Clik here to view.
Clik here to view.
KnockGiga
Proof-of-concept local privilege escalation exploiting Gigabyte gdrv3.sys IOCTLs to write the SYSTEM token into a user process via an unchecked physical memory read.
View ArticleClik here to view.
osint-brazuca — Updated!
Repositório criado com intuito de reunir informações, fontes(websites/portais) e tricks de OSINT dentro do contexto Brasil.
View ArticleClik here to view.
CyberStrikeAI v1.7.24
The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.
View ArticleClik here to view.
summit
Open-source web security testing platform: proxy, scanner and fuzzer in one CLI. By Pennacle Security.
View ArticleClik here to view.
Clik here to view.
confirmesc
Linux privesc enumerator that confirms exploitability and gives you the exact root shell command - no GTFOBins searching. MCP server + AI-agent skills included.
View ArticleClik here to view.
AdStrike
AI-powered modular Active Directory red-team framework for authorized penetration testing, AD enumeration, attack-path analysis, Kerberos/ADCS workflows, reporting, operator automation, and MCP server...
View ArticleClik here to view.
PEASS-ng v20261015-c468195d
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
View ArticleClik here to view.
PIIHunter
Scans PostgreSQL databases and Jira issues for PII using regex, NER/ML, and optional self-hosted LLM detection, with redacted reports and audit logging.
View ArticleClik here to view.
SecretSifter
OWASP Incubator project: detects credentials exposed in browser-delivered content (JavaScript, config responses, live traffic).
View ArticleClik here to view.
jumpserver v5.1.0
JumpServer is an open-source Privileged Access Management (PAM) platform that provides DevOps and IT teams with on-demand and secure access to SSH, RDP, Kubernetes, Database and RemoteApp endpoints...
View ArticleClik here to view.
apex-kev-change-desk
Offline CISA KEV snapshot comparison for field-level change review. Free prototype, not a security assessment. AI-assisted development.
View ArticleClik here to view.
retrokit
Headless-Ghidra toolkit for reverse engineering 32-bit DOS and Win32 games (1993-2010): own LE/LX loader, Watcom calling conventions, library signatures, MCP server
View ArticleClik here to view.
Analysis-And-POC-N8N-CVE-2025-68613
Technical study of the CVE-2025-68613 vulnerability in n8n, covering affected versions, laboratory exploration scenario, offensive and defensive analysis, and mitigation strategies.
View ArticleClik here to view.
prowler v5.45.0
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment. Connect your agents now and build on the Agentic Cloud...
View ArticleClik here to view.
mudos
Command-line multi-vector DDoS test tool with 129 volumetric, protocol, application, and amplification attack vectors for authorized resilience testing.
View ArticleClik here to view.
Clik here to view.
bba
Android app-cloning sandbox with a Frida-style CLI that spawns or attaches to cloned apps and injects QuickJS scripts using Gum Interceptor and Stalker hooks.
View ArticleClik here to view.
AI-Infra-Guard v4.6.6
A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
View Article
