cipherscan

CipherScan Cipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl sclient command line. Cipherscan is meant to ru...

GTFOBins.github.io

GTFOBins GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems. Find the project at: gtfobins.org...

Narthex

Narthex Narthex Greek: Νάρθηξ, νάρθηκας is a modular & minimal dictionary generator for Unix and Unix-like operating system written in C and Shell. It contains autonomous Unix-style programs for the creation of personalised dictionaries that can be used for password recovery & security assessment...

hash-identifier

hash-identifier Software to identify the different types of hashes used to encrypt data and especially passwords. Encryption formats supported: ADLER-32 CRC-32 CRC-32B CRC-16 CRC-16-CCITT DESUnix FCS-16 GHash-32-3 GHash-32-5 GOST R 34.11-94 Haval-160 Haval-192 110080 ,Haval-224 114080 ,Haval-256...

lunar

LUNAR Lockdown UNix Auditing and Reporting Version Current version 16.6.1 Refer to lunar.sh and CHANGELOG.md for more up to date version information License CC BY-NC-SA: https://creativecommons.org/licenses/by-nc-sa/4.0/ Fund me here: https://ko-fi.com/richardatlateralblast NOTICE Run this code i...

masc

masc A malware web scanner developed during CyperCamp Hackathon 2017 About homepage PyPI Features At the moment, there are some features avaiable for any type of website custom or CMS and some of them only available for specific platforms: Scan any website for malware using OWASP WebMalwareScanne...

lynis

Documentation Do you like this software? Star the project and become a stargazer. lynis Lynis - Security auditing and hardening tool, for UNIX-based systems. Lynis is a security auditing tool for systems based on UNIX like Linux, macOS, BSD, and others. It performs an in-depth security scan and...

staekka

Stækka Metasploit - Extenting Metasploit This Msf plugin extends Metasploit for some missing features and modules allowing interaction with other/custom exploits/ways of getting shell access. The current focus here is Linux/Unix support. Core features TTY support: starting a shell from Metasploit...

[SECURITY] [DLA 4816-1] pcre2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4816-1 [email protected] https://www.debian.org/lts/security/ Salvatore Bonaccorso October 03, 2026 https://wiki.debian.org/LTS -...

CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: step-fips, telegraf, rclone, kyverno-policy-reporter-ui, step-ca, cloudflared, rclone-fips, sftpgo, caddy-fips, step, step-issuer-fips, gitness, gogatekeeper, tkn, karma, step-ca-fips, step-issuer, tkn-fips, dapr, caddy, kyverno-policy-reporter-ui-fips, buf, dapr-fip...

CVE-2026-66010 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, awx, opensearch-dashboards-fips, librechat, langfuse-fips, wazuh-dashboard-fips, langfuse, gitlab-rails-ce-fips, kibana, opensearch-dashboards, nextcloud-server, wazuh-dashboard...

CVE-2026-68494 vulnerabilities

Vulnerabilities for packages: scala, kayenta-fips, sonarqube, tez, neo4j, apache-hop, camunda-zeebe, keycloak-fips, zaproxy, conductor-fips, elasticsearch, apicurio-registry, dependency-track, hadoop-client-modules, knative-kafka-broker-fips, apicurio-registry-fips, gradle, flyway, spdx-tools-jav...

GHSA-642R-3GJ9-2PJ5 vulnerabilities

Vulnerabilities for packages: scala, kayenta-fips, sonarqube, tez, neo4j, apache-hop, camunda-zeebe, keycloak-fips, zaproxy, conductor-fips, elasticsearch, apicurio-registry, dependency-track, hadoop-client-modules, knative-kafka-broker-fips, apicurio-registry-fips, gradle, flyway, spdx-tools-jav...

GHSA-JXRP-R7GX-Q4J8 vulnerabilities

Vulnerabilities for packages: nextcloud-server, opensearch-dashboards, langfuse...

CVE-2026-66010 vulnerabilities

Vulnerabilities for packages: nextcloud-server, opensearch-dashboards, langfuse...

CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: karma, cloudflared, sftpgo, caddy, gitness, step-issuer, kyverno-policy-reporter-ui, step-ca, buf, rclone, gogatekeeper, tkn, step...

GHSA-XCVF-46F4-XWXF vulnerabilities

Vulnerabilities for packages: karma, cloudflared, sftpgo, caddy, gitness, step-issuer, kyverno-policy-reporter-ui, step-ca, buf, rclone, gogatekeeper, tkn, step...

GHSA-642R-3GJ9-2PJ5 vulnerabilities

Vulnerabilities for packages: sonarqube, opensearch, akhq, spark, keycloak-config-cli, cass-config-builder, apache-nifi-registry, tez, apache-nifi, apicurio-registry, gradle, logstash, apache-tika, spdx-tools-java, druid, strimzi-kafka-operator, wildfly, scala, trino, dependency-track, keycloak,...

CVE-2026-68494 vulnerabilities

Vulnerabilities for packages: sonarqube, opensearch, akhq, spark, keycloak-config-cli, cass-config-builder, apache-nifi-registry, tez, apache-nifi, apicurio-registry, gradle, logstash, apache-tika, spdx-tools-java, druid, strimzi-kafka-operator, wildfly, scala, trino, dependency-track, keycloak,...

traitor

Traitor Automatically exploit low-hanging fruit to pop a root shell. Linux privilege escalation made easy! Traitor packages up a bunch of methods to exploit local misconfigurations and vulnerabilities in order to pop a root shell: Nearly all of GTFOBins Writeable docker.sock CVE-2022-0847 Dirty...