CIRTKit

One DFIR console to rule them all. Built on top of theViper Framework Documentation Please see the wiki for more information about CIRTKit and documentation Roadmap Future integrations Bit9 Palo Alto Networks EnCase/FTK Future modules Packet Analysis possibly Dshell Javascript...

cloudsploit

CloudSploit by Aqua - Cloud Security Scans Quick Start Generic $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker build . -t cloudsploit:0.0.1 $...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

SSHPry2.0

SSHPry2.0 This is a second release of SSHPry tool, with multiple features added. Control of target's TTY Built-In Keylogger Console-Level phishing Record & Replay previous sessions Demo: https://youtu.be/2gfnBvu1u34 Blogpost: http://www.korznikov.com/2017/09/sshpry-v2-spy-control-ssh-connected.ht...

Bastillion

Bastillion A modern, web-based SSH console and SSH key management tool. Bastillion gives you a clean, browser-based way to manage SSH access across all your systems — like a bastion host with a friendly dashboard. It does two things: 1. Web-based SSH terminal — once a host is registered, authoriz...

provisioner

Provisioner Overview Provisioner is a developer-focused provisioning sidekick for single-board computers SBCs, particularly U-Boot-based platforms. It provides a self-contained environment to: Remotely access boards Automate bring-up workflows Provision kernels and root filesystems Execute flashi...

morpheus

Morpheus - automated ettercap TCP/IP Hijacking tool Version release: v2.2 - STABLE Author: pedro ubuntu r00t-3xp10it Codename: oneiroi phobetor The mithologic dream greek god Distros Supported: Linux Ubuntu, Kali, Debian, BackBox, Parrot OS Suspicious-Shell-Activity© SSA RedTeam develop @2018 LEG...

mec

mec MassExploitConsole Intended for mass exploiting Follow thewiki to get started Features Easy-to-use CLI UI Execute adpated exploits with process-level concurrency Built-in exploits automated Hide your IP using proxychains4 and proxypool ZoomEye host scan 10 threads Simple Baidu crawler...

CapTipper

CapTipper v0.3 CapTipper v0.3: http://www.omriher.com/2015/08/captipper-v03-is-out.html CapTipper v0.2: http://www.omriher.com/2015/03/captipper-02-released.html CapTipper v0.1: http://www.omriher.com/2015/01/captipper-malicious-http-traffic.html CapTipper is a python tool to analyze, explore and...

SharpRDP

SharpRDP - Remote Desktop Protocol Console Application for Authenticated Command Execution Building To compile open the project in Visual Studio and build for release. Two DLLs will be output to the Release directory, you do not need those because the DLLs are in the assembly. If you do not want ...

byob

Questions? Check out the docs or join our Discord support server Disclaimer : This project should be used for authorized testing or educational purposes only. BYOB is an open-source post-exploitation framework for students, researchers and developers. It includes features such as: Command & contr...

versionscan

versionscan Versionscan is a tool for evaluating your currently installed PHP version and checking it against known CVEs and the versions they were fixed in to report back potential issues. PLEASE NOTE: Work is still in progress to adapt the tool to linux distributions that backport security fixe...

msldap

🚩 Sponsors If you like this project, consider purchasing licenses of OctoPwn, our full pentesting suite that runs in your browser! For notifications on new builds/releases and other info, hop on to our Discord msldap LDAP library for MS AD 🚩 Runs in the browser This project, alongside with many...

CVE-2026-120491

Wing FTP Server before 8.2.6 contains a stored cross-site scripting vulnerability that allows authenticated web-client users to inject script by sending a crafted nowpath parameter to webclient/makethumb.html. Attackers can break out of the directory CDATA section in admingetlastconn.html XML to...

MaxPatrol EDR DoS

The vulnerability of the control console of the MaxPatrol EDR detection and response system is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

QAFA Firmware Authentication Bypass

The vulnerability of the QAFA Firmware for telecommunications equipment relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the administrative web console...

forbidden

Forbidden Bypass 4xx HTTP response status codes and more. The tool is based on Python Requests, PycURL, and HTTP Client. Tested on Kali Linux v2024.2 64-bit. Made for educational purposes. I hope it will help! Future plans: Add the silent option to suppress console output. Add the no color option...

CVE-2026-120491

Wing FTP Server versions prior to 8.2.6 are vulnerable to a stored cross-site scripting (XSS) vulnerability. The issue arises when authenticated web-client users submit a crafted nowpath parameter to the webclient/makethumb.html page. An attacker can break out of the directory CDATA section in th...

CVE-2026-120491 Wing FTP Server before 8.2.6 Stored XSS via nowpath in Legacy Activity Page

Wing FTP Server before 8.2.6 contains a stored cross-site scripting vulnerability that allows authenticated web-client users to inject script by sending a crafted nowpath parameter to webclient/makethumb.html. Attackers can break out of the directory CDATA section in admingetlastconn.html XML to...