python-ecdsa

Pure-Python ECDSA and ECDH This is an easy-to-use implementation of ECC Elliptic Curve Cryptography with support for ECDSA Elliptic Curve Digital Signature Algorithm, EdDSA Edwards-curve Digital Signature Algorithm and ECDH Elliptic Curve Diffie-Hellman, implemented purely in Python, released und...

HoneyWire

HoneyWire 📋 Table of Contents Overview Showcase The Universal Event Standard Features Architecture Quick Start Guide Security Notes Tech Stack Roadmap & Development Versioning and API Reference Overview HoneyWire is a lightweight, Distributed High-Signal Security Early-Warning System Builder,...

interactsh

An OOB interaction gathering server and client library Features • Usage • Interactsh Client • Interactsh Server • Interactsh Integration • Join Discord Interactsh is an open-source tool for detecting out-of-band interactions. It is a tool designed to detect vulnerabilities that cause external...

yj_nearbyglasses

yjnearbyglasses attempting to detect smart glasses nearby and warn you. ⚠ WARNING! ⚠ nearby-glasses-alert.pages.dev is NOT RELATED TO MY PROJECT. Many apps in Play Store and App Store look or are even called very similar to Nearby Glasses. They seem to hijack the name and try to make a quick prof...

enhanced-iframe-protection

Enhanced iFrame Protection - Browser Extension Enhanced iFrame Protection EIP is a lightweight extension to automatically detect and provide verbose warnings for embedded iframe elements in order to protect against Browser-In-The-Browser BITB attacks. Screenshots In the above screenshot, a phishi...

gmailc2

gmailc2 A Fully Undetectable C2 Server That Communicates Via Google SMTP to evade Antivirus Protections and Network Traffic Restrictions Note: This RAT communicates Via Gmail SMTP or u can use any other smtps as well but Gmail SMTP is valid because most of the companies block unknown traffic so...

lazyrecon

/ \ / / \ /// / // Y / \ /| | | | / | / / \ / | /|| \ | / | / || |\ || | |/| |-||/ / / / | /| / | | /|| | || // |/// /\\|// | Usage ./lazyrecon.sh -d domain.com To exclude particular subdomains: ./lazyrecon.sh -d domain.com -e excluded.domain.com,other.domain.com About...

ssh-mitm

SSH MITM v2.3-dev Author: Joe Testa @therealjoetesta Overview This penetration testing tool allows an auditor to intercept SSH connections. A patch applied to the OpenSSH v7.5p1 source code causes it to act as a proxy between the victim and their intended SSH server; all plaintext passwords and...

CVE-2005-0603-phpBB-2.0.12-Full-path-disclosure

CVE: https://vulners.com/cve/CVE-2005-0603 Neo Security Team NST® - Advisory 06 - 25/02/05 Program: phpBB 2.0.12 Homepage: http://www.phpbb.com Vulnerable Versions: phpBB 2.0.12 & Lower versions Risk: Low Risk!! Impact: Full path disclosure -==phpBB 2.0.12 Full path disclosure==- Description phpB...

nextjs-react2shell-detect

Chrome extension that runs next.version locally and injects a warning popover if the site runs a next version vulnerable to react2shell This is a Plasmo extension project bootstrapped with plasmo init. Getting Started First, run the development server: bun dev Open your browser and load the...

CVE-2022-25257

CVE-2022-25257 SAS Logon 9.4 allows warning-message injection. Discovered: February 15, 2022 Affected Versions: 9.4 POC Exploit: SASLogon/csrf has one parameter called "target" This parameter affects the warning message for the URL the user was about to open but, because of the unknown origin, th...

CVE-2025-0994

CVE-2025-0994 How does this detection method work? This Nuclei template extracts the version stored in the HTML body and based on the version we can determine whether the instance is vulnerable to CVE-2025-0994 or not. Patched version: 15.8.9 How do I run this script? 1. Download Nuclei from here...

EUVD-2026-118084

In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting to a malicious server...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reset the APVLAN tailroom counter on ifdown On ifup, APVLAN interfaces receive cryptotxtailroomneededcnt from the AP interface; however, this value is never decremented again unless the AP is also brought down...

Astra Linux – vulnerability in linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: tcp: clear sockops cb flags before force-closing a child socket A child socket inherits the listener’s bpfsockopscbflags via skclonelock. If its setup fails in tcpv4synrecvsock / tcpv6synrecvsock, the child is freed through...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: scsi: hisisas: Add slavedestroy interface for v3 hw A WARNING is triggered when executing link reset of remote PHY and rmmod the SAS driver simultaneously. Below is the WARNING log: WARNING: CPU: 61 PID: 21818 at...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net: xfrm: reject unrepresentable espintcp transport headers ESP-in-TCP can send xfrm packets whose transport header offset becomes invalid after the stream parser trims the TCP envelope. The plain transport header reset truncate...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: hsi: omapssicore: fix missing DMA mask setup for SSI controller device The OMAP SSI driver uses a synthetic HSI controller device allocated via hsialloccontroller, which does not go through the normal OF/platform device...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: net: Remove conflicting altnames for dying netns in devchangenetnamespace. Syzkiller reported the warning in cfg80211pernetexit. 0 The repro does the following: 1. create two devices in root netns and non-root netns 2. assign the...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: afpacket: Do not send zero-byte data in tpacketsnd. SyZBot reported a WARNING in devqueuexmit triggered via tpacketsnd: skbassertlen WARNING: at include/linux/skbuff.h:2753 skbassertlen WARNING: at devqueuexmit+0x21bc/0x4970...