linux-smart-enumeration

First, a couple of useful oneliners ; wget "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -O lse.sh;chmod 700 lse.sh curl "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -Lo lse.sh;chmod 700 lse.sh Note that...

nullscan

Description A modular framework designed to chain and automate security tests. It parses target definitions from the command line and runs corresponding modules and their nullscan-tools afterwards. It can also take hosts and start nmap first in order to perform a basic portscan and run the module...

probable_subdomains

Probable subdomains Online tool: https://weakpass.com/generate/domains TL;DR During bug bounties, penetrations tests, red teams exercises, and other great activities, there is always a room when you need to launch amass, subfinder, sublister, or any other tool to find subdomains you can use to...

mongoaudit

mongoaudit is a CLI tool for auditing MongoDB servers, detecting poor security settings and performing automated penetration testing. Installing Clone this repository and run the setup: git clone https://github.com/stampery/mongoaudit.git cd mongoaudit python setup.py install mongoaudit...

jsteg

jsteg go get lukechampine.com/jsteg jsteg is a package for hiding data inside jpeg files, a technique known as steganography. This is accomplished by copying each bit of the data into the least-significant bits of the image. The amount of data that can be hidden depends on the filesize of the jpe...

gatekeeper-cve-2020-8554

قيد Gatekeeper لـ CVE-2020-8554 تثبيت عميل OPA اتبع التعليمات. تشغيل اختبارات الوحدة $ opa test --ignore=.yaml ./policies verbose output $ opa test -v --explain=full --format=pretty --ignore=.yaml ./policies...

cdb

Pown CDB Pown CDB is a Chrome Debug Protocol utility. The main goal of the tool is to automate common tasks to help debug web applications from the command-line and actively monitor and intercept HTTP requests and responses. This is particularly useful during penetration tests and other types of...

REST-Attacker

REST-Attacker REST-Attacker REST आर्किटेक्चर शैली का अनुसरण करने वाले API के लिए एक स्वचालित पेनिट्रेशन टेस्टिंग फ्रेमवर्क है। इस टूल का ध्यान सामान्य REST API कार्यान्वयनों के विश्लेषण को सरल बनाने पर है, जिसमें परीक्षण प्रक्रिया को पूरी तरह से स्वचालित किया जाता है - जिसमें परीक्षण जनरेशन, एक्स...

cbrutekrag

cbrutekrag Penetration tests on SSH servers using dictionary attacks. Written in C. brute krag means "brute force" in afrikáans Disclaimer This tool is for ethical testing purpose only. cbrutekrag and its owners can't be held responsible for misuse by users. Users have to act as permitted by loca...

debian-ssh

Debian OpenSSL Predictable PRNG Links Original URL: http://metasploit.com/users/hdm/tools/debian-openssl/1 Mirror2 Exploit: https://www.exploit-db.com/exploits/5622/ Perl3 https://www.exploit-db.com/exploits/5720/ Python4 https://www.exploit-db.com/exploits/5632/ Ruby12 Recommend Tool: Crowbar13...

CVE-2026-84897

The wolfSSH server (through version 1.5.0 ) is vulnerable to CPU exhaustion and key exchange role confusion because it improperly admits server-to-client Diffie-Hellman group exchange messages from unauthenticated clients. Due to a missing direction check in IsMessageAllowedServer(), the server m...

CVE-2026-84897

src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman group exchange messages SSHMSGKEXDHGEXGROUP 31 and SSHMSGKEXDHGEXREPLY 33 when a server receives them from an unauthenticated client. IsMessageAllowedServer applies no direction check to the key exchange...

Unprivileged Local Execution of Kernel-Level Diagnostic Tests within Brocade Fabric OS

: An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: btrfs: Fixed leaks in the ulist structure during error paths in the qgroup self tests. In the testnosharedqgroup and testmultiplerefs qgroup self tests, if we fail to add the tree reference, remove the extent item, or remove t...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: HID: usbhid: Eliminated a recurring out-of-bounds error in usbhidparse. Updated the struct hiddescriptor to better reflect the mandatory and optional parts of the HID descriptor according to the USB HID 1.11 specification. Not...

sec_review_cve-2024-3094

تم إجراء مراجعة أمنية كاملة للثغرة CVE-2024-3094 مفتوحة المصدر. بناءً على البيانات التي تم الحصول عليها، تم إعداد: 1. تقرير «ThreatModel + SecurityReview» – وصف تفصيلي للتهديدات، مسارات الاستغلال، تقييم المخاطر، وتوصيات لتقليل سطح الهجوم. 2. حزمة اختبارات التحقق – مجموعة من الاختبارات الآلية التي...

CVE-2025-50460

CVE-2025-50460: تنفيذ تعليمات برمجية عن بُعد في modelscope/ms-swift عبر إلغاء تسلسل PyYAML غير آمن الحالة: بانتظار التحليل تم وضع علامة على هذا السجل CVE لجهود الإثراء في NVD. توجد ثغرة في تنفيذ التعليمات البرمجية عن بُعد RCE في مشروع ms-swift الإصدار 3.3.0 بسبب إلغاء تسلسل غير آمن في tests/run.p...

Rocky Linux 8.6 [CIQ] Security Update: skopeo / skopeo-tests (ciqsa-2026_1082)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261082 advisory. This advisory aggregates security fixes for the skopeo SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-21626. Tenable has extracted the preceding description...

AlmaLinux 9.2 [TuxCare] Security Update: skopeo / skopeo-tests (ALMALINUX9.2:CLSA-2026:1778661840)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778661840 advisory. - The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when...

AlmaLinux 9.2 [TuxCare] Security Update: toolbox / toolbox-tests Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1778109988)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778109988 advisory. - Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP...