JoomlaScan

Joomla Scan A free and open source software to find the components installed in Joomla CMS, built out of the ashes of Joomscan. Features Scanning the Joomla CMS sites in search of components/extensions database of more than 600 components; Locate the browsable folders of component Index of ...;...

sandcat

Sandcat Browser Sandcat is a lightweight multi-tabbed web browser that combines the speed and power of Chromium and Lua. Sandcat comes with built-in live headers, an extensible user interface and command line console, resource viewer, and many other features that are useful for web developers and...

dependency-track

OWASP Dependency-Track Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track takes a unique and highly beneficial approach by leveraging the capabilities of Software Bill of Materials SBO...

Nullify

Nullify Secure. Transparent. Nullified. Nullify is an open source, modular data retention, deletion, and lifecycle governance platform. It provides a centralized framework for discovering data, evaluating retention policies, executing controlled lifecycle actions, and maintaining verifiable audit...

HoneypotBuster

Microsoft PowerShell module designed for red teams that can be used to find honeypots and honeytokens in the network or at the host. CodeExecution Execute code on a target machine using Import-Module. Invoke-HoneypotBuster HoneypotBuster is a tool designed to spot Honey Tokens, Honey Bread Crumbs...

Dependency Scanning

Component for Dependency and License Scanning This component generates a CycloneDX Software Bill of Materials, which is used by GitLab to identify a project's dependencies, and their licenses. This CycloneDX Software Bill of Materials is compatible with the GitLab taxonomy. Additionally, this...

DOMPurify

DOMPurify DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It's also very simple to use and get started with. DOMPurify was started in February 2014 and, meanwhile, has reached version v3.4.16. DOMPurify runs as JavaScript and works in all modern browsers...

multitor

multitor Create multiple TOR instances with load-balancing. Description • Introduction • How To Use • Parameters • Requirements • Docker • Other • License • Wiki Description It provides one single endpoint for clients. Supports HAProxy , socks protocol and http-proxy servers: polipo , privoxy and...

CVE-2026-101324

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'any attacker-chosen name matching the get.NAME placeholder PoC uses 'proof'' parameter in all versions up to, and including,...

barf-project

BARF : Binary Analysis and Reverse engineering Framework The analysis of binary code is a crucial activity in many areas of the computer sciences and software engineering disciplines ranging from software security and program analysis to reverse engineering. Manual binary analysis is a difficult...

AppInfoScanner

Language : 简体中文 | English This project is currently just the tip of the iceberg of the planned project. If you are interested in this project or want to participate in the development or translation of subsequent projects, please send an email to [email protected] explaining your capabilitie...

COM-Code-Helper

COM-Code-Helper 두 개의 IDAPython 스크립트가 Microsoft COMComponent Object Model 코드 재구성을 도와줍니다. 특히 악성코드 분석가에게 유용할 것입니다. COM 코드는 여전히 악성코드에서 자주 발견되기 때문입니다. ClassAndInterfaceToNames.py 이 IDAPython 스크립트는 idb 파일에서 클래스 및 인터페이스 UUID를 스캔하여 일치하는 구조와 이름을 생성합니다. interfaces.txt + classes.txt가...

CVE-2020-15148-bypasses

CVE-2020-15148-bypasses CVE-2020-15148Yii2 역직렬화에 대한 몇 가지 우회 기법 poc1 이것은 2.0.37 버전에서 이용 가능하며, 2.0.38에서 수정되었습니다. 즉, 이것에 CVE-2020-15148이 할당되었고, 뒤의 세 개는 우회 기법입니다. checkAccess = 'system'; $this-id = 'ls'; namespace Faker use yii\rest\CreateAction; class Generator protected $formatters; public function...

snoop

snoop Linux用のシステムコールトレーサーで、eBPF上に構築されています。straceに似ていますが、ライブTUI、スマートフィルター、実際に読める引数デコード機能を備えています。 $ sudo snoop curl https://example.com 0.001 curl1234/1234 openatATFDCWD, "/etc/ssl/certs/ca-certificates.crt", ORDONLY = 4 0.002 curl1234/1234 read4, 0x7f3a1c000b20, 4096 = 4096 0.003 curl1234/1234...

CVE-2026-17089-PoC-pwnVader

CVE-2026-17089 — Events Manager = 7.4.0.1 — 未認証の反射型XSS headerformat Author: pwnVader · License: MIT repository root | ---|--- Component| Events Manager – Calendar, Bookings, Tickets, and more! WordPress plugin Type| CWE-79 — Reflected Cross-Site Scripting Affected| = 7.4.0.1 Fixed| later 7.4.x...

CVE-2025-22783

CVE-2025-22783 1️⃣ 구성 요소 유형 WordPress 플러그인 2️⃣ 구성 요소 세부 정보 Component name SEO Plugin by Squirrly SEO Vulnerable version = 12.4.01 Component slug squirrly-seo Component link https://wordpress.org/plugins/squirrly-seo/ 3️⃣ OWASP 2017: TOP 10 Vulnerability class A3: 인젝션 Vulnerability type SQL 인젝션 4️⃣...

cryptography-research-demo

Artifacts for "Further Single-Key Recovery Attacks on Reduced-Round AES" Source code for every experiment quoted in the paper. No measurement output or prebuilt table is bundled: each program prints or writes its own results, so every number can be regenerated from scratch. directory| what it is...

CVE-2026-101324 Fluent Forms <= 6.2.14 - Reflected Cross-Site Scripting via '{get.*}' Editor SmartCode Parameter

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'any attacker-chosen name matching the get.NAME placeholder PoC uses 'proof'' parameter in all versions up to, and including,...

CVE-2026-101324

The Fluent Forms plugin for WordPress (versions

EUVD-2026-96056

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'any attacker-chosen name matching the get.NAME placeholder PoC uses 'proof'' parameter in all versions up to, and including,...