MacOSThreatTrack

MacOS ThreatTrack v2.0 Herramienta mejorada de recopilación de información de seguridad para sistemas macOS con capacidades avanzadas de detección de amenazas. Descripción MacOSThreatTrack es una herramienta exhaustiva de reconocimiento de seguridad basada en bash, diseñada para la detección...

WAES

WAES - Web Auto Enum & Scanner Version 1.2.77 WAES is a professional-grade bash-based web enumeration and reconnaissance platform designed for Capture The Flag CTF competitions, Bug Bounty hunting, and Penetration Testing. It automates the complex workflow of security scanning by orchestrating...

Dnsrr

DNSrr DNSrr es una herramienta escrita en bash, utilizada para enumerar toda la información jugosa de los registros DNS. Utiliza diferentes técnicas como Fuerza Bruta Directa de DNS Fuerza Bruta Inversa de DNS Snooping de Caché DNS Transferencia de Zona DNS Para obtener toda la información posibl...

payloadgenerator

PGen PGen es una herramienta escrita en Bash para generar los payloads de Meterpreter más comunes a través de MSFvenom, parte del framework Metasploit. Acerca de PGen es un envoltorio alrededor de MSFvenom que proporciona una experiencia más amigable para generar múltiples tipos de payloads...

scscanner_sh

scscanner - Escáner Masivo de Códigos de Estado scscanner es una herramienta para leer el código de estado de respuesta HTTP de sitios web a partir de listas. Esta herramienta tiene la capacidad de filtrar solo códigos de estado específicos y guardar el resultado en un archivo. Características...

HMAC_Bruteforcer

HMACBruteforcer Very Slow HMAC Key Bruteforcer Implemented in Bash Uses: OpenSSL Crunch Optional...

CVE-2026-84427

A vulnerability was determined in zhayujie CowAgent up to 2.1.7. Affected is an unknown function of the file agent/tools/bash/bash.py of the component Bash Tool. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has been publicly disclosed an...

CVE-2026-84427 zhayujie CowAgent Bash Tool bash.py denial of service

A vulnerability was determined in zhayujie CowAgent up to 2.1.7. Affected is an unknown function of the file agent/tools/bash/bash.py of the component Bash Tool. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has been publicly disclosed an...

CVE-2026-84427

CVE-2026-84427 affects zhayujie CowAgent versions up to 2.1.7 . The vulnerability resides in the Bash Tool component, specifically in the file agent/tools/bash/bash.py. The root-cause function is not precisely identified in the CVE description, though a linked GitHub report title references an ou...

EUVD-2026-69782

A vulnerability was determined in zhayujie CowAgent up to 2.1.7. Affected is an unknown function of the file agent/tools/bash/bash.py of the component Bash Tool. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has been publicly disclosed an...

dsh2shell

dsh2shell Unauthenticated RCE PoC for expo...

APACHE-2.4.49-2.4.50-exploit

CVE-2021-42013-PoC A lightweight, interactive Bash utility de...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2026-33829 Este repositorio contiene una herramienta auto...

CVE-2026-42074 OpenClaude: Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` Input

OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Prior to version 0.5.1, the dangerouslyDisableSandbox parameter is exposed as part of the BashTool input schema, meaning the LLM an untrusted principal per the project's own threat model can set ...

CVE-2026-42074

OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Prior to version 0.5.1, the dangerouslyDisableSandbox parameter is exposed as part of the BashTool input schema, meaning the LLM an untrusted principal per the project's own threat model can set ...

OpenClaude 安全漏洞

OpenClaude is an open-source coding assistant CLI developed by Gitlawb, which supports multiple backends. Prior to version 0.5.1, OpenClaude had a security vulnerability. This vulnerability stemmed from the dangerouslyDisableSandbox parameter being exposed in the BashTool input mode, and the...

CVE-2026-10214 zhayujie chatgpt-on-wechat Bash Tool bash.py _get_safety_warning os command injection

A weakness has been identified in zhayujie chatgpt-on-wechat up to 2.0.8. This issue affects the function getsafetywarning of the file agent/tools/bash/bash.py of the component Bash Tool. Executing a manipulation can lead to os command injection. The attack can be launched remotely. The exploit h...

CVE-2026-10214

The CVE affects zhayujie chatgpt-on-wechat Bash Tool (up to 2.0.8). The vulnerability is in agent/tools/bash/bash.py, _get_safety_warning, enabling os command injection via manipulated input and allowing remote exploitation. Exploit code is public (PoC), with the patch in version 2.0.9 (commit 16...

CVE-2026-10214 zhayujie chatgpt-on-wechat Bash Tool bash.py _get_safety_warning os command injection

A weakness has been identified in zhayujie chatgpt-on-wechat up to 2.0.8. This issue affects the function getsafetywarning of the file agent/tools/bash/bash.py of the component Bash Tool. Executing a manipulation can lead to os command injection. The attack can be launched remotely. The exploit h...

CVE-2026-10214

A weakness has been identified in zhayujie chatgpt-on-wechat up to 2.0.8. This issue affects the function getsafetywarning of the file agent/tools/bash/bash.py of the component Bash Tool. Executing a manipulation can lead to os command injection. The attack can be launched remotely. The exploit h...