MappedImagesDetector

MappedImagesDetector Native Windows memory scanner for detecting malicious DLL injections and in-memory malware MappedImagesDetector is a low-level C++20 Windows tool designed to detect malicious DLL injection techniques used by modern malware, including manual-mapped DLLs, erased PE headers, and...

Privacy Tools List by CKTN

Please consider to donate to the actual developers, I do not take any money from you nor is this project designed to make any donations out from other peoples projects. It is more helpful to all of us if the mentioned developers receiving funding to push their projects...

TCL-xss-Labs

XSS Lab — The Cyber Ledger 💸 If this project helps you, consider supporting it with a $10 donation to keep it growing. Link: https://rzp.io/rzp/zgkC6h5B An interactive, self-hosted XSS training platform with 33 progressively harder challenges — designed for hackers, pentesters, and developers who...

Venom-JWT

Venom-JWT Penetration Tool - JWT Vulnerability and Secret Cracking Service Penetration Testing Solemn Statement: The techniques, ideas, and tools mentioned in this document are for learning and communication purposes only for security. No one shall use them for illegal purposes or for profit,...

sigint

SIGINT Real-time OSINT dashboard with live aircraft, vessel, seismic, fire, weather, and event tracking on an interactive globe. Built with Bun, React 19, and a custom Canvas 2D + Web Worker rendering engine. Installable as a PWA. Screenshot Table of Contents SIGINT Screenshot Table of Contents...

dnsmonster

We're exploring a managed SaaS solution for dnsmonster! Help shape the future of passive DNS monitoring by sharing your feedback and requirements: Take our quick survey Table of Contents Dnsmonster Main features Installation Linux Container Build manually Build statically Windows FreeBSD and MacO...

barf-project

BARF : Framework de Análisis Binario e Ingeniería Inversa El análisis de código binario es una actividad crucial en muchas áreas de las ciencias de la computación y disciplinas de ingeniería de software, que abarcan desde la seguridad del software y el análisis de programas hasta la ingeniería...

barf-project

BARF : Binary Analysis and Reverse engineering Framework The analysis of binary code is a crucial activity in many areas of the computer sciences and software engineering disciplines ranging from software security and program analysis to reverse engineering. Manual binary analysis is a difficult...

APTS

What is OWASP APTS? A governance standard for autonomous penetration testing platforms. It defines what these systems must do to operate safely, transparently, and within defined boundaries, whether they are delivered by vendors, operated as a service, or built in-house by enterprise security tea...

Androl4b

Androl4b AndroL4b is an android security virtual machine based on ubuntu-mate includes the collection of latest framework, tutorials and labs from different security geeks and researchers for reverse engineering and malware analysis. What's new in Androl4b v.3? Tools are updated New tools and lab...

nuclei-burp-plugin

Plugin de Burp para Generar Plantillas de Nuclei Un plugin de Burp Suite diseñado para ayudar con la generación de plantillas de nuclei. Características Generación de matchers para plantillas Creación de matchers Word y Binary utilizando fragmentos de respuesta seleccionados del historial de Prox...

nuclei-burp-plugin

Nuclei Template Generator Burp Plugin A Burp Suite plugin intended to help with nuclei template generation. Features Template matcher generation Word and Binary matcher creation using selected response snippets from Proxy history or Repeater contexts Multi-line selections are split to separate...

power_analysis

Power analysis attack over RSA Index Index Introduction Power Analysis Attacks RSA: A Short Introduction RSA Example Equipment Measuring Power: A Short Introduction Ohm's Law Kirchhoff's Voltage Law KVL Voltage Divider Shunt Resistor Example Power Measurement Fast Exponentiation Fast Exponentiati...

masta-cve-2026-48907

MASTA CVE-2026-48907 Scanner Single-file, self-contained scanner for Joomla! JCE Editor Author: Hussein Mohamed masta ghimau !CAUTION 🚨 DISCLAIMER — READ BEFORE USE THIS IS AN INTRUSIVE SECURITY TESTING TOOL. THIS TOOL IS FOR AUTHORIZED SECURITY ASSESSMENTS ONLY. Scanning systems you do NOT own o...

attackintel

UPDATE 26 Nov 2018 MITRE has deprecated the ATT&CK API functionality and will soon be phasing it out. They have moved to utilizing STIX. My code will be available for reference but you can check out my ATT&CK Intel webapp which is in the preliminary phases of development and offers the same info...

attackintel

ACTUALIZACIÓN 26 de noviembre de 2018 MITRE ha dejado obsoleta la funcionalidad de la API de ATT&CK y pronto la eliminará por completo. Han migrado a utilizar STIX. Mi código estará disponible como referencia, pero puedes echar un vistazo a mi aplicación web ATT&CK Intel, que está en fases...

