ida-pro-mcp

IDA Pro MCP !IMPORTANT I recommend using theOfficial Hex-Rays IDA MCP Server instead! See the announcement blog post for more information. Simple MCP Server to allow vibe reversing in IDA Pro. https://github.com/user-attachments/assets/6ebeaa92-a9db-43fa-b756-eececce2aca0 The binaries and prompt...

publications

Publicaciones de Calif MAD Bugs: Mes de los Errores Descubiertos por IA Apple Internals Una serie de ingeniería inversa de los internos de Apple. Investigación de Seguridad Una Carrera Dentro de una Carrera: Explotando CVE-2025-38617 en Sockets de Paquetes de Linux Auditorías de Seguridad Auditor...

titus

Titus: High-Performance Secrets Scanner Titus is a high-performance secrets scanner that detects credentials, API keys, and tokens in source code, files, and git history. It ships with 487 detection rules covering hundreds of services and credential types, drawn from NoseyParker and Kingfisher...

vulscan

vulscan - Escaneo de vulnerabilidades con Nmap Introducción Vulscan es un módulo que mejora nmap para convertirlo en un escáner de vulnerabilidades. La opción -sV de nmap habilita la detección de versiones por servicio, la cual se utiliza para determinar posibles fallos según el producto...

reportly

Reportly is an EntraID user activity report tool. About the tool This is a tool that will help blue teams during a cloud incident. When running the tool, the researcher will enter as input a suspicious user and a time frame and will receive a report detailing the following: 1. Information about t...

selinux-notebook

El Cuaderno de SELinux Introducción El Cuaderno de SELinux es un libro de código abierto sobre SELinux, originalmente creado por Richard Haines y donado a la comunidad SELinux. El objetivo del Cuaderno es ser el libro más actualizado y completo sobre SELinux, cubriendo los componentes del kernel ...

testssl.sh

Introducción testssl.sh es una herramienta gratuita de línea de comandos que verifica el servicio de un servidor en cualquier puerto para determinar el soporte de cifrados TLS/SSL, protocolos, así como algunas v...

SpringExploitGUI

SpringExploitGUIv1.0 0x01 Prefacio Hoy reproduje varias vulnerabilidades anteriores de Spring, y de paso las armé. La herramienta actualmente soporta la detección y explotación de Spring Cloud Gateway RCE CVE-2022-22947, Spring Cloud Function SpEL RCE CVE-2022-22963 y Spring Framework RCE...

temcrypt

The Next-gen Encryption Try temcrypt on the Web → temcrypt SDK Focused on protecting highly sensitive data, temcrypt is an advanced multi-layer data evolutionary encryption mechanism that offers scalable complexity over time, and is resistant to common brute force attacks. You can create your own...

opensquat

openSquat Core 📑 Table of Contents What is openSquat? Featured In Open-Core Model Key Features Quick Start Requirements Usage Premium and API Modes Configuration Automation CLI Reference Contributing Author License 🎯 What is openSquat? openSquat is an Open Source Intelligence OSINT security tool...

routersploit

RouterSploit - Exploitation Framework for Embedded Devices Community Join community on Embedded Exploitation Discord. Description The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices. It consists of various modules that aid penetration testing...

covert-control

covert-control Control systems remotely by uploading files to Google Drive, OneDrive, Youtube or Telegram using Python to create the files and the listeners. It allows to create text files, images, audio or videos, with the commands in cleartext or encrypted using AES. covert-googledrive.py -...

JSFScan.sh

JSFScan.sh 博客地址位于 https://medium.com/@patelkathan22/beginners-guide-on-how-you-can-use-javascript-in-bugbounty-492f6eb1f9ea?sk=21500dc4288281c7e6ed2315943269e7 该脚本用于漏洞赏金中的JavaScript侦察自动化。只需传入子域名列表并根据偏好设置选项即可。 功能特性 1 - Gather Jsfile Links from different sources. 2 - Import File Containing JSUrls 3...

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...

wuzz

wuzz Interactive cli tool for HTTP inspection. Wuzz command line arguments are similar to cURL's arguments, so it can be used to inspect/modify requests copied from the browser's network inspector with the "copy as cURL" feature. Installation and usage GO $ go get github.com/asciimoo/wuzz $...

sshhipot

Version 2 is under development. Please switch to the v2 branch, build, and run with -h. SSHHiPot High-interaction SSH honeypot ok, it's really a logging ssh proxy. Still more or less a work-in-progress. Feel free to go install this repository if you'd like to try it. Run it with -h to see more...

pict

PICT - Post-Infection Collection Toolkit This set of scripts is designed to collect a variety of data from an endpoint thought to be infected, to facilitate the incident response process. This data should not be considered to be a full forensic data collection, but does capture a lot of useful...

inception

Note: This tool is no longer under active development, please look at PCILeech instead. INCEPTION Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe HW interfaces...

