326144 matches found
sish
sish Open source SSH tunneling for HTTPS, WSS, TCP, aliases, and SNI. If you like the simplicity of serveo/ngrok-style sharing but want to use plain SSH and run your own infrastructure, sish is built for that. No custom client required for end users Public and private tunnel workflows Docker and...
trevorc2
trevorc2 TrevorC2 - Command and Control via Legitimate Behavior over HTTP Written by: Dave Kennedy @HackingDave Website: https://www.trustedsec.com Note that this is a very early release - heavy randomization and encryption to be added soon. TrevorC2 is a client/server model for masking command a...
web-check
Web-Check Comprehensive, on-demand open source intelligence for any website 🌐web-check.xyz Kindly supported by: NinjaPear API to get a full B2B profiles from any URL | Hostinger Deploy Web-Check with one click on Hostinger | Warp Built for coding with multiple AI agents ---|---|--- Contents About...
badsecrets
badsecrets A pure python library for identifying the use of known or very weak cryptographic secrets across a variety of platforms. The project is designed to be both a repository of various "known secrets" for example, ASP.NET machine keys found in examples in tutorials, and to provide a...
CVE-2025-55182
CVE-2025-55182 This vulnerability allows RCE in React Server Functions, e.g. as offered by Next.js through insecure prototype references. I'm not an expert in React or Next.js, so take all the information here with a grain of salt. Background React offers Server Functions1, which can be seen as...
Krawl
Krawl A modern, customizable web honeypot server designed to detect and track malicious activity from attackers and web crawlers through deceptive web pages, fake credentials, and canary tokens. Table of Contents Demo What is Krawl? Krawl Dashboard Deployment Modes Krawl Banlist Quickstart Docker...
Security-Detections-MCP
Security Detections MCP An MCP Model Context Protocol server that lets LLMs query a unified database of Sigma , Splunk ESCU , Elastic , KQL , Sublime , and CrowdStrike CQL security detection rules. New here? Start with theSetup Guide -- covers macOS, Windows WSL & native, and Linux step by step...
noapi-google-search-mcp
noapi-google-search-mcp [email protected] If you want to support noapi-google-mcp or gpt-oss-20B/120B-Vision and other open source models in the pipeline please add to my GPU compute fund: around $3000 are needed. If you find this useful, consider supporting continued development and new...
brawl-public-game-001
BRAWL One of the challenging problems for cyber security researchers developing detection and response capabilities is finding a realistic environment in which to test their hypothesis and capabilities. The cheapest method is to test capabilities on a small lab network. But this environment is...
shellstack
ShellStack Version 1.0 ShellStack is a PHP based backdoor management tool. This Tool comes handy for "HACKERS" who wish to keep a track of every website they hack. The tool generates a backdoor file which you just have to upload to the site and put the backdoor URL in the shells.txt present in th...
lazyrecon
root@kitploit: | | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and...
openvpn-install
openvpn-install OpenVPN installer for Debian, Ubuntu, Fedora, openSUSE, CentOS, Amazon Linux, Arch Linux, Oracle Linux, Rocky Linux and AlmaLinux. This script will let you setup and manage your own secure VPN server in just a few seconds. What is this? This script is meant to be run on your own...
MCPwner
MCPwner Beware the Badger Model Context Protocol server for security research automation Compatible with:...
PySQLRecon
PySQLRecon PySQLRecon is a Python port of the awesome SQLRecon project by @sanjivkawa. See the commands section for a list of capabilities. Post demonstrating SCCM TAKEOVER-1 with PySQLRecon. Install PySQLRecon can be installed with pip3 install pysqlrecon or by cloning this repository and runnin...
ligolo-mp
Ligolo-MP : pivoting like a VPN, now with friends! Ligolo-MP is an advanced version of Ligolo-ng, with client-server architecture, enabling pentesters to play with multiple concurrent tunnels collaboratively. It manages all your TUNs automatically, while also providing a clean GUI to track...
The vulnerability of the CommuniGate Pro mail server arises from insufficient access control checks when processing specially crafted requests, allowing a malicious actor to perform unauthorized modifications to the server’s data.
The vulnerability of the CommuniGate Pro mail server arises from insufficient access control checks when processing specially crafted requests. Exploiting this vulnerability allows a malicious actor to perform unauthorized modifications to the server’s data remotely...
The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in insufficient testing of server-side requests. This allows attackers to gain unauthorized access to protected information or cause service failures.
The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in insufficient testing of server-side requests. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...
The vulnerability of the TrueConf Server software, related to deficiencies in the authentication process, allows a perpetrator to obtain a token with administrator privileges.
The vulnerability of the TrueConf Server software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain an administrator-level token...
The vulnerability of the R7-Officer corporate server’s document editor, related to the failure to take measures to neutralize special elements, allows a perpetrator to execute arbitrary code.
The vulnerability of the R7-Officer corporate server’s document editor is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow for the execution of arbitrary code...