laforge

Laforge Security Competition Infrastructure Automation Framework Laforge enables rapid development of infrastructure for the purpose of information security competitions. Using a simple and intuitive configuration language, Laforge manages a dependency graph and state management and allows for...

jackhammer

Jackhammer: One Security vulnerability assessment/management tool to solve all the security team problems. What is Jackhammer? Jackhammer is a collaboration tool built with an aim of bridging the gap between Security team vs dev team, QA team and being a facilitator for TPM to understand and trac...

Agentic-SOC-Simulation

🛡️ Agentic SOC Parallel Simulation ASPS: Autonomous Security Operations Parallel Simulation Center Redefining the Future of Security Operations: Full-Stack SOC Parallel Simulation, Multi-Agent Collaboration, and Data-Driven Autonomous Defense 🇨🇳 中文文档 Chinese Version This project is a cutting-edge...

reconmap

Reconmap Pentesting Management, Automation and Reporting Platform Reconmap is an open source vulnerability assessment and penetration testing platform designed to support security professionals throughout the entire engagement lifecycle. It enables penetration testers and InfoSec teams to...

purify

Purify All-in-one tool for managing vulnerability reports 🎮 Demo 📃 Docs 📹 Quick Vimeo...

heartwood

❤️🪵 Radicle Heartwood Protocol & Stack Heartwood is the third iteration of the Radicle Protocol, a powerful peer-to-peer code collaboration and publishing stack. The repository contains a full implementation of Heartwood, complete with a user-friendly command-line interface rad and network daemon...

CVE-2022-27925

CVE-2022-27925 Zimbra RCE 2022 This repo is part of the hgrab-framework dork title: "Zimbra Web Client Sign In" Affected product Zimbra Collaboration Suite Network Edition 9.0.0 Patch 23 and earlier Zimbra Collaboration Suite Network Edition 8.8.15 Patch 30 and earlier Installation Install the ap...

faction

OWASP - FACTION PenTesting Report Generation and Collaboration Framework Faction is now an OWASP Project! You can find more informationhere Sponsors Premium Sponsors...

dradis-ce

欢迎使用 Dradis Framework —— 一款自动化渗透测试报告生成工具 Dradis 是一个开源协作框架和渗透测试报告生成器，帮助信息安全团队简化报告工作流程。通过支持从 Burp Suite、Nessus、Nmap 等工具导入数据，Dradis 自动化了网络安全测试流程中繁琐的部分，让您能够专注于分析和建议。 更快地生成一致、专业的渗透测试报告——减少手动工作。 要试用 Dradis Community，您可以部署自己的实例（您需要拥有云服务商的账户才能开始）。 我们的目标 有效共享信息。 易于使用，易于被采纳。否则相比其他系统优势不大。 灵活：具有强大而简单的扩展接口。...

dradis-ce

Welcome to the Dradis Framework An Automated Pentest Reporting Tool Dradis is an open-source collaboration framework and penetration testing report generator that helps InfoSec teams streamline reporting workflows. With support for importing data from tools like Burp Suite, Nessus, and Nmap, Drad...

CVE-2026-93647 Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Crafted Calendar COUNTER Message From Address

An unauthenticated calendar sender can place active markup in a COUNTER message's RFC From address. Selecting the message in Zimbra Classic triggers stored XSS, allowing the attacker to access mailbox data and act as the victim...

CVE-2026-93647

The Zimbra Collaboration Suite Classic Web Client is vulnerable to a stored Cross-Site Scripting (XSS) flaw. An unauthenticated calendar sender can inject active markup into the RFC From address of a COUNTER message . When a user selects this message within Zimbra Classic, the XSS is triggered, p...

CVE-2026-93643

The Zimbra Collaboration Suite is vulnerable to a critical security flaw when OnlyOffice/Document Editing is enabled. An unauthenticated remote attacker with access to a supported public Briefcase document can exploit unsigned save fields to perform path-traversal writes . This vulnerability can ...

CVE-2026-93643 Zimbra Collaboration Suite OnlyOffice Integration Path Traversal Leading to Remote Code Execution via Unauthenticated /downloadas Request

When OnlyOffice/Document Editing is available, an unauthenticated remote attacker with access to an existing supported public Briefcase document can abuse unsigned save fields to perform path-traversal writes and execute commands as zimbra...

CVE-2026-93642 Zimbra Collaboration Suite Modern Web Client Stored Cross-Site Scripting via Forged Share Invitation

An unauthenticated sender can forge a share notification that triggers stored XSS when a signed-in Zimbra Modern recipient clicks Accept Share, allowing the attacker to access mailbox data and act as the victim...

CVE-2026-93642

The Zimbra Collaboration Suite Modern Web Client is vulnerable to Stored Cross-Site Scripting (XSS) due to a flaw where an unauthenticated sender can forge a share notification. When a signed-in Zimbra Modern recipient clicks the Accept Share button, the XSS is triggered. This allows an attacker ...

CVE-2026-93641

The Zimbra Collaboration Suite Classic Web Client is vulnerable to Stored Cross-Site Scripting (XSS) . An unauthenticated sender can forge a share notification that, when clicked by a signed-in recipient, executes malicious scripts. This allows an attacker to access mailbox data and act as the vi...

CVE-2026-93641 Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Forged Share Invitation

An unauthenticated sender can forge a share notification that triggers stored XSS when a signed-in Zimbra Classic recipient clicks Accept Share, allowing the attacker to access mailbox data and act as the victim...

autopsy

Autopsy 4 http://www.sleuthkit.org/ 15 de marzo de 2016 DESCRIPCIÓN GENERAL Autopsy es una interfaz gráfica para The Sleuth Kit y otras herramientas de código abierto de informática forense digital. Autopsy 3 fue una reescritura completa desde Autopsy 2 para hacerlo basado en Java. Autopsy 4 mejo...

Pentest-Collaboration-Framework

Pentest Collaboration Framework Pentest Collaboration Framework: un kit de herramientas de código abierto, multiplataforma y portátil para automatizar procesos rutinarios al realizar diversos trabajos de pentesting. Explora la documentación » ‼️ Enlaces importantes...