504 matches found
eps-CVE-2017-0261
eps-CVE-2017-0261- eps vulnerability CVE-2017-0261 analysis Analysis process idb ida6.1 Intermediate documents Loading the eps program POC code used And the original vulnerability file...
diaphora-mcp
Читать на русском языке Diaphora MCP Diaphora MCP is an MCP Model Context Protocol server for automated binary diffing. It connects Diaphora the diffing engine and IDA Pro the disassembler via the MCP protocol, allowing AI agents such as Claude Code to perform binary file comparison, find securit...
Preparation-Guide-to-OSCP
Guide to OSCP I am writing this guide to cover all OSCP topics as well as other infosec knowledge in details, I will also provide a cheat-sheet in each section so that you can use the commands directly once you understand the topics/tools. But I think to become a good pentester you should know ho...
sslscan
sslscan2 sslscan version 2 has now been released. This includes a major rewrite of the backend scanning code, which means that it is no longer reliant on the version of OpenSSL for many checks. This means that it is possible to support legacy protocols SSLv2 and SSLv3, as well as supporting TLSv1...
PatchaPalooza
PatchaPalooza patchapalooza.com — the interactive version is live! This CLI tool has been superseded by patchapalooza.com , a full interactive website for exploring and analyzing Microsoft Patch Tuesday data. It covers everything this tool does — and much more. Head there for the best experience...
BWASP
BWASP The BoB Web Application Security Project BWASP is an open-source, analysis tool to support for Web Vulnerability Manual Analysis hackers. The BWASP tool basically provides predicted information through vulnerability analysis without proceeding with an attack. BWASP supports performing...
CVE-2022-29622
CVE-2022–29622: Invulnerability Analysis This codebase was created to help security professionals and developers to understand why I think Formidable was not vulnerable to CVE-2022-29622. I have written up my analysis here: CVE-2022–29622: Invulnerability Analysis As some did not understand it, I...
CVE-mitre
CVE-Mitre Common Vulnerability Exposure Download single CVE The variable is only for example ; you can make your own SVN script for downloading a single folder = CVE = BR @nu11secur1ty $CVE = CVE-2020-13935 root@kitploit: svn checkout https://github.com/nu11secur1ty/CVE-mitre/trunk/$CVE Link tabl...
GPT_Vuln-analyzer
GPTVuln-analyzer This is a Proof Of Concept application that demostrates how AI can be used to generate accurate results for vulnerability analysis and also allows further utilization of the already super useful ChatGPT made using openai-api, python-nmap, dnsresolver python modules and also use...
FirmAE
FirmAE FirmAE 是一个全自动框架，用于执行固件模拟和漏洞分析。FirmAE 通过五种仲裁技术显著提高了模拟成功率（从 Firmadyne 的 16.28% 提升至 79.36%）。我们在来自前八大厂商的 1,124 个无线路由器和 IP 摄像头固件镜像上测试了 FirmAE。 我们还开发了一款用于 0-day 漏洞发现的动态分析工具，该工具基于目标固件的文件系统和内核日志推断 Web 服务信息。通过在我们成功模拟的固件镜像上运行该工具，我们发现了 12 个影响 23 台设备的新 0-day 漏洞。 安装 请注意，我们已在 Ubuntu 20.04 上测试了 FirmAE。 1...
firmware-analysis-toolkit
FAT — 固件分析工具包 固件分析工具包 是一个用于调查 IoT、物理 AI、移动设备与机器人领域固件安全性的安全研究工具包。它主要为 Attify 举办的 “Offensive IoT Exploitation” 培训而构建。 该工具基于实际现场实践经验构建，聚焦于真正重要的固件安全调查工作。 FAT 的目标不仅是构建一款世界一流的固件安全研究工具包，还致力于培养能够发挥最佳水平的专业人才与实践者——若以特定方式使用，该工具可成为认知层面的超级能力，同时对于该领域的新手也足够易于上手。 其部分功能包括：对未知固件进行分类、提取文件系统、映射信任相关代码、追踪污点数据流，以及协调 QE...
CVE-2020-17035-patch-analysis
CVE-2020-17035-patch-analysis CVE-2020-17035 patch analysis...
V8Harvest
V8Harvest V8Harvest helps view recent V8 bug patterns on a single page for analyzing V8 vulnerabilities. It has parsed all regress- files under the directory of src/v8/test/mjsunit/ using git log. Each regress contains the following links related to its own information: Chromium Bugs / V8 Bugs V8...
KoodousFinder
KoodousFinder A simple tool to allows users to search for and analyze android apps for potential security threats and vulnerabilities Account and API Key Create a Koodous account and get your api key https://koodous.com/settings/developers Install $ pip install koodousfinder Arguments Param|...
SSRF-CVE-2023-22493
SSRF-CVE-2023-22493 Analysis of CVE-2023-22493...
cve-2021-44228
cve-2021-44228 This is the mid-term assignment archive of the "Vulnerability Analysis Lab" Junior Fall-Winter at Anhui University. The full document is at https://testgames.me/2024/11/10/cve-2021-44228/...
activemq-rce-cve-2023-46604
README simple analysis for CVE-2023-46604 https://thinkycx.me/2024-04-19-activemq-cve-2023-46604-analysis.html...
CVE-2026-50522
CVE-2026-50522 Microsoft SharePoint CVE-2026-50522 payloads and analysis. HTTP requests...
analise-vulnerabilidades-zabbix-notebooklm
🛡️ SQLi Vulnerability Analysis in Zabbix with NotebookLM Thematic Notebook developed as a deliverable for the DIO Project Challenge Using NotebookLM as an active AI tool for curation, synthesis, and organization of knowledge in Cybersecurity 📋 Table of Contents Context and Objectives Source...