Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

22 results

XZ-Utils_CVE-2024-3094

mrbuglf/xz-utils_cve-2024-3094

XZ-Utils工具库恶意后门植入漏洞(CVE-2024-3094)

command-and-controlexploitationincident-response+3

2 years ago

xz-cve-2024-3094

hackura/xz-cve-2024-3094

Python demo simulating CVE-2024-3094: a supply chain backdoor in XZ Utils with a trigger-based stealth activation.

digital-forensicseducationforensics+6

9 months ago

xz-utils-backdoor-case-study

michel-dv/xz-utils-backdoor-case-study

Technical case study of the XZ Utils backdoor (CVE-2024-3094), covering supply-chain trust abuse, malicious release artifacts, build-stage injection,…

educationincident-responsemalware-analysis+6

29 days ago

CVE-2024-3094-info

byinarie/cve-2024-3094-info

Information for CVE-2024-3094

curated-resourceseducationexploitation+6

542 years ago

CVE-2024-3094

h3raklez/cve-2024-3094

Educational lab replicating the XZ Utils backdoor (CVE-2024-3094) with a custom Ed448 key pair. Includes a patched liblzma, systemd service, and…

cryptographyeducationexploitation+5

6 months ago

xz-backdoor-scan

juul/xz-backdoor-scan

Scan for files containing the signature from the `xz` backdoor (CVE-2024-3094)

binary-analysisforensicsgeneral-purpose-utilities+3

2 years ago

cve-2024-3094-tools

jfrog/cve-2024-3094-tools

Shell-based scanner to detect the XZ Backdoor (CVE-2024-3094) vulnerability in files and directories, enabling rapid identification and mitigation of…

forensicsincident-responsemalware-analysis+3

442 years ago

cs50-cybersecurity-final-project

namegabevictoire01-sys/cs50-cybersecurity-final-project

CS50 Cybersecurity Final Project - Analysis of CVE-2024-3094

educationmalware-analysissupply-chain-security+2

11 month ago

CVE-2024-41453_CVE-2024-41454

code5ecure/cve-2024-41453_cve-2024-41454

Proof-of-concept exploits for CVE-2024-41453 and CVE-2024-41454 demonstrating stored XSS and malicious file upload vulnerabilities in ProcessMaker 4…

crawlereducationmalware-analysis+3

1 year ago

Detect-CVE-2024-0762

tadash10/detect-cve-2024-0762

Detecting vulnerabilities like CVE-2024-0762, particularly in UEFI firmware, is quite challenging due to the low-level nature

firmware-analysisincident-responsemalware-analysis+3

2 years ago

cve-2024-7965-poc

xuedugu/cve-2024-7965-poc

CVE-2024-7965是Google Chrome浏览器中V8 JavaScript引擎的一个高危漏洞。该漏洞源于V8引擎在处理特定JavaScript代码时实现不当，导致堆内存损坏。攻击者可通过诱导用户访问包含特制JavaScript的恶意网页，利用此漏洞在Chrome渲染器中执行任意代码。

exploitationmalware-analysisvulnerability-analysis+1

11 year ago

Kaspersky_CVE-2024-3094

vesjolyjd/kaspersky_cve-2024-3094

Security review of CVE-2024-3094 (XZ Utils backdoor) including threat modeling, static/dynamic code analysis, fuzzing with AFL++, and a…

code-analysisdynamic-analysis-sandboxingeducation+7

6 months ago

CVE-2024-3094

extracoding-dozen/cve-2024-3094

Research of CVE-2024-3094 vulnerability.

container-securityeducationexploitation+3

7 months ago

CVE-2024-43451-POC

ronf98/cve-2024-43451-poc

CVE-2024-43451 is a Windows NTLM vulnerability that allows an attacker to force authentication and capture NTLM hashes by using malicious shortcuts.

exploitationmalware-analysispassword-cracking+3

151 year ago

CVE-2024-42845-Exploit

theexploiters/cve-2024-42845-exploit

Exploit For: CVE-2024-42845: Remote Code Execution (RCE) in Invesalius 3.1

exploitationmalware-analysispayload-generation+2

21 year ago

CVE-2024-49138-SOC-Investigation

adisasoc/cve-2024-49138-soc-investigation

SOC investigation of CVE-2024-49138 exploitation involving brute-force activity, PowerShell execution, malicious payload analysis, privilege…

digital-forensicseducationincident-response+4

1 month ago

letsdefend-cve-2024-49138-investigation

cyprianatsyor/letsdefend-cve-2024-49138-investigation

Hands-on SOC investigation of CVE-2024-49138 using LetsDefend, VirusTotal, Hybrid Analysis, TrueFort, and ChatGPT.

binary-exploitationdigital-forensicseducation+7

1 year ago

CVE-2024-3094

mrk336/cve-2024-3094

CVE-2024-3094 exposed a backdoor in the XZ compression library, allowing remote SSH access by bypassing authentication. It’s a major supply chain…

curated-resourceseducationmalware-analysis+3

21 year ago