CVE-2026-103850

creationtimestamp| type| source ---|---|--- 2026-10-14 13:51:17+00:00| seen| https://infosec.exchange/users/cve/statuses/117439586444503223...

nmap-log4shell

Nmap Log4Shell NSE script for discovery Apache Log4j RCE CVE-2021-44228 nmap-log4shell is a NSE script for discovery Apache Log4j RCE CVE-2021-44228 vulnerability across the network. The script is able to inject the log4shell exploit payload via HTTP Headers default or via TCP/UDP socket...

Evasor

Overview The Evasor is an automated security assessment tool which locates existing executables on the Windows operating system that can be used to bypass any Application Control rules. It is very easy to use, quick, saves time and fully automated which generates for you a report including...

CVE-2026-103843

creationtimestamp| type| source ---|---|--- 2026-10-14 13:50:37+00:00| seen| https://infosec.exchange/users/cve/statuses/117439583786561717...

zerobox

Zerobox Python SDK Python SDK for zerobox. Sandbox any command with file, network, and credential controls. pip install zerobox Installing the wheel drops the zerobox CLI into your environment's bin/ and exposes a Python SDK. For CLI usage, secrets concepts, the full flag reference, performance...

CVE-2026-103842

creationtimestamp| type| source ---|---|--- 2026-10-14 13:49:56+00:00| seen| https://infosec.exchange/users/cve/statuses/117439581147714420...

vucsa

Vulnerable Client-Server Application VuCSA Vulnerable client-server application VuCSA is made for learning/presenting how to perform penetration tests of non-http client-server applications. It is written in Java with JavaFX graphical user interface. Currently, the vulnerable application contains...

httptoolkit

HTTP Toolkit !HTTP Toolkit has received funding from NLnet as part of NGI Zero...

CVE-2026-103841

creationtimestamp| type| source ---|---|--- 2026-10-14 13:49:21+00:00| seen| https://infosec.exchange/users/cve/statuses/117439578507957400...

PAPIMonitor

PAPIMonitor P ython API Monitor for Android apps is a python tool based on Frida for monitoring user-select APIs during the app execution. The app should be installed within an emulator already connected through ADB to the pc host. The user can choose to monitor a predefined list of APIs divided...

xurlfind3r

xurlfind3r xurlfind3r is a command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly...

numbat

numbat Endpoint visibility into AI agent activity, with local detection, optional pre-action blocking, and forensic reconstruction. numbat observes supported desktop, CLI, IDE, and gateway agents through local hooks and plugins, OTLP/HTTP logs, and on-disk session artifacts. Live and at-rest...

plecost

Plecost Professional WordPress Security Scanner Async-first, library-friendly, no external API required. Table of Contents What is Plecost? Plecost vs WPScan Quick Start Installation CVE Database CVE Detection Engine Scanning Detection Modules WooCommerce Security WP eCommerce Security Output...

SSRFmap

SSRFmap SSRF are often used to leverage actions on other services, this framework aims to find and exploit these services easily. SSRFmap takes a Burp request file as input and a parameter to fuzz. Server Side Request Forgery or SSRF is a vulnerability in which an attacker forces a server to...

CVE-2026-103840

creationtimestamp| type| source ---|---|--- 2026-10-14 13:48:36+00:00| seen| https://infosec.exchange/users/cve/statuses/117439575862043105...

CVE-2025-29927

CVE-2025-29927: Next.js Middleware Bypass Vulnerability This repository demonstrates the CVE-2025-29927 vulnerability in Next.js where the internal header x-middleware-subrequest can be used to bypass middleware checks like authentication. Vulnerability Details Next.js uses an internal header...

embark

EMBArk - The firmware security scanning environment About EMBArk is a tool for centralized firmware analyzing. Scan, Identify, Track, Report. Built to be simple but powerful. It's the web-based enterprise interface for the firmware security scanner EMBA. It is developed to provide the firmware...

DumpGuard

DumpGuard DumpGuard is a credential dumping and protocol research tool for modern Windows systems. It abuses the Remote Credential Guard protocol to recover credential material even when Credential Guard is enabled, and also includes a Microsoft v1 authentication package path for session-oriented...

agentic-threat-hunting-framework

Agentic Threat Hunting Framework ATHF Quick Start • Installation • Documentation • Examples Give your threat hunting program memory and agency. The Agentic Threat Hunting Framework ATHF is the memory and automation layer for your threat hunting program. It gives your hunts structure, persistence,...

mscache

mscache a tool to manipulate dccdomain cached credentials in windows registry, based mainly on the work of mimikatz and impacket requirements python2 pycrypto passlib impacket example python mscache.py --security security --system system dumping domain cached credentials reg query...