interactsh

An OOB interaction gathering server and client library Features • Usage • • • •...

wsh

wsh wsh pronounced woosh is a web shell generator and command line interface. This started off as just an http client since interacting with webshells is a pain. There's a form, to send a command you have to type in an input box and press a button. I wanted something that fits into my workflow...

Elite

Obsoleto Temporalmente El proyecto padre Covenant ya no requiere una aplicación de cliente. Elite ha quedado temporalmente obsoleto. Utilice en su lugar la interfaz web incluida con el proyecto Covenant. Es posible que Elite se actualice eventualmente para ponerse al día con el proyecto Covenant...

inspector

MCP Inspector 用于检查 Model Context Protocol（MCP）服务器的开发者工具。它以单个包 @modelcontextprotocol/inspector 的形式发布，提供三种检查服务器的方式： Web — 一个基于 Vite + React + Mantine 的单页应用，带 Node 后端。 CLI — 一个可脚本化的命令行客户端，用于自动化、CI 和快速的智能体反馈循环。 TUI — 一个基于 Ink 构建的交互式终端界面。 三者都通过同一个全局 mcp-inspector 二进制文件运行： root@kitploit: npx...

spyse.py

spyse.py Envoltorio de API de Python y cliente de línea de comandos para las herramientas alojadas en spyse.com. "Spyse es un desarrollador de soluciones completas DAAS Datos como Servicio para profesionales de seguridad en Internet, administradores de sistemas corporativos y remotos, proveedores...

GHSA-RVX4-FFVW-M9Q3 Composer arbitrary command execution via a malicious package's Perforce source URL

Summary If the p4 Perforce CLI client is installed, a malicious dependency package from a package repository allowing arbitrary perforce source URLs packagist.org is safe could execute arbitrary commands when running composer install or composer update. Composer passed a package's Perforce source...

Weblate: SSRF via URL Parser Differential in `normalize_request_url` (wlc)

The Weblate CLI client wlc was found to be vulnerable to Server-Side Request Forgery SSRF due to a differential in URL parsing between the urllib and urllib3 libraries. The vulnerability was present in the normalizerequesturl function, which was meant to validate that outgoing API requests stayed...

EUVD-2023-1221

Malicious code in bioql PyPI...

CVE-2024-36066

The CMP CLI client in KeyFactor EJBCA before 8.3.1 has only 6 octets of salt, and is thus not compliant with the security requirements of RFC 4211, and might make man-in-the-middle attacks easier. CMP includes password-based MAC as one of the options for message integrity and authentication the...

CVE-2023-29194

Vitess is a database clustering system for horizontal scaling of MySQL. Users can either intentionally or inadvertently create a keyspace containing / characters such that from that point on, anyone who tries to view keyspaces from VTAdmin will receive an error. Trying to list all the keyspaces...

Pulsar - Network Footprint Scanner Platform - Discover Domains And Run Your Custom Checks Periodically

Pulsar is an automated network footprint scanner for Red Teams, Pentesters and Bounty Hunters. Its focused on discovery of organization public facing assets with minimal knowledge about its infrastructure. Along with network data visualization, it attempts to give a basic vulnerability score to...