CVE-2026-13714

Realtyna WPL 5.3.0 - Unauthenticated RCE Exploit Description This exploit targets a critical vulnerability in Realtyna Organic IDX + WPL Real Estate plugin versions prior to 5.3.0. The plugin uses hardcoded credentials and allows unauthenticated file upload leading to Remote Code Execution RCE...

trufflehog-explorer

TruffleHog Explorer 🕵️‍♂️ Welcome to TruffleHog Explorer, a user-friendly web-based tool to visualize and analyze data extracted using TruffleHog. TruffleHog is one of the most powerful secrets discovery, classification, validation, and analysis open source tool. In this context, a secret refers to...

RustChain

Description This tool is a simple PoC of how to hide memory artifacts using a ROP chain in combination with hardware breakpoints. The ROP chain will change the main module memory page's protections to N/A while sleeping i.e. when the function Sleep is called. For more detailed information about...

CVE-2026-94387

creationtimestamp| type| source ---|---|--- 2026-10-13 02:40:34+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117431286690130751...

emploleaks

EmploLeaks EmploLeaks is an OSINT Open Source Intelligence tool with a CLI interface, designed to discover and correlate information about employees of a target company. It allows collecting LinkedIn profiles, generating potential corporate emails, searching for leaked credentials in leak databas...

scorecard

OpenSSF Scorecard Overview What Is Scorecard? Prominent Scorecard Users View a Project's Score Scorecard's Public Data Using Scorecard Scorecard GitHub Action Scorecard REST API Scorecard Badges Scorecard Command Line Interface Prerequisites Installation Authentication Basic Usage Checks Default...

snowpick

snowpick is a ServiceNow exposure scanner that finds misconfigured widget ACLs, REST API access controls, and unauthenticated data exposure. ServiceNow exposes data through two common public surfaces: Service Portal widgets and the Table REST API. When access controls on either surface are...

ail-typo-website

ail-typo-website Website for ail-typo-squatting library. This website is strongly inspired by dnstwist website. Requirements requests flask flask-restx werkzeug ail-typo-squatting idna redis tldextract pymisp beautifulsoup4 nltk scikit-learn How to run The main script to run is Flaskserver.py, bu...

PrintNightmare

Critical Vulnerability PrintNightmare CVE-2021-1675, CVE-2021-34527 Currently no solution from Microsoft yet as of 02.07.2021 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527 Affects all operating system versions server and client Options Disable Print Spooler Adjust ACL Event...

creddump7

Information This repo is for my modifications to the original 'creddump' program available at: https://code.google.com/p/creddump/ I did not write the original program. I have combined many patches and fixes I have seen from different forums and user suggestions, as well as modified the usage to...

pentestagent

PentestAgent AI Penetration Testing https://github.com/user-attachments/assets/a67db2b5-672a-43df-b709-149c8eaee975 Requirements Python 3.10+ API key for OpenAI, Anthropic, or other LiteLLM-supported provider Install Clone git clone https://github.com/GH05TCREW/pentestagent.git cd pentestagent...

RedGridLink

Red Grid Link Red Grid Link is retired Retired September 27, 2026. v1.7.0 is the final release. Link has been removed from sale on the App Store and unpublished on Google Play. New subscriptions and lifetime purchases are no longer offered. Existing installations: Retirement does not erase local...

DropboxC2C

DropboxC2C DropboxC2C is a post-exploitation agent which uses Dropbox Infrastructure for command and control operations. DO NOT USE THIS FOR MALICIOUS PURPOSES. THE AUTHOR IS NOT RESPONSIBLE FOR ANY MISUSE OF THIS PROGRAM. Dropbox-C2C is an old project of mine to use a thirdparty for command and...

LittleCorporal

LittleCorporal LittleCorporal: A C Automated Maldoc Generator C:\LittleCorporal\bin\ReleaseLittleCorporal.exe C:\beacon.bin explorer.exe . . . . | | ||/ |/ || | \ \ | | | | | \ \ \ | / / \ / / \ \ \ / \ \ \ | | | || || | | | | |\ /\ \ | / | | // | | | ||| || |/\ \ //|| | / /|| // / / /...

SharpHound

SharpHound Get SharpHound The latest build of SharpHound will always be found here. To determine the SharpHound version compatible with a deployed BloodHound CE instance, login to BloodHound CE's web UI and click on ⚙️ Settings → Download Collectors. Then, click either the "Download SharpHound"...

windows-malware-behavioral-analysis

Behavioral Malware Analysis using REMnux & FLARE-VM A practical Blue Team malware investigation demonstrating how suspicious Windows executables can be analyzed safely inside an isolated laboratory using behavioral analysis techniques. Rather than reverse engineering malware source code, this...

sqlwinds

SQLWinds SQL Security Assessment & Post-Exploitation Toolkit SQLWinds is a command-line tool for security testing and exploiting Microsoft SQL Server. It provides an interactive environment to deeply analyze servers, escalate privileges, execute attacks, and pivot through networks all with...

Loki

🧙‍♂️ Loki Command & Control Loki is a stage-1 command and control C2 framework written in Node.js, built to script-jack vulnerable Electron apps MITRE ATT&CK T1218.015. Developed for red team operations, Loki enables evasion of security software and bypasses application controls by exploiting...

renode

Renode Copyright c 2010-2026 Antmicro What is Renode? Renode was created by Antmicro as a virtual development tool for multi-node embedded networks both wired and wireless and is intended to enable a scalable workflow for creating effective, tested and secure IoT systems. With Renode, developing,...

magika

Magika Magika is a novel AI-powered file type detection tool that relies on the recent advance of deep learning to provide accurate detection. Under the hood, Magika employs a custom, highly optimized model that only weighs about a few MBs, and enables precise file identification within...