firecrawl-mcp-server

Firecrawl MCP Server A Model Context Protocol MCP server that brings Firecrawl, the context API for AI agents, to MCP-compatible clients: search, scrape, and interact with the live web and get back clean Markdown or structured data. Big thanks to @vrknetha, @knacklabs for the initial...

CVE-2025-3568

CVE-2025-3568 Privilege Escalation via Malicious SVG File Summary A security vulnerability has been identified in Krayin CRM 2.1.0 that allows a low-privileged user to escalate privileges by tricking an admin into opening a malicious SVG file. This exploit leverages Cross-Site Request Forgery CSR...

tiandy-research

tiandy-research This repository contains the results of my August 2020 research of Tiandy's IPC/NVR firmware these devices are also sold as OMNY. This "research" was not exhaustive, but I did find multiple methods to recover the administrator password remotely, enable telnet and change the root...

magika

Magika Magika is a novel AI-powered file type detection tool that relies on the recent advance of deep learning to provide accurate detection. Under the hood, Magika employs a custom, highly optimized model that only weighs about a few MBs, and enables precise file identification within...

Seecret.it

📦 Seecret.it — Secure sharing via one-time link Seecret.it is an online service for sharing passwords, documents or sensitive information via encrypted one-time links. Your data remains invisible, secure, and self-destructs after viewing. Ideal for IT teams, businesses, freelancers, and anyone...

CVE-2026-29000-pac4j-jwt

pac4j-jwe-forge CVE-2026-29000 Proof-of-concept for CVE-2026-29000. Targets pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3. The vulnerability is straightforward: the library accepts a PlainJWT unsigned, alg=none as long as it's wrapped inside a valid JWE. Since the server exposes its RSA...

joomla_CVE-2023-23752

joomlaCVE-2023-23752 Joomla - a request parameter breaks through the Rest API Affected version ​ Joomla roughly has three routing entries, which are index.php in the root directory users access articles administrator/index.php in the root directory administrator management api/index.php in the ro...

web-check

Web-Check Comprehensive, on-demand open source intelligence for any website 🌐web-check.xyz Kindly supported by: NinjaPear API to get a full B2B profiles from any URL | Hostinger Deploy Web-Check with one click on Hostinger | Warp Built for coding with multiple AI agents ---|---|--- Contents About...

vuln-bank-mobile

💳 Vulnerable Bank Mobile App Vulnerable Bank is an intentionally insecure mobile application built for security engineers, penetration testers, and mobile app security learners to practice and demonstrate real-world exploitation of insecure coding practices. This mobile app acts as a frontend for...

of-CORS

of-CORS of-CORS is Truffle Security's tool suite for identifying and exploiting CORS misconfigurations on the internal networks of bug bounty targets using typosquatting. You can read more here https://trufflesecurity.com/blog/of-CORS How Does it Work?? of-CORS is a Python3 web application built ...

neet

NEET - Network Enumeration and Exploitation Tool Neet is a flexible, multi-threaded tool for network penetration testing. It runs on Linux and co-ordinates the use of numerous other open-source network tools, with the aim of gathering as much network information as possible in clear, easy-to-use...

frida-ios-hook

Frida iOS hook 📍 A tool that helps you can easy using frida. It support script for trace classes, functions, and modify the return values of methods on iOS platform. 👉 For Android platform: frida-android-hook 👉 For Intercept Api was encrypted on iOS application: frida-ios-intercept-api Env OS...

Stuxnet

Stuxnet This repository contains a strictly educational and research-oriented reconstruction of the infamous Stuxnet worm. It is the product of countless hours of reverse engineering work conducted by the global security research community on the original binary samples discovered in 2010. Warnin...

Antiphishing

Antiphishing — Predictive Phishing Intelligence for Suricata DONATE · DASHBOARD VECTORS · CONTRIBUTING · SUBMIT A VECTOR · REST API CTI · WIKI Predictive Phishing Intelligence for Suricata — Preemptive Defense from Day Zero Antiphishing is an open-source GPLv3 Cyber Threat Intelligence CTI...

JWTXposer

JWTXposer Automated JWT Discovery & Analysis Tool for Bug Bounty Hunters and Red Teamers What Is JWTXposer? JWTXposer is an automated reconnaissance tool that scans public archives like the Wayback Machine , extracts leaked JWT tokens , and decodes them to identify potentially exploitable...

seclab-taskflows

GitHub Security Lab Taskflows This repository contains example taskflows to use with the SecLab Taskflow Agent, as well as the custom MCP servers that are needed to run the taskflows. Quick start Go to https://github.com/GitHubSecurityLab/seclab-taskflows and start a codespace. Wait a few minutes...

RemoteSessionEnum

Blog: https://0xv1n.github.io/posts/sessionenumeration/ The purpose of this project was to attempt to replicate the functionality of qwinsta /server: utilizing the largely undocumented Windows Station WinSta API...

bscan

:mag: an asynchronous target enumeration tool :magright: Synopsis bscan is a command-line utility to perform active information gathering and service enumeration. At its core, bscan asynchronously spawns processes of well-known scanning utilities, repurposing scan results into highlighted console...

ITScape

ITScape: Guest-to-Host Escape in KVM/arm64 Abstract This document describes the ITScape CVE-2026-46316 vulnerability reported and patched by Hyunwoo Kim @v4bel. It is a KVM escape vulnerability that lets a guest escape to the host in a KVM/arm64 environment and run commands on the host with kerne...

tachyon

Tachyon Tachyon is a fast web application security reconnaissance tool. It is specifically meant to crawl a web application and look for left over or non-indexed files with the addition of reporting pages or scripts leaking internal data. User Requirements Linux Python 3.6+ User Installation...