1448817 matches found
craftcms-vcard-exploit
Craft CMS vCard Plugin Deserialization Vulnerability Craft CMS has a plugin for downloading contacts in a .vcf file format titled "vCard". The plugin can be reviewed in Craft's repository and Github: Craft Plugin Store Github Description This plugin takes a parameter sent by the client, decrypts...
cve-mcp-server
🛡️ CVE MCP Server AI-powered security intelligence at your fingertips — 28 tools + a one-calltriagecve orchestrator, 24 data sources, one protocol. A production-grade Model Context Protocol MCP server that turns Claude into a full-spectrum security analyst. Instead of juggling 15+ browser tabs...
nightcrawler
Nightcrawler An autonomous penetration testing agent that runs entirely on a smartphone. Drop the phone on a network, walk away, and it discovers hosts, maps services, finds vulnerabilities, and generates a pentest report — all without cloud connectivity. ░█▄░█ █ █▀▀ █░█ ▀█▀ █▀▀ █▀█ ▄▀█ █░█░█ █░░...
C2concealer
C2concealer C2concealer is a command line tool that generates randomized C2 malleable profiles for use in Cobalt Strike. Installation git clone https://github.com/RedSiege/C2concealer.git cd C2concealer python3 -m venv .venv source .venv/bin/activate pip3 install -e . Docker installation Refer to...
learning-management-system
learning-management-system Masteriyo - LMS for WordPress = 1.6.7 - Sensitive Information Exposure Plugin Info Software Type Plugin Software Slug learning-management-system view on wordpress.org Patched? Yes Remediation Update to version 1.6.8, or a newer patched version Affected Version 1.6.8...
Exploit for CVE-2026-109618
php2shell-check Is this server still exposed to php2shell...
MailAccess
Let's connect mailaccess.pro · Docs · PyPI · Changelog Self-hostable OSINT platform for investigating email addresses. Fan out across breach databases, social networks, DNS records, and the open web, then get back a unified exposure score and structured findings you can export or pipe into Malteg...
thc-hydra
H Y D R A c 2001-2023 by van Hauser / THC https://github.com/vanhauser-thc/thc-hydra Many modules were written by David dot Maciejak @ gmail dot com BFG code by Jan Dlabal Licensed under AGPLv3 see LICENSE file Please do not use in military or secret service organizations, or for illegal purposes...
NimPlant
NimPlant - A light first-stage C2 implant written in Nim|Rust and Python By Cas van Cooten @chvancooten, with special thanks to some awesome folks: Kadir Yamamoto @yamakadi, Furkan Göksel @frkngksl , Fabian Mosch @S3cur3Th1sSh1t, Rafael Félix @b1scoito, Guillaume Caillé @OffenseTeacher, and many...
snitch
snitch a friendlier ss / netstat for humans. inspect network connections with a clean tui or styled tables. install homebrew brew install snitch thanks to @bevanjkay for adding snitch to homebrew-core go go install github.com/karol-broda/snitch@latest nixpkgs nix-env -iA nixpkgs.snitch thanks to...
osx-re-101
osx & ios re 101 Work in progress as I am actively collecting these. Must read https://reverse.put.as/ https://blog.paloaltonetworks.com/tag/mac-os-x/ https://www.synack.com/blog/r-d-projects/os-x-security-research/ https://pewpewthespells.com/re.html https://github.com/bx/machO-tools...
EmailXpose
EmailXpose Specification AI-Powered Email Clarity HTML Mirror: https://roxanneardary.com/emailxpose-specification/ Specification Overview EmailXpose is an open source, modular AI email security and intelligence system designed to analyze email content, sender identity, links, attachments, images,...
CVE-2026-91662
creationtimestamp| type| source ---|---|--- 2026-10-21 14:53:49+00:00| seen| https://infosec.exchange/users/cve/statuses/117479468513241801...
urlhunter
o Utku Sen's /\o Oo |/ =- .===O- URL -O- / /U' hunter /|\ || |/ \ | utkusen.com |K || twitter.com/utkusenen urlhunter is a recon tool that allows searching on URLs that are exposed via shortener services such as bit.ly and goo.gl. The project is written in Go. How? A group named URLTeam kudos...
GeoSentinel
🌍 GeoSentinel GeoSentinel is a geospatial monitoring platform that tracks global movement in real time. It aggregates ship and flight routes, live coordinates, and geodata into a unified system, providing clear geographic and geopolitical awareness for analysis, visualization, and decision-making...
ROADtools
ROADtools R ogue O ffice 365 and A zure active D irectory tools ROADtools is a framework to interact with Azure AD. It consists of a library roadlib with common components, the ROADrecon Azure AD exploration tool and the ROADtools Token eXchange roadtx tool. ROADlib ROADlib is a library that can ...
testofPOC
CVE-2026-109618 / CVE-2026-109619 — PHP session.uploadprogre...
ShadowSteal
ShadowSteal | CVE-2021-36934 Pure Nim implementation for exploiting CVE-2021-36934, the SeriousSAM Local Privilege Escalation LPE. Not OPSEC safe.... yet ;. I do not claim credit for the discovery of this exploit. Quick Start Build with Docker Getting started with ShadowSteal is now easier than...
gdog
Gdog A stealthy Python based Windows backdoor that uses Gmail as a command and control server This project was inspired by the gcathttps://github.com/byt3bl33d3r/gcat from byt3bl33d3r. Requirements Python 2.x PyCrypto module WMI module Enum34 module Netifaces module Features Encrypted...