Garud

An automation tool that scans sub-domains, sub-domain takeover and then filters out xss, ssti, ssrf and more injection point parameters. I made this tool to automate my recon and save my time. It really give me headache always type such command and then wait to complete one command and I type oth...

RapidWebRecon

Nuclei to PDF Report Generator A professional-grade automation tool designed to bridge the gap between technical vulnerability scanning and executive reporting. Developed by Adi Mahluf Tenroot Cyber Security. 🚀 Overview This project provides a seamless "one-command" workflow to audit web assets. ...

NucleiFuzzer

NucleiFuzzer = Nuclei + Paramspider + waybackurls + gauplus + hakrawler + katana + Fuzzing Templates Overview NucleiFuzzer is an advanced automation tool designed to streamline and optimize web application security testing by integrating a suite of powerful URL discovery and vulnerability scannin...

Shuffle

Shuffle オートメーション デプロイ Shuffle は、セキュリティプロフェッショナルのために、そしてセキュリティプロフェッショナルによって構築されたオープンソースの自動化プラットフォームです。セキュリティ運用は複雑ですが、そうである必要はありません。MSSP やその他のサービスプロバイダーとうまく連携できるよう設計されています。 トレーニングを受ける 主な機能 — コミュニティ & サポート — トレーニングを受ける - ドキュメント — はじめに — 開発 デモを予約する Twitter で @shuffleio をフォローしてください。 試す セルフホスト:...

NetSet

NetSet Operational Security utility and automator. Version 1.1.0 NetSet is designed to automate a number of operations that will help the user with securing their network traffic. It also provides an easy way to gather proxies and run utilities through Tor. All the utilities installed and used by...

CVE-2024-3094-Vulnerability-Checker-Fixer

...

webcopilot

WebCopilot An automation tool that enumerate subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities. Features • Installation • Usage • WebCopilot • Tools Used • Acknowledgement WebCopilot is an automation tool designed to enumerate...

Autopwn

Autopwn™ 간단한 bash 기반 메타스플로이트 자동화 도구! 몇 번의 클릭만으로 안드로이드 또는 윈도우 기기를 장악하세요!! Autopwn 작동 중 주의: 이 도구는 순수하게 교육 목적으로 제작되었습니다. 만약 법적 문제에 휘말려 저를 탓하신다면, 저는 그저 비웃을 것입니다 : 사용자는 자신의 행동에 대해 책임을 져야 합니다 업데이트:...

IOCScraper

IOC Scraper IOC Scraper는 IOCPARSER 서비스를 활용하여 다양한 벤더 블로그, PDF 및 CSV 파일에서 IOC를 가져옵니다. IOC를 파싱하는 것은 시간이 많이 소요되는 과정이지만, 이 스크립트를 사용하면 자동으로 IOC를 추출하고 집계할 수 있습니다. 기능 Defanged IOCs : IOC 추출 및 디펜징 지원 화이트리스트 IOC : 사용자 정의 화이트리스트 지원 소스 유형 : 블로그, PDF, CSV 등 다양한 소스 지원 지원되는 IOC 유형 IOC Scraper는 다양한 IOC 유형을 지원합니다...

burpa

burpa: Burp 자동화 도구 Burp Suite 자동화 도구 요구 사항 burp-rest-api Burp Suite Professional slackclient 사용법 root@kitploit: $ python burpa.py -h / / / / / / / / / / / // / // / / / // / // / /./,// / ./,/ // burpa version 0.1 / by 0x4D31 usage: burpa.py -h -a scan,proxy-config,stop -pP PROXYPORT -aP...

DLLirant

DLLirant DLLirantは、指定されたバイナリに対するDLLハイジャックおよびDLLプロキシングの調査を自動化するツールです。 DLLハイジャックが見つかった場合の最終PoC出力: 旧ライブデモ（新バージョンと同様） インストール方法 Windows x64用のLLVM（LLVM-version-win64.exe）をインストールします: https://github.com/llvm/llvm-project/releases インストール中に「Add LLVM to the system PATH for current user」にチェックを入れることを忘れないでください...

bip

Bip Bip は、IDA を操作するための python の使用を簡素化することを目的としたプロジェクトです。その主な目標は、IDA の対話コンソールでの python の使用とプラグインの作成を容易にすることです。より一般的には、python API を通じて行われる反復的なタスクを自動化することを目的としています。 Bip はまた、よりオブジェクト指向で "python-like" な API と 本物の ドキュメントを提供するために開発されています。...

thinkphp5.0.1-automatic-getshell

thinkphp5.0.1-automatic-getshell thinkphp5.0.1自動getshellスクリプト thinkphp5.0.1を使用する際に遭遇するいくつかの小さな問題を解決し、ツールを自作することで手動での再現の手間を省きました。...

CVE-2026-59207

n8n is an open source workflow automation platform. Prior to 2.27.4 and 2.28.1, the AI Agents feature did not enforce the Allowed HTTP Request Domains restriction configured on credentials when an MCP tool was pointed at an arbitrary URL, allowing a member-level user with use-only access to a...

SQL Injection

Overview n8n is a n8n Workflow Automation Tool Affected versions of this package are vulnerable to SQL Injection in the MySQL v1 node's executeQuery operation, which interpolates evaluated ... expression values directly into raw SQL strings without parameterization. An attacker can execute...

PT-2026-36901

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.32 n8n versions prior to 2.17.4 n8n versions prior to 2.18.1 Description A flaw in the SeaTable node's 'row:search' and 'row:get' operations allows user-controlled input to be concatenated directly into SQL query...

Missing Authorization

Overview n8n is a n8n Workflow Automation Tool Affected versions of this package are vulnerable to Missing Authorization via the dynamic-node-parameters endpoints. An attacker can access and exfiltrate sensitive credentials belonging to other users by supplying a foreign credential ID in the...

PT-2026-33010

🔒 CyberSecurity CVE-2024-44738 & CVE-2024-44337: n8n Workflow Automation Critical Flaws — Detec… "Security Arsenal’s analysis of the recent Pillar Security disclosure regarding n8n…" 🔗 https://t.co/U8qg6uYpWr CyberSecurity ThreatIntel alertfatigue triage alertmonitor...

EUVD-2026-8760

n8n has Arbitrary Command Execution via File Write and Git Operations...

GHSA-5XRP-6693-JJX9 n8n Unsafe Workflow Expression Evaluation Allows Remote Code Execution

n8n contains a critical Remote Code Execution RCE vulnerability in its workflow Expression evaluation system. Expressions supplied by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently isolated from the underlying runtime. An...