as part of the XProtectService, which scans...

bfinject

bfinject Easy dylib injection for jailbroken 64-bit iOS 11.0 - 11.1.2. Compatible with Electra and LiberiOS jailbreaks. bfinject loads arbitrary dylibs into running App Store apps. It has built-in support for decrypting App Store apps, and comes bundled with iSpy and Cycript. bfinject is a wrappe...

CVE-2021-31166

CVE-2021-31166 Why I recently wrote an exploit for CVE-2021-31166, it exploit CVE-2021-31166 and CVE-2021-31166. A pentester should use https://github.com/mauricelambert/CVE-2021-31166, but in SOC teams we need to know the specific vulneraility to fix it properly, which is why i wrote this exploi...

firmware-workshop

Hands-on Firmware Extraction, Exploration, and Emulation Join us for this hands-on demo of Unblob, the flexible firmware extractor. During this workshop session, we will extract firmware from an EV charger, dig into the firmware, and eventually emulate it so we can interact with the services in...

windows-api-function-cheatsheets

Windows API Function Cheatsheets Contact 🌨️ Snowcrash: [email protected] Table of Contents Windows API Function Cheatsheets File Operations Process Management Memory Management Thread Management Dynamic-Link Library DLL Management Synchronization Interprocess Communication Windows Hooks...

EmbedPayloadInPng

EmbedPayloadInPng Embed a payload within a PNG file by splitting the payload across multiple IDAT sections. Each section is encrypted individually using its own 16-byte key with the RC4 encryption algorithm. Quick Links Maldev Academy Home Maldev Academy Syllabus Maldev Academy Pricing...

CVE-2025-26865

CVE-2025-26865: FreeMarker Server-Side Template Injection via the "ecommerce" plugin in Apache OfBiz Due to a regression between 18.12.17 and 18.12.18 the fix for finding CVE-2022-25813: FreeMarker Server-Side Template Injection in Apache OfBiz was no longer enforced which reopened the possibilit...