CVE-2026-112180

MISP contains a data integrity flaw in its event deletion logic. When a user deletes an event, several associated records are not removed from the database, leaving them as orphaned entries. The affected record types include event report tags, event graph entries, proposal shadow attribute...

webrtc-ips

STUN IP Address requests for WebRTC Demo: https://diafygi.github.io/webrtc-ips/ What this does Firefox and Chrome have implemented WebRTC that allow requests to STUN servers be made that will return the local and public IP addresses for the user. These request results are available to javascript,...

memguard

MemGuard Software enclave for storage of sensitive information in memory. This package attempts to reduce the likelihood of sensitive data being exposed when in memory. It aims to support all major operating systems and is written in pure Go. Features Sensitive data is encrypted and authenticated...

Keylogger

Inputs To Mail. Get Keyboard,Mouse,ScreenShot,Microphone Inputs and Send to your Mail. Purpose of the project is testing the security of information systems INSTALLATION You don't need to do anything for installation just run the script USAGE •Create an account on "https://mailtrap.io/" using a...

CVE-2026-56782-Gorse-Auth-Bypass

CVE-2026-56782 — Gorse Unauthenticated Database Dump / Restore Auth Bypass Gorse everyone is admin if request.Header.Get"X-API-Key" == m.Config.Master.AdminAPIKey return true return false func m Master dumpresponse http.ResponseWriter, request http.Request if !m.checkAdminrequest writeErrorre...

vuln-bank-mobile

💳 Vulnerable Bank Mobile App Vulnerable Bank is an intentionally insecure mobile application built for security engineers, penetration testers, and mobile app security learners to practice and demonstrate real-world exploitation of insecure coding practices. This mobile app acts as a frontend for...

egression

Description EGRESSION is a tool that provides an instant view of how easy it is to upload sensitive data from any given network. It starts with a sensitive file with these contents, which is stored locally in plaintext. This file is used to test the egress / DLP controls on the network by...

PacketWhisper

PacketWhisper PacketWhisper - Stealthily Transfer Data & Defeat Attribution Using DNS Queries & Text-Based Steganography, without the need for attacker-controlled Name Servers or domains; Evade DLP/MLS Devices; Defeat Data- & DNS Name Server Whitelisting Controls. Convert any file type e.g...

CVE-2026-13695

The Integratec application is vulnerable to a UNION-based SQL injection vulnerability. The flaw exists in the sInfo parameter when sent via a POST request to the /login/ap_Login.aspx/start endpoint. Successful exploitation could allow an unauthenticated attacker to steal sensitive database inform...

wiz-research-iocs

Wiz Research Public IOC Database This repo contains public indicators of compromise aggregated by Wiz Research...

BloodHound-Tools

What is this? A collection of tools that integrate to BloodHound. Bloodhound is the defacto standard that both blue and red security teams use to find lateral movement and privilege escalation paths that can potentially be exploited inside an enterprise environment. A typical environment can yiel...

Uscrapper

Uscrapper Vanta Introducing Uscrapper Vanta, Unleashing the Power of Open-Source Intelligence, dive deeper into the vast web with Uscrapper Vanta, Vanta unlocks a new level of data extraction capabilities, empowering the exploration of the uncharted territories of the dark web and uncovering hidd...

river

River is a Python library for online machine learning. It aims to be the most user-friendly library for doing machine learning on streaming data. River is the result of a merger between creme and scikit-multiflow. ⚡️ Quickstart As a quick example, we'll train a logistic regression to classify the...

CVE-2023-1454

CVE-2023-1454 jmreport/qurestSql Unauthorized SQL injection batch scanning poc Jeecg-Boot is a rapid development platform based on Spring Boot and Jeecg-Boot-Plus. The latest jeecg-boot 3.5.0 has been exposed to multiple SQL injection vulnerabilities. Tool Usage python3 CVE-2023-1454-scan.py -u...

androidqf

androidqf NOTE: this project is currently not maintained. An independent fork can be found under theMVT Project. androidqf Android Quick Forensics is a portable tool to simplify the acquisition of relevant forensic data from Android devices. Download androidqf Build Executable binaries for Linux,...

android-locdump

Following the latest days internet outrage/overreaction to the revelation that iPhone has a cache for its location service, I decided to have look what my Android devices caches for the same function. This is a quick dumper I threw together to parse the files from the Android location provider. T...

CVE-2022-26133

CVE-2022-26133 Description Atlassian Bitbucket Data Center Deserialization Vulnerability CVE-2022-26133 Batch Verification and Exploitation Vulnerability Verification Batch python3 CVE-2022-26133.py -u http://192.168.110.136:7990 -f target.txt Exploitation Disclaimer: This tool is only used for...

ghauri

Like Ghauri, consider supporting the developer Ghauri An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws. Requirements Python 3 Python pip3 Installation cd to ghauri directory. install requirements: python3 -m pip install --upgrade ...

gosentry

gosentry gosentry is a security-focused fork of the Go toolchain, integrating numerous features for state-of-the-art fuzzing campaigns on Go codebases. If you were using go test -fuzz before, you should use gosentry as a replacement. It comes with various fuzzing improvements and bug detectors th...

androguard

Androguard Androguard: Reverse engineering and pentesting for Android applications Androguard 5 is a Python toolkit for Android reverse engineering: open an APK, inspect the manifest and DEX, disassemble or decompile code, hunt references and vulnerabilities, and optionally patch or analyze nativ...