omnisci3nt

⭐️ 如果您觉得这个 GitHub 仓库有用，请考虑给它一颗星！ ⭐️ 🕵️‍♂️ Omnisci3nt：统一的网络侦察工具包 Omnisci3nt 是一个全面的网络侦察与情报框架，专为网络安全专业人士、道德黑客和安全研究人员 设计。它能够自动发现并分析域名相关数据，如子域名、SSL/TLS 证书、暴露的服务、技术栈以及历史网页内容。 通过将多种侦察技术整合为单一工作流程，Omnisci3nt 帮助用户清晰了解域名的外部攻击面、配置状态和历史足迹。这使其成为安全评估、漏洞悬赏侦察、威胁建模和防御研究 的有效工具。 Omnisci3nt 适用于授权测试和安全分析...

CVE-2025-29927-PoC-Exploit

CVE-2025-29927-PoC-Exploit Proof-of-Concept for Authorization Bypass in Next.js Middleware You can run this against a vulnerable version here: https://github.com/lirantal/vulnerable-nextjs-14-CVE-2025-29927 Running Execution is straightforward. 1. Python3 CVE-2025-29927-PoC-Exploit.py It will...

tealtiger

TealTiger AI Agent Security & Governance SDK Deterministic governance, guardrails, cost tracking, and policy management for LLM applications. Open source. TypeScript + Python. Works with any provider...

CVE-2025-51529

CVE-2025-51529: WordPress Cookies and Content Security Policy Plugin DoS Vulnerability Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and Content Security Policy plugin through version 2.29 allows remote attackers to cause a denial of service database server...

CVE-2025-29824

🔥 CVE-2025-29824 Zero-Day Exploit 🔥 Welcome to the dark heart of cyberspace, where ethical boundaries bend under the weight of forbidden knowledge. This repository contains a proof-of-concept PoC exploit for CVE-2025-29824 , a use-after-free UAF vulnerability in the Windows Common Log File System...

oversight

Oversight v0.5.8 Oversight is a terminal-based security intelligence tool designed to audit shell scripts and commands before they touch your system. It bridges the gap between "blind trust" and "manual auditing" by providing a high-speed, interactive analysis of both local files and remote scrip...

TraceTree

TraceTree TraceTree Demo TraceTree cascade-analyzer is an autonomous security organism designed for the agentic era. It moves beyond simple scanning into a robust, hardened, and scalable detection ecosystem. Like its mascot, the spider, TraceTree weaves a comprehensive web of protection around yo...

datasploit

Overview of the tool: Performs OSINT on a domain / email / username / phone and find out information from different sources. Correlate and collaborate the results, show them in a consolidated manner. Tries to find out credentials, api-keys, tokens, subdomains, domain history, legacy portals, etc...

py

si encuentras algún error, repórtalo en los issues de usuario de Github Aún en desarrollo Compatible con win7 a win11 última Configuración de MCP / Uso de MCP PYArkClient incluye un servidor MCP Streamable HTTP integrado; cualquier cliente MCP Claude Code / Claude Desktop / CodePilot, etc. puede...

s6_pcie_microblaze

Kit de hacking DIY para PCI Express Información general Contenido Configuración de la placa SP605 Configuración del software Ejemplos Uso de la API de Python Ataques DMA prácticos Ataques a la Option ROM Solución de problemas Compilación del proyecto desde el código fuente Información general Est...

NovaHypervisor

NovaHypervisor Description NovaHypervisor is a defensive x64 Intel host based hypervisor. The goal of this project is to protect against kernel based attacks either via Bring Your Own Vulnerable Driver BYOVD or other means by safeguarding defense products AntiVirus / Endpoint Protection and kerne...

ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the /ipa/i18nmessages endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsiveness, and a denial o...

ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the /ipa/migration/migration.py endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increas...

CVE-2023-5561-PoC

PoC CVE-2023-5561 - WordPress User Email Disclosure Description This script exploits the CVE-2023-5561 vulnerability in WordPress to enumerate and disclose user email addresses via the /wp-json/wp/v2/users API endpoint. Requirements Python 3.x requests library Install the required library:...

grubcrawler

Agentic web crawler with anti-detection, vision fallback, and peer-to-peer mesh. Endpoints · Mesh · Anti-Detection · Ghost Protocol · Live Stream · MCP Tools · Quick Start · Benchmarks · Architecture Full-stack web crawling engine with JavaScript rendering, Camoufox anti-detect browser, per-reque...

CVE-2024-4577-RCE-ATTACK

PHP CVE-2024-4577-RCE-ATTACK-ATTACK 📜 Description In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set to use certain code pages, Windows may use "Best Fit" behavior to replace characters in the command line...

NGWAF

N3XT-G3N Web App Firewall NGWAF NGWAF is created by@yupengfei, @zhangbosen, @matthewng and @elizabethlim. Special shoutout to@ruinahkoh for her contributions to the initial stages of NGWAF. NGWAF is an experimental proof of concept and not ready for production use in its current form. Contents 1...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

bug-reaper

BugReaper Structured web2 bug bounty AI skill — 18 vulnerability classes, 4 bug bounty platforms, zero AI slop. Compatible with OpenClaw, Cursor, Claude Code, Antigravity, and Windsurf. BugReaper is an Agent Skill that turns any compatible AI agent into a disciplined web2 bug bounty hunter. It...

CVE-2026-96881

A vulnerability was determined in TaleLin lin-cms-spring-boot up to 0.2.1. Affected is the function getBooks of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. Executing a manipulation can lead to improper authorization. The attac...