Turbolist3r

Project Status Please note I am not actively supporting this project. I may return to subdomain research at some point but my security interests lie elsewhere at the moment and my time is divided among other things. If you find an issue feel free to send a PR or fork it into your own project...

nfcgate

NFCGate ⚠️NFCGate is currently being falsely detected as "NGate" malware. Please seethis issue for up-to-date information.⚠️ NFCGate is an Android application meant to capture, analyze, or modify NFC traffic. It can be used as a researching tool to reverse engineer protocols or assess the security...

uac-a-mola

uac-a-mola Installation To install uac-a-mola you have to perform the following actions: 1. Download and install python 2.7.x for Windows taking into account your particular infrastructure, you can find the binaries here: https://www.python.org/downloads/ 2. Add the python path to the path...

A-xex

A-xex This project is part of a school work focusing on network security. Author not responsable for malicious use. The project is always updating About A-xex Framework A-xex is a simple and intuitive tool, it joins many important tools that can help in a hack action. The goal is to provide a...

mailinabox

Mail-in-a-Box By @JoshData and contributors. Mail-in-a-Box helps individuals take back control of their email by defining a one-click, easy-to-deploy SMTP+everything else server: a mail server in a box. Please seehttps://mailinabox.email for the project's website and setup guide! Our goals are to...

be-a-hacker

Introduction Hacking is the art of using things in unintended ways. For example, if a software's trial is about to expire, you might be able to extend it by changing your computer's date to the previous week. That's hacking. There's no 'one right way' to learn hacking because it is a very broad...

retryabledns

Retryable dns resolver Based on miekg/dns and freely inspired by bogdanovich/dnsresolver. Features Supports both system default DNS resolvers and user-provided ones Retries DNS requests in case of I/O errors, timeouts, or network failures Allows arbitrary query types Resolution with random...

troll-a

Troll-A Troll-A is a command line tool for extracting secrets such as passwords, API keys, and tokens from WARC Web ARChive files. Troll-A is an easy-to-use , comprehensive , and fast solution for finding secrets in web archive. Features Protocols: Supports retrieving web archives directly from a...

CVE-2026-88164

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

EUVD-2026-101506

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-88164

A Missing Authorization vulnerability in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. This issue is associated with CWE-862 . While specific technical details regarding the affected component or root cause are not provided, the vulnerability has ...

bbrecon

This project is no longer maintained and I took the crawling infrastructure offline. The audience was not big enough to justify maintaining it. Bug Bounty Recon bbrecon is a free Recon-as-a-Service for bug bounty hunters and security researchers. The API aims to provide a continuously up-to-date...

rebindMultiA

rebindMultiA rebindMultiA is a tool to perform a Multiple A Record rebind attack. rebindmultia.com is a domain that I've set up to assist with these attacks. It makes every IP its own authoritative nameserver for the domain IP.ns.rebindmultia.com. For example, 13.33.33.37.ns.rebindmultia.com's...

CVE-2026-107424

Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects Frontend Dashboard: from n/a through 3.0.7...

CVE-2026-85298

An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google Cloud Application Integration versions prior to 2026-08-27 allows an authenticated user to escalate privileges and impersonate a service account in the project. This vulnerability was...

CVE-2026-107424 WordPress Frontend Dashboard plugin <= 3.0.7 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects Frontend Dashboard: from n/a through 3.0.7...

CVE-2026-107424

The Frontend Dashboard plugin for WordPress (versions up to and including 3.0.7 ) is affected by an Incorrect Privilege Assignment vulnerability (CWE-266). This flaw allows for Privilege Escalation , potentially granting an attacker elevated permissions. No specific exploit information or remedia...

EUVD-2026-101013

Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects Frontend Dashboard: from n/a through 3.0.7...

CVE-2026-85298

The Google Cloud Application Integration service (versions prior to 2026-08-27 ) is vulnerable to an Incorrect Authorization vulnerability. The root cause exists in the AuthConfig validation and integration execution runtime , which allows an authenticated user to perform privilege escalation and...

dnssearch

dnssearch This software is a subdomain enumeration tool. Purpose dnssearch takes an input domain -domain parameter and a wordlist -wordlist parameter , it will then perform concurrent DNS requests using the lines of the wordlist as sub domains eventually bruteforcing every sub domain available on...