Phantom-Evasion-Loader

SROP-Assisted Cross-Memory Attach CMA Injection via Direct Syscalls. 👻 Phantom-Evasion-Loader x64 Linux Phantom-Evasion-Loader is a standalone, pure x64 Assembly injection engine engineered to minimize the detection surface of modern EDR/XDR solutions and Kernel-level monitors like Falco eBPF. It...

poastal

Poastal - la herramienta OSINT de correo electrónico Poastal es una herramienta OSINT de correo electrónico que proporciona información valiosa sobre cualquier dirección de correo electrónico. Con Poastal, puedes ingresar fácilmente una dirección de correo electrónico y responderá rápidamente a...

poastal

Poastal - the Email OSINT tool Poastal is an email OSINT tool that provides valuable information on any email address. With Poastal, you can easily input an email address and it will quickly answer several questions, providing you with crucial information. ✨ Features Determine the name of the...

HiddenEyeReborn

Introduction The HiddenEye: Reborn tool is a project aimed at exploiting human error. As my second attempt at creating a comprehensive tool for this purpose, it presently has numerous phishing features. We intend to add more functionality soon. Keep up with our progress by checking out our roadma...

Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes

Penetration Testing, Beginners To Expert! This guide is designed for both beginners and experienced penetration testers. It covers all aspects of web application penetration testing, including foundational concepts, setting up testing environments with tools such as Burp Suite and bWAPP, and...

CVE-2019-8641-reproduction

CVE-2019-8641 Reproduction This is the reproduction code for CVE-2019-8641 for education purpose only!...

OffensiveLua

Offensive Lua Offensive Lua is a comprehensive collection of offensive security and red team scripts written in Lua with FFI Foreign Function Interface. These scripts leverage the power and flexibility of LuaJIT on Microsoft Windows to perform advanced penetration testing and red teaming...

Obfuscator

Obfuscator The program is designed to obfuscate the shellcode. Currently the tool supports 2 encryption. 1 XOR 2 AES The tool accepts shellcode in 4 formats. 1 base64 2 hex 3 c 4 raw Command Line Usage Usage Description ----- ----------- /f Specify the format of the shellcode base64 hex c raw /en...

AzureC2Relay

AzureC2Relay AzureC2Relay is an Azure Function that validates and relays Cobalt Strike beacon traffic by verifying the incoming requests based on a Cobalt Strike Malleable C2 profile. Any incoming requests that do not share the profiles user-agent, URI paths, headers, and query parameters, will b...

pysap

pysap - Python library for crafting SAP's network protocols packets Version 0.2.2.dev0 in dev Overview SAP Netweaver and SAP HANA are technology platforms for building and integrating SAP business applications. Communication between components uses different network protocols and some services an...

zi

❮ Zi ❯ 🧙‍♂️ 🪄 Una navaja suiza para Zsh - Shell Unix ✨ 《 Reportar un problema · 《 Solicitar una funcionalidad 》 · 《 Hacer una pregunta 》 --- 《💡》Buscar en Wiki 《⚡️》Instalar 《💜》Unirse 《🌐》Localizar 🎯 Hoja de ruta Generalmente, las nuevas funcionalidades se introducirán como componentes para mejorar...

zi

❮ Zi ❯ 🧙‍♂️ 🪄 A Swiss Army Knife for Zsh - Unix Shell ✨ 《 Report an issue · 《 Request a Feature 》 · 《 Ask a Question 》 --- 《💡》Search Wiki 《⚡️》 Install 《💜》Join 《🌐》Localize 🎯 Roadmap Generally, new features will be introduced as a component to improve performance and compatibility and not to force,...

Shhhloader

Shhhloader Shhhloader is a work in progress shellcode loader. It takes raw shellcode as input and compiles a C++ stub that does a bunch of different things to try and bypass AV/EDR. The included python builder will work on any Linux system that has Mingw-w64 installed. 1/25/24 EDIT: Shhhloader no...

ProxyBroker

ProxyBroker .. image:: https://img.shields.io/pypi/v/proxybroker.svg?style=flat-square :target: https://pypi.python.org/pypi/proxybroker/ .. image:: https://img.shields.io/travis/constverum/ProxyBroker.svg?style=flat-square :target: https://travis-ci.org/constverum/ProxyBroker .. image::...

CVE-2020-5902

CVE-2020-5902 BIG-IP CVE-2020-5902 Exploit POC and automation scanning vulnerability simple program for exploit big-ip and automation scanning vulnerability install gem install httparty gem install colorize gem install timeout ruby big-ip.rb list.txt output.txt...

