The vulnerability of the platform for creating individual web applications in CRM involves a lack of measures to protect the SQL query structure, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the platform for creating individual web applications in CRM involves the failure to take measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the Directum HR Pro system, which exists due to insufficient verification of input data, allows a perpetrator to disclose protected information.

The vulnerability of the Directum HR Pro system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information by sending a specially crafted POST request...

The vulnerability of the Directum RX ECM system, related to deficiencies in access control, allows a perpetrator to compromise data integrity.

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

soc-faker

soc-faker soc-faker se utiliza para generar datos falsos para uso de Centros de Operaciones de Seguridad, profesionales de seguridad de la información, equipos de producto y muchos más. Primeros pasos soc-faker funciona con Python 3.6 o superior. Puede instalar soc-faker usando pip así como...

Pulsar

Pulsar Pulsar es una herramienta para la exfiltración de datos y comunicación encubierta que te permite crear una transferencia de datos segura, un chat extraño o un túnel de red a través de diferentes protocolos. Por ejemplo, puedes recibir datos desde una conexión TCP y reenviarlos al destino...

gOSINT

gOSINT Codacy Badge OSINT Swiss Army Knife in Go Take a look at the develop branch for more updates. Introduction gOSINT is a multiplatform OSINT Swiss army knife in Golang. If you want, feel free to contribute and/or leave a feedback! Like my project? Please consider donation : What gOSINT can d...

EvilSelenium

EvilSelenium EvilSelenium es un nuevo proyecto que weaponiza Selenium para abusar de navegadores basados en Chromium. Las funcionalidades actuales son: Robar credenciales almacenadas mediante autofill Robar cookies Tomar capturas de pantalla de sitios web Volcar correos de Gmail/O365 Volcar...

RecoverPy

RecoverPy Escanea particiones en bruto y recupera datos inspeccionando bloques de disco directamente. 🎬 Demostración 🔎 Visión General Cuando un archivo se elimina, sus metadatos desaparecen primero. Los bloques de disco subyacentes suelen permanecer intactos hasta que se reutilizan. RecoverPy...

CVE-2023-22884-Airflow-SQLi

Apache Airflow SQL injection PoC CVE-2023-22884 PoC for CVE-2023-22884 is an Apache Airflow RCE vulnerability affecting versions prior to 2.4.0. The official report description says: Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software...

web

I have no data yet. It is a capital mistake to theorize before one has data. Insensibly one begins to twist facts to suit theories, instead of theories to suit facts. 🚧 ⚠️ Work in progress; Not ready for use,yet ⚠️ 🚧 Introducing OSINTBuddy Welcome to the OSINTBuddy project where you can connect,...

cloudsplaining

Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report...

cloudsplaining

Cloudsplaining Cloudsplaining es una herramienta de evaluación de seguridad de AWS IAM que identifica violaciones del principio de mínimo privilegio y genera un informe HTML priorizado por riesgo. ' custom-guidance.html ' custom-appendices.html Generar informe con contenido personalizado...

CVE-2025-8088

CVE-2025-8088 PoC Educational Use Only Details about this CVE can be found at: https://nvd.nist.gov/vuln/detail/CVE-2025-8088 ⚠️ Warning: This repository contains a proof-of-concept PoC for CVE-2025-8088. It is intended for educational purposes, research, and lab environments only. Do not use this...

tachyon

Tachyon Tachyon is a fast web application security reconnaissance tool. It is specifically meant to crawl a web application and look for left over or non-indexed files with the addition of reporting pages or scripts leaking internal data. User Requirements Linux Python 3.6+ User Installation...

tgspyder

🕷️ TGSpyder TGSpyder is an Open-Source Telegram OSINT CLI Tool by Darksight Analytics. Features Scrape members list from both public and private groups to CSV Scrape chat messages from both public and private groups to CSV Extract t.me invite links from chat history public and private groups Look...

VK-Scraper

VK Scraper vk-scraper es una aplicación de línea de comandos escrita en Python que extrae y descarga datos de usuarios/comunidades de VK. Úsalo de manera responsable. Para entender mejor cómo funciona, ve a la documentación. Características Extraer fotos Extraer videos tanto subidos como externos...

Cloakify

CloakifyFactory CloakifyFactory & the Cloakify Toolset - Data Exfiltration & Infiltration In Plain Sight; Evade DLP/MLS Devices; Social Engineering of Analysts; Defeat Data Whitelisting Controls; Evade AV Detection. Text-based steganography using lists. Convert any file type e.g. executables,...

Cloakify

CloakifyFactory CloakifyFactory & el Cloakify Toolset - Exfiltración e Infiltración de Datos a Plena Vista; Evasión de Dispositivos DLP/MLS; Ingeniería Social de Analistas; Derrotar Controles de Lista Blanca de Datos; Evasión de Detección de AV. Esteganografía basada en texto usando listas...

SharpHound

SharpHound Get SharpHound The latest build of SharpHound will always be found here. To determine the SharpHound version compatible with a deployed BloodHound CE instance, login to BloodHound CE's web UI and click on ⚙️ Settings → Download Collectors. Then, click either the "Download SharpHound"...

memguard

MemGuard Enclave de software para almacenar información sensible en memoria. Este paquete intenta reducir la probabilidad de que datos sensibles queden expuestos mientras están en memoria. Su objetivo es ser compatible con los principales sistemas operativos y está escrito en Go puro...