the-endorser

🚨 The Endorser is no longer maintained. If you need support or consultation for your OSINT endeavours, drop me an e-mail [email protected] 🚨 The Endorser An OSINT tool that allows you to draw out relationships between people on LinkedIn via endorsements/skills. Check out the example digraph,...

cloudlist

Features • Installation • Usage • Configuration • Running cloudlist • Supported providers • Library • Join Discord Cloudlist is a multi-cloud tool for getting Assets from Cloud Providers. This is intended to be used by the blue team to augment Attack Surface Management efforts by maintaining a...

pybatfish

Got questions, feedback, or feature requests? Join our community onSlack! Pybatfish Pybatfish is a Python client for Batfish. What is Batfish? Batfish is a network validation tool that provides correctness guarantees for security, reliability, and compliance by analyzing the configuration of...

DSCourier

DSCourier विवरण DSCourier एक प्रूफ-ऑफ-कॉन्सेप्ट है जो WinGet कॉन्फ़िगरेशन COM API का उपयोग करके Microsoft-हस्ताक्षरित बाइनरी के माध्यम से DSC कॉन्फ़िगरेशन लागू करता है। एक अलग ब्लॉग पोस्ट इस तकनीक का पूरा तकनीकी विवरण प्रदान करता है। DSCourier मुख्य रूप से एक शोध विषय से बनाया गया था और इसे एक...

drupalgeddon2

Drupalgeddon 2 MSF exploit module for Drupalgeddon 2 CVE-2018-7600 / SA-CORE-2018-002 Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

NETGEAR - Authentication Bypass

NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers are vulnerable to authentication bypass vulnerabilities which could allow network-adjacent attackers to bypass authentication on affected installations. id:...

SolarWinds Web Help Desk - Authentication Bypass

SolarWinds Web Help Desk 12.8.8 HF1 and earlier contains an authentication bypass vulnerability in the WebObjects session handling. By crafting a request with a manipulated path component to an internal admin page endpoint, an unauthenticated attacker can access privileged administrative function...

brawl-public-game-001

BRAWL One of the challenging problems for cyber security researchers developing detection and response capabilities is finding a realistic environment in which to test their hypothesis and capabilities. The cheapest method is to test capabilities on a small lab network. But this environment is...

security_monkey

NOTE: Security Monkey is in maintenance mode and will be end-of-life in 2020. For AWS users, please make use of AWS Config. For GCP users, please make use of Cloud Asset Inventory. Security Monkey Security Monkey monitors your AWS and GCP accounts for policy changes and alerts on insecure...

Apache Flink 1.5.1 - Local File Inclusion

Apache Flink 1.5.1 is vulnerable to local file inclusion because of a REST handler that allows file uploads to an arbitrary location on the local file system through a maliciously modified HTTP HEADER. id: CVE-2020-17518 info: name: Apache Flink 1.5.1 - Local File Inclusion author: pdteam severit...

cve-2026-15748

root@kitploit: CVE-2026-15748 — Forminator Forms Unauthenticated RCE Crafted by Yora For Educational & Authorized Testing Only --- 📌 Deskripsi CVE-2026-15748 merupakan kerentanan yang berkaitan dengan plugin Forminator pada WordPress. Tool ini dibuat untuk membantu security research dan authorize...

CVE-2019-19393

Rittal CMC PU III – Stored XSS PoC Application: Rittal CMC PU III Web management Devices: CMC PU III 7030.000 Software Revision: From V3.11.002 to V3.15.704 Hardware Revision: From V3.00 to V6.01 Attack type: Stored XSS Solution: Update to Software Revision V3.17.10 or later Summary: Web...

CVE-2022-29582-Exploit

CVE-2022-29582 इस रिपॉजिटरी में CVE-2022-29582 के लिए एक्सप्लॉइट कोड है, जो iouring लिनक्स कर्नेल का में एक स्थानीय विशेषाधिकार वृद्धि Local Privilege Escalation है। डिफ़ॉल्ट कॉन्फ़िगरेशन प्रभावित होते हैं और किसी विशेष विशेषाधिकार की आवश्यकता नहीं होनी चाहिए। आप writeup यहाँ पा सकते हैं:...

Mlflow <2.9.2 - Path Traversal

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. id: CVE-2023-6909 info: name: Mlflow 2.9.2 - Path Traversal author: Hyunsoo-ds severity: high description: | Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. impact: | Successful...

PaperCut NG/MF Missing Authentication for Critical Function Vulnerability

PaperCut NG/MF contains a missing authentication for critical function vulnerability which allows an unauthenticated remote attacker to modify certain system configurations. This vulnerability can be chained with CVE-2026-82078...

Brute-Ratel-C4-Community-Kit

Brute-Ratel-C4 يحتوي هذا المستودع على سكريبتات وإعدادات ومحمّلات حمولة مُهملة لأداة Brute Ratel C4 https://bruteratel.com/. أي عنصر يُضاف إلى مجلد deprecated لن يكون جزءًا من الإصدار الأحدث من BRc4...

CVE-2013-3827

CVE-2013-3827 أداة فحص سريعة PoC للتكوينات الشائعة التي قد تكون متاحة عبر اجتياز الدليل بسبب CVE-2013-3827 الاستخدام: 1. قم بتعديل محتويات traversal.py لتناسب احتياجاتك 2. python3 traversal.py...

CVE-2026-81578

An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to the completion of access validation checks. This allow...

Palo Alto Expedition - SQL Injection

An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expeditio...