tachyon

Tachyon Tachyon is a fast web application security reconnaissance tool. It is specifically meant to crawl a web application and look for left over or non-indexed files with the addition of reporting pages or scripts leaking internal data. User Requirements Linux Python 3.6+ User Installation...

CVE-2026-46300

⚠️ Descargo de responsabilidad sobre investigación de seguridad y legal 📌 Propósito de este repositorio Este repositorio se proporciona estrictamente con fines de educación, investigación académica e investigación autorizada en ciberseguridad. Está destinado a apoyar la comprensión de:...

CVE-2025-14847

🛡️ CVE-2025-14847 - Easy Tool for MongoDB Security 📥 Download Now Download 📋 Overview CVE-2025-14847, also known as MongoBleed, is a security tool designed to identify vulnerabilities in MongoDB. This application helps users assess their MongoDB databases effectively. You do not need programming...

CVE-2017-0213

CVE-2017-0213...

terraform-aws-security-group

terraform-aws-security-group Terraform module to manage AWS Security Groups. Currently, the ingress and egress rules support IPv4, IPv6, and Security Group ID inputs. Requirements...

cve-2024-22017_to_test

cve-2024-22017totest...

AtlassianPwn

This repository does not have a README...

koyane-framework

Koyane-Framework :: wordlist forge & analysis toolkit Early Stage root@kitploit: | | / /| |\ \ / / / \ | \ | || | | || \ / \ | / || || | | || || | | / / | |/ / | | | | \ V / / /\ | | || | | | | |/ // /\ | . . || | | | | || | | || |/ /| |/ / | \ | | | | \ / | || . || | ||| | | / | || |/| || |...

dotclaude-security

dotclaude-security Scan a repo's local .claude/ config — settings.json hooks, MCP server defs, env blocks, permissions.allow — for the RCE and API-key-exfiltration footguns that fire the moment you git clone and open an untrusted repository in Claude Code. It points at the exact dangerous line so...

Azure

Azure Offensive Security Toolkit A collection of Bash and PowerShell scripts for Azure security assessments, covering IAM privilege escalation, container security, Key Vault exposure, Entra ID configuration, and more. Designed to run in Azure Cloud Shell or any authenticated terminal. Scripts IAM...

CVE-2018-1000542-NetBeans

＃CVE-2018-1000542 NetBeans...

CVE-2024-0258

CVE-2024-0258 Technical analysis and public documentation related to CVE-2024-0258 , an Apple libxpc vulnerability. This repository contains research notes, technical observations, reverse engineering findings, and public references intended to document the vulnerability and its security...

Orbit Tracer

Orbit Tracer Orbit Tracer Security Agent for Intelligent Security Remediation Automate security vulnerability analysis, risk assessment, and remediation across your entire codebase using AI and Orbit's knowledge graph The Problem Security teams face a critical challenge: Finding vulnerabilities i...

pocsploit

pocsploit 中文 README pocsploit es un marco de verificación de POC de código abierto ligero, flexible y novedoso Puntos débiles del marco de POC en el mercado 1. Hay demasiados parámetros, no sé por dónde empezar, pero solo algunos de ellos se usan comúnmente...

CVE-2024-28000

LiteSpeed Cache Privilege Escalation PoC - CVE-2024-28000 🎤 README Translation English فارسی 📸 Screenshot 💎 Introduction This repository contains a Proof of Concept PoC for a critical privilege escalation vulnerability discovered in the LiteSpeed Cache WordPress plugin. The vulnerability,...

CVE-2026-81852

Use of Insufficiently Random Values vulnerability in ash-project ashadmin ships a hardcoded, publicly known CSP nonce, defeating nonce-based Content-Security-Policy protection. When mounted without :cspnonceassignkey, AshAdmin.Router.ashadmin/2 defaulted the img, style, and script nonces to the...

CVE-2026-50751

CVE-2026-50751 Check Point IKEv1 Scanner A multi-threaded vulnerability scanner for CVE-2026-50751 , a critical IKEv1 authentication bypass vulnerability affecting Check Point Quantum Security Gateways. Overview Check Point Remote Access VPN systems with IKEv1 enabled are vulnerable to...

trivy

Componente de CI de Trivy para GitLab Un componente de CI de GitLab para Trivy — el escáner de seguridad integral que cubre imágenes de contenedores, sistemas de archivos, repositorios, clústeres de Kubernetes, SBOMs y cumplimiento de licencias. Conecta estas plantillas directamente en tus...

apache-mina-deserialization-security-assessment

CVE-2024-52046 - RCE por Deserialización en Apache MINA Informe de Ciberseguridad en Estilo Consultoría Informe profesional de evaluación de vulnerabilidades sobre el riesgo de deserialización en Apache MINA, que incluye resumen ejecutivo, impacto técnico, remediación y estrategia de mitigación. ...

Linksys-WRT54GL-Exploitation

From Solder to Shell: Full Hardware Exploitation of the Linksys WRT54GL Router CVE-2022-43973 A 10-phase embedded security research journey — from JTAG pin discovery to remote code execution on a MIPS-based consumer router. | ---|--- Author| Umberto Della Monica Role| MSc Cybersecurity Student —...