Tools

kathanp19/gxss

A tool to check a bunch of URLs that contain reflecting params.

0xn4no/cve-2026-30048

Stored XSS vulnerability in NotChatbot WebChat <=1.5.0 with PoC payloads, impact analysis, and remediation guidance for secure chat history rendering.

exploreio/cve-2026-79483-fastgpt-nosql-injection

Proof-of-concept for CVE-2026-79483, a NoSQL injection in FastGPT Community Edition allowing unauthenticated access to chat history titles. Includes…

hasherezade/libpeconv

Custom PE loading and manipulation library for manual mapping, IAT hooking, memory dumping, and rebuilding imports for malware analysis and reverse…

semonte/sisu

Mounts AWS resources as a local filesystem for infrastructure exploration, security auditing, and configuration analysis using standard Unix tools…

conscioushacker/wfh

Frida-based dynamic analysis tool that automatically identifies DLL sideloading and COM hijacking vulnerabilities in Windows executables through…

omergunal/hackerbot

Chat with hacker assistant

secsys-fdu/cve-2025-51860

Detailed analysis of a Stored XSS vulnerability in TelegAI, including attack vectors, impact, and proof-of-concept for session token theft and…

ashishsecdev/mobsf_ai

AI powered security analysis extension for Mobile Security Framework MobSF

knifeyspoony/ghidra-copilot

Provides a chat-based, LLM-assisted reverse engineering experience within Ghidra

sjzar/chatlog

chat log tool, easily use your own chat data. 聊天记录工具，轻松使用自己的聊天数据

adem-hosni/mappedimagesdetector

Lightweight native Windows memory scanner for AV/EDR platforms, detecting suspicious mapped images and manual DLL injection techniques by IAT thunk

yhs0602/android-disassembler

Disassemble ANY files including .so (NDK, JNI), Windows PE(EXE, DLL, SYS, etc), linux binaries, libraries, and any other files such as pictures,…

alptexans/rsc-detect-cve-2025-55182

RSC Detect CVE 2025 55182

nvidia-nemo/guardrails

Programmable guardrails for LLM chat apps: enforce input/output rails, block jailbreaks and prompt injections, detect hallucination, and mask…

mr-un1k0d3r/edrs

Red team tool for EDR evasion: dynamically resolves syscall IDs, patches ntdll stubs, unhooks IAT hooks, and lists hooked APIs from major EDR vendors.

bignerd95/chimay-red

Working POC of Mikrotik exploit from Vault 7 CIA Leaks