API-s-for-OSINT

APIs For OSINT root@kitploit: This is a Collection of APIs that will be useful for automating various tasks in OSINT. Instruction for total beginners: OSINT automation: using сustom functions for working with API requests in Google Sheets Thank you for following me! https://cybdetective.com Table...

subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

HTTP-revshell

Powershell HTTP/S Reverse Shell HTTP-revshell is a tool focused on redteam exercises and pentesters. This tool provides a reverse connection through the http/s protocol. It uses a covert channel to gain control over the victim machine through web requests and thus evade solutions such as IDS, IPS...

msnm-sensor

Description MSNM-S Multivariate Statistical Network Monitoring-Sensor shows the practical suitability of the approaches found in PCA-MSNM and in Hierarchical PCA-MSNM works. The first one present the MSNM approach and new multivariate statistical methodology for network anomaly detection while th...

POC-S

POC-S: POC-T Strengthen Version POC-T Enhanced Edition Documentation for POC-T wiki is in the doc directory Preface: Currently Legal Disclaimer Using POC-S to attack targets without prior mutual consent is illegal. POC-S is intended for security testing purposes only. Features Compatible with POC...

hakuin

Hakuin is a Blind SQL Injection BSQLI optimization and automation framework written in Python 3. It abstracts away the extraction logic and allows users to easily and efficiently dump databases from vulnerable web applications. To speed up the process, Hakuin utilizes a variety of optimization...

CTF-s-Tools

Repositorio para indexar herramientas interesantes de Capture The Flag y otras cosas. Tabla de contenidos Plataformas para practicar Criptografía Principal Secundario Hashes Lenguajes esotéricos Esteganografía OSINT Threat Hunting Forensia Reversing Explotación Pentesting Recon Web Exploit Databa...

datadome-vm-internals

DataDome VM DataDome embeds a custom VM in their bundle to hide what they're actually doing. I got curious and pulled it apart. Sharing it here for anyone who's interested in the same kind of reverse engineering puzzle. DataDome ships a heavily obfuscated JavaScript bundle to your browser. Inside...

dump1090

Dump1090 README Dump 1090 es un decodificador de Modo S diseñado específicamente para dispositivos RTLSDR. Las principales características son: Decodificación robusta de mensajes débiles, con Dump1090 muchos usuarios observaron mayor alcance en comparación con otros decodificadores populares...

cansina

Cansina Cansina is a Web Content Discovery Application. It is well known Web applications don't publish all their resources or public links, so the only way to discover these resources is requesting for them and check the response. Cansina duty is to help you making requests and filtering and...

dump1090

Dump1090 README Dump 1090 es un decodificador Mode S diseñado específicamente para dispositivos RTLSDR. Las principales características son: Decodificación robusta de mensajes débiles; con mode1090 muchos usuarios observaron un alcance mejorado en comparación con otros decodificadores populares...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue...

msnm-sensor

描述 MSNM-S （多变量统计网络监控传感器）展示了 PCA-MSNM 和 层次化 PCA-MSNM 工作中方法的实际适用性。前者提出了 MSNM 方法和用于网络异常检测的新多变量统计方法论，而后者则将前一种方法应用于层次化结构化的网络系统中。这些工作的主要思想是利用多变量统计技术，以两种统计量的形式生成有用信息。这种轻量信息从网络层次的低层传递到高层。这样，根传感器（例如边界路由器）接收所有统计信息，从而能够计算自己的统计量（Q、D）。通过检查这些统计量，安全分析师可以确定是否发生异常事件，即某些统计值超过特定控制限时。 详情请参阅...

Arkhota

Arkhota, a web brute forcer for Android What? Arkhota is a web HTTP/S brute forcer for Android OS. Why? A web brute forcer is always in a hacker's computer, for obvious reasons. Sometimes attacks require to be quick or/and with minimal device preparation. Also a phone takes less attention rather...

Johnny-You-Are-Fired

Johnny-You-Are-Fired Artefactos para la publicación USENIX | Artículo completo aquí Resumen OpenPGP y S/MIME son los dos estándares principales para cifrar y firmar digitalmente correos electrónicos. Se supone que las firmas digitales garantizan la autenticidad e integridad de los mensajes. En es...

Digisol-DG-GR1321-s-Password-Policy-Bypass-CVE-2024-2257

Digisol-DG-GR1321-s-Password-Policy-Bypass-CVE-2024-2257...

CVE-2021-3156

Exploit Chain Deep-Dive: CVE-2021-3156 Baron Samedit Author: IJ Baig Date: July 7, 2026 1. CVE ID, Affected Versions, & Build Confirmation CVE ID: CVE-2021-3156 Vulnerability Type: Heap-Based Buffer Overflow Affected Version Range: Legacy Sudo versions 1.8.2 to 1.8.31p2, and stable versions 1.9.0...

CVE-2025-42957-SAP-S-4HANA-Under-Siege

CVE-2025-42957-SAP-S-4HANA-Under-Siege 1 – What Happened? In August 2025, SAP’s flagship ERP platform S/4HANA was found to expose a vulnerability in one of its RFC‑enabled function modules. Attackers who possess only low‑privileged access can inject arbitrary ABAP code into that module, bypassing...

UBUNTU-CVE-2026-62987

Fabio is an HTTPS and TCP router for deploying applications managed by consul. From 1.6.6 until 1.7.2, the CVE-2025-48865 fix in proxy/httpheaders.go uses protectHeaders for a hardcoded set of forwarded headers but omits the operator-configured ClientIPHeader, TLSHeader, and RequestID names. In...

CVE-2026-45447

🚨 CVE-2026-45447 - Critical OpenSSL Use-After-Free Vulnerability Heap Use-After-Free in PKCS7verify allowing memory corruption, crashes, and potential remote code execution. 📖 Executive Summary CVE-2026-45447 is a critical vulnerability in OpenSSL's PKCS7 verification functionality. The flaw exis...