electronegativity

Electronegativity ⚠️ We're no longer actively maintaining this project ⚠️ What's Electronegativity? Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron-based applications. It leverages AST and DOM parsing to look for security-relevant configurations, as...

autotimeliner

AutoTimeliner Extrayez automatiquement une chronologie forensique à partir de dumps de mémoire volatile. AutoTimeliner exécute plusieurs plugins Volatility3 sur des images mémoire Windows, Linux et macOS, puis fusionne leur sortie en une seule chronologie CSV triée : Plugin de chronologie génériq...

petereport

PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...

email-prediction-asterisks

ASTERISKS & OBELIX Email prediction asterisks est un script qui vous permet d'identifier les e-mails cachés derrière des astérisques. C'est une application parfaite pour les analystes OSINT et les forces de sécurité. Il permet de prédire intelligemment, à l'aide des fuites d'Intelx, quels e-mails...

fileintel

fileintel Cet outil permet de collecter diverses sources de renseignements pour un fichier donné. Fileintel est conçu de manière modulaire afin que de nouvelles sources de renseignements puissent être facilement ajoutées. Les fichiers sont identifiés par leur empreinte MD5, SHA1, SHA256. La sorti...

h8mail

h8mail is an email OSINT and breach hunting tool using different breach and reconnaissance services, or local breaches such as Troy Hunt's "Collection1" and the infamous "Breach Compilation" torrent. 📖 Table of Content Table of Content Features APIs Usage Usage examples Thanks & Credits Related...

chaos

chaos chaos is an 'origin' IP scanner developed by RST in collaboration with ChatGPT. It is a niche utility with an intended audience of mostly penetration testers and bug hunters. An origin-IP is a term-of-art expression describing the final public IP destination for websites that are publicly...

hostintel

hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...

hostintel

hostintel Cet outil est utilisé pour collecter diverses sources de renseignement concernant des hôtes. Hostintel est écrit de manière modulaire afin que de nouvelles sources de renseignement puissent être facilement ajoutées. Les hôtes sont identifiés par nom d'hôte FQDN, domaine ou adresse IP. C...

godehashed

Godehashed Un outil Go qui utilise l'API de dehashed.com pour rechercher des actifs compromis. Les résultats peuvent ensuite être compilés dans un fichier CSV pour une analyse plus approfondie. Capture d'écran Dehashed API Vous devez fournir une clé API à l'outil. Voir apikeytemplate.txt pour un...

Security_Article

SecurityArticle scrapy website Article and link ... 0x01 Создание проекта 0x02 Определение целей 0x03 Создание краулера 0x04 Хранение контента например pip3 install lxml,scrapy 文章标题 ArticleTitle //@id="wrapper"/main/div/article/header/h5/a/text //@id="wrapper"/main/div/article/header/h5/a 文件链接...

CVE-2026-78209

exceljs through 4.4.0 fails to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output. Attackers who can influence exported cell values can inject formulas that execute when the CSV file is opened in a spreadsheet application, potentially exfiltrating data or...

CVE-2026-78209

exceljs-hardened versions before 5.0.0 are vulnerable to CSV formula injection . The library fails to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output. An attacker who can influence exported cell values can inject spreadsheet formulas that execute when the ...

CVE-2026-78209

exceljs through 4.4.0 fails to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output. Attackers who can influence exported cell values can inject formulas that execute when the CSV file is opened in a spreadsheet application, potentially exfiltrating data or...

Nessus-CVE-POC-Finder

Nessus-CVE-POC-Finder Python script to parse .nessus file, ext...

Exploit for Path Traversal in Fortinet Fortiproxy

CVE-2018-13379 — Mass Exploit for Fortine...

Exploit for CVE-2026-27944

Nginx UI Discovery Scanner - CVE-2026-27944 Version Detector ht...

EUVD-2017-13053

Malware in sbrugna...

CVE-2020-22275

Easy Registration Forms ER Forms Wordpress Plugin 2.0.6 allows an attacker to submit an entry with malicious CSV commands. After that, when the system administrator generates CSV output from the forms information, there is no check on this inputs and the codes are executable...

Trawler - PowerShell Script To Help Incident Responders Discover Adversary Persistence Mechanisms

Dredging Windows for Persistence What is it? Trawler is a PowerShell script designed to help Incident Responders discover potential indicators of compromise on Windows hosts, primarily focused on persistence mechanisms including Scheduled Tasks, Services, Registry Modifications, Startup Items,...