can-i-take-over-xyz

Aviso legal ⚠️ Los autores de este documento no asumen ninguna responsabilidad por la exactitud. Este proyecto solo está aquí para ayudar a guiar a los investigadores de seguridad a determinar si algo es vulnerable o no, pero no garantiza precisión. Este proyecto depende en gran medida de las...

isowall

isowall This is a mini-firewall that completely isolates a target device from the local network. This is for allowing infected machines Internet access, but without endangering the local network. Building This project depends upon libpcap, and of course a C compiler. On Debian, the following shou...

pymeta

PyMeta PyMeta 是 PowerMeta 工具的 Python3 重写版，由 dafthack 用 PowerShell 创建。它使用精心构造的搜索查询，通过 Google 和 Bing 抓取来识别并下载给定域名下的以下文件类型（pdf、xls、xlsx、csv、doc、docx、ppt、pptx ）。 下载后，使用 Phil Harvey 的 exiftool 从这些文件中提取元数据，并添加到 .csv 报告中。另外，也可以使用 -dir 命令行参数将 PyMeta 指向一个目录，以提取手动下载的文件中的元数据。更多信息请参见 用法 或 全部选项 部分。 为什么？...

LKWA

LKWA Lesser Known Web Attack Lab está diseñado para pentesters intermedios que pueden probar y practicar ataques web menos conocidos como Object Injection, XSSI, PHAR Deserialization, variables variables, etc. Los write-ups son bienvenidos. Mi propio walk-through está aquí . Instalación - Local...

Fenrir

Fenrir Escáner Bash sencillo de IOC Fenrir es un script Bash sencillo de escaneo de IOC. Permite escanear sistemas Linux/Unix/OSX en busca de los siguientes Indicadores de Compromiso IOCs: Hashes MD5, SHA1 y SHA256 usando md5sum, sha1sum, sha -a 256 Nombres de archivo cadena - se verifica si es u...

fuzztruction

Fuzztruction Fuzztruction is an academic prototype of a fuzzer that does not directly mutate inputs as most fuzzers do but instead uses a so-called generator application to produce an input for our fuzzing target. As programs generating data usually produce the correct representation, our fuzzer...

msprobe

msprobe About Installing Usage Examples Coming Soon Acknowledgements About Finding all things on-prem Microsoft for password spraying and enumeration. The tool will used a list of common subdomains associated with your target apex domain to attempt to discover valid instances of on-prem Microsoft...

open-sesame

open-sesame Contiene informes divulgados de Hackerone y otros writeups de bug bounty. Una herramienta Python que se ejecuta para mostrar informes de Hackerone divulgados públicamente de forma aleatoria cuando estás aburrido. Abre automáticamente el informe en el navegador. Contiene más de 8k...

smalien

Smalien Smalien es una herramienta de análisis de flujo de información y detección de fugas de información para analistas de aplicaciones Android. Smalien realiza análisis estático de taint en aplicaciones Android en una máquina Linux, así como análisis dinámico de taint, detección de fugas de...

hershell

Hershell NOTE: the project has been forked on this repo, check there for any other developments. Hershell is a simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception...

bincat

Introducción ¿Qué es BinCAT? BinCAT es un kit de análisis de código binario estático , diseñado para ayudar a los ingenieros inversos, directamente desde IDA o usando Python para automatización. Incluye: análisis de valores registros y memoria análisis de contaminación reconstrucción y propagació...

caracal

Caracal Caracal is a static analyzer tool over the SIERRA representation for Starknet smart contracts. Features Detectors to detect vulnerable Cairo code Printers to report information Taint analysis Data flow analysis framework Easy to run in Scarb projects Installation Precompiled binaries...

fileintel

fileintel This is a tool used to collect various intelligence sources for a given file. Fileintel is written in a modular fashion so new intelligence sources can be easily added. Files are identified by file hash MD5, SHA1, SHA256. The output is in CSV format and sent to STDOUT so the data can be...

tsusen

Tsusen 津波センサー is a standalone network sensor made for gathering information from the regular traffic coming from the outside i.e. Internet on a daily basis e.g. mass-scans, service-scanners, etc.. Any disturbances should be closely watched for as those can become a good prediction base of...

hsecscan

hsecscan A security scanner for HTTP response headers. Requirements Python 2.x Python Modules os.path argparse sqlite3 urlparse urllib2 urllib json ssl Install $ pip install hsecscan Usage $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D DBFILE -d 'POST data' -x PROX...

cheese

Exploit de root para Quest 3/3S hasta la actualización del 7 de agosto de 2025 y anteriores, basado en CVE-2025-21479. captura de pantalla de Magisk, Cheese y Termux con una shell de root Advertencia: Rootear es peligroso. Si brickeeas un Quest 3/3S, no hay forma de repararlo. Esto desactiva toda...

subcrawl

SubCrawl SubCrawl is a framework developed by Patrick Schläpfer, Josh Stroschein and Alex Holland of HP Inc’s Threat Research team. SubCrawl is designed to find, scan and analyze open directories. The framework is modular, consisting of four components: input modules, processing modules, output...

