SSRF-CVE-2023-22493

SSRF-CVE-2023-22493 Analysis of CVE-2023-22493...

V8Harvest

V8Harvest V8Harvest helps view recent V8 bug patterns on a single page for analyzing V8 vulnerabilities. It has parsed all regress- files under the directory of src/v8/test/mjsunit/ using git log. Each regress contains the following links related to its own information: Chromium Bugs / V8 Bugs V8...

CVE-2022-25845-exploit

CVE-2022-25845-exploit Try exploiting this CVE by studying some articles: https://jfrog.com/blog/cve-2022-25845-analyzing-the-fastjson-auto-type-bypass-rce-vulnerability/ https://www.freebuf.com/vuls/339752.html This is my analyze:...

GPT_Vuln-analyzer

GPTVuln-analyzer Esta es una aplicación de Prueba de Concepto que demuestra cómo la IA puede ser utilizada para generar resultados precisos para el análisis de vulnerabilidades y también permite una mayor utilización del ya súper útil ChatGPT hecho usando openai-api, python-nmap, dnsresolver...

firmware-analysis-toolkit

FAT — Kit de Análisis de Firmware Firmware Analysis Toolkit es un kit de investigación de seguridad para investigar la seguridad del firmware en IoT, IA Física, Dispositivos Móviles y Robótica. Está construido principalmente para el entrenamiento "Offensive IoT Exploitation" impartido por Attify...

CVE-mitre

CVE-Mitre Common Vulnerability Exposure Download single CVE The variable is only for example ; you can make your own SVN script for downloading a single folder = CVE = BR @nu11secur1ty $CVE = CVE-2020-13935 root@kitploit: svn checkout https://github.com/nu11secur1ty/CVE-mitre/trunk/$CVE Link tabl...

sslscan

sslscan2 sslscan version 2 has now been released. This includes a major rewrite of the backend scanning code, which means that it is no longer reliant on the version of OpenSSL for many checks. This means that it is possible to support legacy protocols SSLv2 and SSLv3, as well as supporting TLSv1...

CVE-2017-0541

poc and vulnerability analysis of CVE-2017-0541...

diaphora-mcp

Leer en ruso Diaphora MCP Diaphora MCP es un servidor MCP Model Context Protocol para el diffing automatizado de binarios. Conecta Diaphora el motor de diffing e IDA Pro el desensamblador mediante el protocolo MCP, permitiendo que agentes de IA como Claude Code realicen comparaciones de archivos...

FirmAE

FirmAE FirmAE is a fully-automated framework that performs emulation and vulnerability analysis. FirmAE significantly increases the emulation success rate From Firmadyne's 16.28% to 79.36% with five arbitration techniques. We tested FirmAE on 1,124 wireless-router and IP-camera firmware images fr...

PatchaPalooza

PatchaPalooza patchapalooza.com — ¡la versión interactiva ya está en línea! Esta herramienta CLI ha sido reemplazada por patchapalooza.com , un sitio web interactivo completo para explorar y analizar los datos del Patch Tuesday de Microsoft. Cubre todo lo que esta herramienta hace — y mucho más...

KoodousFinder

KoodousFinder Una herramienta simple que permite a los usuarios buscar y analizar aplicaciones de Android en busca de posibles amenazas y vulnerabilidades de seguridad Cuenta y Clave API Crea una cuenta en Koodous y obtén tu clave API en https://koodous.com/settings/developers Instalación $ pip...

eps-CVE-2017-0261

eps-CVE-2017-0261- Análisis de la vulnerabilidad eps CVE-2017-0261 idb del proceso de análisis ida6.1 Documentos intermedios Carga del programa eps Código PoC utilizado Y los archivos originales de la vulnerabilidad...

BWASP

BWASP El Proyecto de Seguridad de Aplicaciones Web BoB BWASP es una herramienta de análisis de código abierto para apoyar a los hackers en el análisis manual de vulnerabilidades web. La herramienta BWASP básicamente proporciona información predicha a través del análisis de vulnerabilidades sin...

CVE-2022-29622

CVE-2022–29622: Invulnerability Analysis This codebase was created to help security professionals and developers to understand why I think Formidable was not vulnerable to CVE-2022-29622. I have written up my analysis here: CVE-2022–29622: Invulnerability Analysis As some did not understand it, I...

cve-2014-4699-ptrace

análisis https://duasynt.com/blog/cve-2014-4699-linux-kernel-ptrace-sysret-analysis...

cve-2021-44228

cve-2021-44228 This is the mid-term assignment archive of the "Vulnerability Analysis Lab" Junior Fall-Winter at Anhui University. The full document is at https://testgames.me/2024/11/10/cve-2021-44228/...

CVE-2020-17035-patch-analysis

CVE-2020-17035-patch-analysis CVE-2020-17035 补丁分析...

Preparation-Guide-to-OSCP

Guide to OSCP I am writing this guide to cover all OSCP topics as well as other infosec knowledge in details, I will also provide a cheat-sheet in each section so that you can use the commands directly once you understand the topics/tools. But I think to become a good pentester you should know ho...

0day-security-software-vulnerability-analysis-technology

0day-security-software-vulnerability-analysis-technology Notes on Using the Companion Resource Pack for "0day Security: Software Vulnerability Analysis Technology Second Edition" The materials in this resource pack are for learning purposes only. No organization, individual, or institution may us...