Garud

An automation tool that scans sub-domains, sub-domain takeover and then filters out xss, ssti, ssrf and more injection point parameters. I made this tool to automate my recon and save my time. It really give me headache always type such command and then wait to complete one command and I type oth...

NucleiFuzzer

NucleiFuzzer = Nuclei + Paramspider + waybackurls + gauplus + hakrawler + katana + Fuzzing Templates Overview NucleiFuzzer is an advanced automation tool designed to streamline and optimize web application security testing by integrating a suite of powerful URL discovery and vulnerability scannin...

NetSet

NetSet Operational Security utility and automator. Version 1.1.0 NetSet is designed to automate a number of operations that will help the user with securing their network traffic. It also provides an easy way to gather proxies and run utilities through Tor. All the utilities installed and used by...

CVE-2024-3094-Vulnerability-Checker-Fixer

!Open Source Lovehttps://assets.kitploit.com/production/public/read...

webcopilot

WebCopilot An automation tool that enumerate subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities. Features • Installation • Usage • WebCopilot • Tools Used • Acknowledgement WebCopilot is an automation tool designed to enumerate...

Autopwn

Autopwn™ A simple bash based metasploit automation tool! With just a few clicks, own any android or windows device!! Autopwn in action Caution: This tool is purely for educational purposes, If you end up in any legal trouble and point a finger at me, I'll just laugh at you : The user is responsib...

burpa

burpa: Burp Automator A Burp Suite Automation Tool Requirements burp-rest-api Burp Suite Professional slackclient Usage $ python burpa.py -h / / / / / / / / / / / // / // / / / // / // / /./,// / ./,/ // burpa version 0.1 / by 0x4D31 usage: burpa.py -h -a scan,proxy-config,stop -pP PROXYPORT...

Shuffle

Automatización Shuffle Desplegar en Shuffle es una plataforma de automatización de código abierto, creada por y para los profesionales de la seguridad. Las operaciones de seguridad son complejas, pero no tienen por qué serlo. Diseñada para funcionar bien con MSSP y otros proveedores de servicios...

RapidWebRecon

Nuclei to PDF Report Generator A professional-grade automation tool designed to bridge the gap between technical vulnerability scanning and executive reporting. Developed by Adi Mahluf Tenroot Cyber Security. 🚀 Overview This project provides a seamless "one-command" workflow to audit web assets. ...

IOCScraper

IOC Scraper IOC Scraper 利用 IOCPARSER 服务从不同厂商的博客、PDF 和 CSV 文件中获取 IOC。解析 IOC 是一个耗时过程，使用当前脚本可以轻松自动提取和聚合 IOC。 功能 去混淆 IOC：支持提取和去混淆 IOC。 白名单 IOC：支持自定义 IOC 白名单。 源类型：支持多种来源，如博客、PDF、CSV 等。 支持的 IOC 类型 IOC Scraper 支持多种 IOC 类型。 IOC 类型| 状态 ---|--- ASN| 支持 IPv4、IPv6| 支持 URL、域名| 支持 Email| 支持 MD5、SHA1、SHA256、文件名...

DLLirant

DLLirant DLLirant es una herramienta para automatizar las investigaciones de DLL Hijacking y DLL Proxying sobre un binario especificado. Salida final del PoC cuando se encuentra un DLL Hijacking: Antigua demo en vivo similar a la nueva versión Cómo instalar Instala LLVM para Windows x64...

bip

Bip Bip es un proyecto que tiene como objetivo simplificar el uso de Python para interactuar con IDA. Sus principales objetivos son facilitar el uso de Python en la consola interactiva de IDA y la escritura de plugins. De un modo más general, el objetivo es automatizar tareas recurrentes realizad...

thinkphp5.0.1-automatic-getshell

thinkphp5.0.1-automatic-getshell Script de getshell automático para thinkphp5.0.1 Resuelve algunos pequeños problemas que se encuentran al usar thinkphp5.0.1, evitando la molestia de la reproducción manual mediante la creación de una rueda propia...

build.prop build-20260913

Pixel Prop Builder: Streamlined OTA to Build.prop Conversion Effortlessly extract and manage system properties from Pixel OTA updates with this robust automation suite. Designed for developers and enthusiasts alike, it simplifies the process of accessing and customizing Android build properties. ...

NPM: n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector

NPM: n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector vulnerability discovered by ? in WordPress Npm n8n versions 2.27.4...

CVE-2026-59207

n8n is an open source workflow automation platform. Prior to 2.27.4 and 2.28.1, the AI Agents feature did not enforce the Allowed HTTP Request Domains restriction configured on credentials when an MCP tool was pointed at an arbitrary URL, allowing a member-level user with use-only access to a...

SQL Injection

Overview n8n is a n8n Workflow Automation Tool Affected versions of this package are vulnerable to SQL Injection in the MySQL v1 node's executeQuery operation, which interpolates evaluated ... expression values directly into raw SQL strings without parameterization. An attacker can execute...

Exploit for Code Injection in N8N

CVE-2026-27495 — n8n JS Task Runner Sandbox Escape Sandbox es...

The vulnerability of Adobe InDesign’s computer layout automation tool, related to buffer overflow in dynamic memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the manipulation of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the manipulation of the zero pointer. Exploiting this vulnerability can allow an attacker to trigger a service failure using a specially created file...