CVE-2026-62735

CVE-2026-62735 Information This vulnerability was originally discovered by Siyeon Wi. I reproduced the vulnerability independently for educational and case-study purposes. The vulnerability was also demonstrated at Pwn2Own Berlin 2026. References: TrendAI Zero Day Initiative status TrendAI Zero D...

CVE-2023-46014-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability

CVE-2023-46014-Vulnerabilidad-de-Inyección-SQL-en-Blood-Bank-1.0-de-Code-Projects Autor del Exploit: ersinerenler Página del Proveedor https://code-projects.org/blood-bank-in-php-with-source-code Enlace del Software https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip...

CVE-2026-43499-A36

CVE-2026-43499-A36 Port independiente de CVE-2026-43499 probado en dispositivo para el Galaxy A36 5G canadiense SM-A366W con el firmware exacto A366WVLS3AYG1, incluida la carga tardía de KernelSU y la integración con Root My Galaxy. Este repositorio contiene la parte nativa específica del...

heartbleed-extention

Este repositorio no tiene un README...

CVE-2026-32475

CVE-2026-32475 — Elementor Pro ≤ 4.2.1 Unauthenticated Arbitrary File Upload → RCE PoC for CVE-2026-32475 CVSS 9.0 Critical, CWE-434: an unauthenticated arbitrary file upload in the Elementor Pro Forms module that leads to remote code execution. Fixed in Elementor Pro 4.2.2 2026-08-19. Reported b...

CVE-2026-73570

CVE-2026-73570 — Zimbra ZCS SNMP Notification RCE exploit PoC Unauthenticated Remote Code Execution via OS Command Injection in the Zimbra Collaboration Suite SNMP notification handler. Overview Field| Value ---|--- CVE| CVE-2026-73570 CVSS 3.1| 8.9 HIGH — AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L CWE|...

CVE-2026-31431-Copy-Fail

CVE-2026-31431-Copy-Fail Explotado por infrar3d Este repositorio contiene un exploit de prueba de concepto para CVE-2026-31431 Copy Fail. CVE-2026-31431, conocido como "Copy Fail", es una vulnerabilidad de Escalada Local de Privilegios LPE de alta gravedad en el kernel de Linux que ha estado...

cve-2024-7965-poc

cve-2024-7965-poc CVE-2024-7965 es una vulnerabilidad de alto riesgo en el motor JavaScript V8 del navegador Google Chrome. Esta vulnerabilidad se origina por una implementación incorrecta del motor V8 al procesar código JavaScript específico, lo que provoca daños en la memoria del montículo. Un...

cve-2026-31900-lab

CVE-2026-31900 — Laboratorio Vulnerable psf/black GitHub Action RCE mediante validación de regex insegura Campo| Detalle ---|--- CVE| CVE-2026-31900 CVSS| 8.7 Alto Aviso| GHSA-v53h-f6m7-xcgm Afectado| psf/black GitHub Action v26.3.0 Tipo| RCE mediante cadena de suministro desencadenante pullreque...

agent-skills v0.4.0

Elastic Agent Skills Elastic Agent Skills — built by the people who built Elastic — deliver native platform expertise directly to your AI coding agent. This is the official Agent Skills library, compatible with agentic IDEs such as Cursor, GitHub Copilot, Windsurf, Gemini CLI, and more. Skills...

swaggerHole - A Python3 Script Searching For Secret On Swaggerhub

Introduction This tool is made to automate the process of retrieving secrets in the public APIs on swaggerHub. This tool is multithreaded and pipe mode is available : Requirements - python3 sudo apt install python3 - pip3 sudo apt install python3-pip Installation pip3 install swaggerhole or...

Py-Amsi - Scan Strings Or Files For Malware Using The Windows Antimalware Scan Interface

py-amsi is a library that scans strings or files for malware using the Windows Antimalware Scan Interface AMSI API. AMSI is an interface native to Windows that allows applications to ask the antivirus installed on the system to analyse a file/string. AMSI is not tied to Windows Defender. Antiviru...

T3SF - Technical Tabletop Exercises Simulation Framework

T3SF is a framework that offers a modular structure for the orchestration of events based on a master scenario events list MSEL together with a set of rules defined for each exercise optional and a configuration that allows defining the parameters of the corresponding platform. The main module...

Artemis - APK Infrastructure Investigator

Overview A tools for Find APK Infrastructure . HADESS performs offensive cybersecurity services through infrastructures and software that include vulnerability analysis, scenario attack planning, and implementation of custom integrated preventive projects. We organized our activities around the...

EndExt - Go Tool For Extracting All The Possible Endpoints From The JS Files

EndExt is a .go tool for extracting all the possible endpoints from the JS files Idea When you crawll all the JS files from waybackruls for example, or even collecting the JS files urls from your target website's home source page .. If the website was using API system and you wanna look for all t...