CVE-2024-44000-LiteSpeed-Cache

CVE-2024-44000-LiteSpeed-Cache CVE-2024-44000 is a vulnerability in the LiteSpeed Cache plugin, a popular WordPress plugin. This vulnerability affects session management in LiteSpeed Cache, allowing attackers to gain unauthorized access to sensitive data. Preview How to use ? git clone...

xmloxide

xmloxide A pure Rust reimplementation of libxml2 — the de facto standard XML/HTML parsing library in the open-source world. libxml2 became officially unmaintained in December 2025 with known security issues. xmloxide aims to be a memory-safe, high-performance replacement that passes the same...

TCPDOMINATE2024

IP STRESSER / BOOTER TCPDOMINATE 2025 USED BY IP STRESSER & IP BOOTER TOOLS, TCP DOMINATE FLOOD UPDATED IN 2025 BY AI...

anamnesis-release

Anamnesis: LLM Exploit Generation Evaluation This repository contains the evaluation framework for studying how LLM agents generate exploits from vulnerability reports in the presence of exploit mitigations. Given a bug report and proof-of-concept trigger, agents analyze vulnerable software and...

stringsifter

StringSifter is a machine learning tool that automatically ranks strings based on their relevance for malware analysis. Quick Links Technical Blogpost - Learning to Rank Strings Output for Speedier Malware Analysis Announcement Blogpost - Open Sourcing StringSifter DerbyCon Talk - StringSifter:...

JSONPath

ver también licencias para dependencias de desarrollo JSONPath Plus Analiza, transforma y extrae selectivamente datos de documentos JSON y objetos de JavaScript. jsonpath-plus expande la especificación original para añadir algunos operadores adicionales y hace explícitos algunos comportamientos q...

CVE-2025-1974-poc

POC of IngressNightmare, RCE in Ingress NGINX CVE-2025-1974 Developed from: https://github.com/zwxxb/CVE-2025-1974/blob/main/poc.py https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilitieshow-did-we-discover-ingressnightmare-24 Thanks Usage forward the admission webhook kubectl port-forwa...

XanXSS

XanXSS XanXSS is a reflected XSS searching tool DOM coming soon that creates payloads based from templates. Unlike other XSS scanners that just run through a list of payloads. XanXSS tries to make the payload unidentifiable, for example: /cLIcKMe!XaNxss With XanXSS every payload is different...

HashTag

Name: HashTag: Parse and Identify Password Hashes Version: 0.41 Date: 11/05/2013 Author: Smeege Contact: [email protected] Description: HashTag.py is a python script written to parse and identify password hashes. It has three main arguments which consist of identifying a single hash type -sh...

evilqr

Evil QR Kit de herramientas que demuestra otro enfoque de un ataque QRLJacking, permitiendo realizar la toma de control remota de cuentas mediante phishing de códigos QR de inicio de sesión. Consiste en una extensión de navegador utilizada por el atacante para extraer el código QR de inicio de...

evilqr

Evil QR Toolkit demonstrating another approach of a QRLJacking attack, allowing to perform remote account takeover, through sign-in QR code phishing. It consists of a browser extension used by the attacker to extract the sign-in QR code and a server application, which retrieves the sign-in QR cod...

wmiexec-Pro

wmiexec-Pro New generation of wmiexec.py. Table of Contents 1. Info 2. Special thanks 3. Features 4. Getting Started Installation 5. Usage 6. Screenshots 7. How it works? 8. Disclaimer 9. References Info The new generation of wmiexec.py, more new features, whole the operations only work with port...

pipelock

Open-source AI agent firewall forVerifiable Egress Control. !pipelock...

PcapPlusPlus

PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. PcapPlusPlus enables decoding and forging capabilities for a large variety of network protocols. It also provides easy to use C++ wrappers...

CVE-2018-2628-MultiThreading

WebLogic WLS Core Component Deserialization Vulnerability CVE-2018-2628 Usage: Place the 'ip:port' to be detected into the url.txt file in the same directory. Then run: Modify the thread count at line 93 of code python CVE-2018-2628-MultiThreading.py Usage: Place the 'ip:port' to be detected into...

S2-045

S2-045 Struts2 S2-045 Vulnerability environment...

capture-the-flag

Capture The Flag! Remasteriza imágenes de Live CD de Linux con el propósito de crear wargames de seguridad listos para usar con vulnerabilidades preinstaladas para explotar. Requisitos Necesitarás lo siguiente para construir el Live CD con los scripts de este proyecto: Linux, con acceso root...

BootHole

BootHole General information This repository was created to contain relevant helpful scripts and any additional tools or information that can assist others in managing their BootHole vulnerability mitigation plans. Windows Based Platforms We have created a Powershell script that will check the EF...

StackRot

StackRot CVE-2023-3269: Linux kernel privilege escalation vulnerability GitHub-CI-verified exploit A flaw was found in the handling of stack expansion in the Linux kernel 6.1 through 6.4, aka "Stack Rot". The maple tree, responsible for managing virtual memory areas, can undergo node replacement...