SMBetray

SMBetray Version 1.0.0. This tool is a PoC to demonstrate the ability of an attacker to intercept and modify insecure SMB connections, as well as compromise some secured SMB connections if credentials are known. Background Released at Defcon26 at "SMBetray - Backdooring and Breaking Signatures" I...

uBlockOrigin-HUGE-AI-Blocklist

uBlockOrigin & uBlacklist Huge AI Blocklist A huge blocklist of manually curated sites 1000+ that contain AI generated content, for the purposes of cleaning image search engines Google Search, DuckDuckGo, and Bing with uBlock Origin or uBlacklist. Also works on mobile iOS, iPadOS, Android via...

ai-ublock-blacklist

AI uBlock Origin Blacklist A personal list for uBlock Origin blocking AI content farms. Pull requests welcome. Install You can click here to subscribe to this list automatically. This link works only if you have uBlock Origin installed. Alternatively, import the following URL as a 3rd party list ...

Stevos-AI-Blocklist

Stevo's AI Blocklist A filter list for uBlock Origin and AdGuard that hides specific website features which use Generative AI and content labeled as AI-generated. Available for PC/Linux Firefox, Chrome, Edge, Brave, macOS Firefox, Chrome, Edge, Safari, Android Firefox, and iOS/iPadOS Safari, Brav...

EUVD-2026-98299

The WP Testimonials WordPress plugin through 1.4.13 does not properly escape testimonial content and reverses WordPress's HTML sanitization when rendering it, allowing users with the Author role and above to store JavaScript that executes in the session of any user viewing the testimonials,...

CVE-2025-24893

PoC for CVE-2025-24893 — XWiki Remote Code Execution Safe PoC PoC for CVE-2025-24893: XWiki' Remote Code Execution exploit for versions prior to 15.10.11 , 16.4.1 and 16.5.0RC1. ⚠️ IMPORTANT — AUTHORIZED TESTING ONLY This repository contains a proof-of-concept PoC project intended for educational...

secator

The pentester's swiss knife. Features • Supported commands • Installation • Usage • Documentation • Join us on Discord ! secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to improve productivity for pentesters a...

ThreatExchange

Projects in this Repository This repository originally started as code to support Meta's ThreatExchange API, but over time has grown to include a number of projects to support signal exchange and content moderation in general. Below are a list of sub-projects. PDQ Image Hashing and Similarity...

WhatTheHack

What The Hack - Repo Welcome to the What The Hack repo on GitHub. This repo contains Coach content designed for people planning to host a What The Hack event with students in an organization. If you are an organization that is interested in attending or hosting a What The Hack event, please visit...

S3Scanner

S3Scanner A quick and dirty script to find unsecured S3 buckets and dump their contents 💧 Using The tool has 2 parts: 1 - s3finder.py This script takes a list of domain names and checks if they're hosted on Amazon S3. Found S3 domains are output to file with their corresponding region in format...

ladder

Ladder Ladder is a http web proxy. 简体中文 Ladder is a developer tool for testing and analyzing paywall implementations and content delivery behavior on modern websites. It allows developers, researchers, and publishers to simulate different client environments such as browsers and crawlers and...

CSPBypass

CSP Bypass Welcome to CSPBypass.com , a tool designed to help ethical hackers bypass restrictive Content Security Policies CSP and exploit XSS Cross-Site Scripting vulnerabilities on sites where injections are blocked by CSPs that only allow certain whitelisted domains. Website Visit CSPBypass.co...

monsoon

monsoon A fast HTTP enumerator that allows you to execute a large number of HTTP requests, filter the responses and display them in real-time monsoon is a fast and flexible HTTP fuzzer that can be used for a wide variety of actions ranging from content discovery to credential bruteforcing. You ca...

dockle

Dockle - Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start Dockle helps you: 1. Build Best Practice Docker images 2. Build secure Docker images Checkpoints includes CIS Benchmarks $ brew untap goodwithtech/dockle who use 0.1.16 or older version $ bre...

S2-045-EXP-POC-TOOLS

CNVD-ID CNVD-2017-02474 Release Date 2017-03-07 Hazard Level High AV:N/AC:L/Au:N/C:C/I:C/A:C Affected Products Apache Struts =2.3.5, =2.5, CVE Identifier CVE-2017-5638 Problem It is possible to perform a RCE attack with a malicious Content-Type value. If the Content-Type value...

wBlock

wBlock The end of Safari ad-blocking B.S. A free, open-source ad blocker for Safari on Mac, iPhone, iPad, and Apple Vision Pro. wBlock is a free, open-source Safari content blocker for macOS, iOS, iPadOS, and visionOS. Five content blocking extensions provide a combined capacity of 750,000 rules,...

6cy

sixcy — .6cy Container Format A Rust implementation of the .6cy archive format featuring: Self-describing blocks : Every block carries its own magic, version, codec UUID, sizes, and integrity checksums Mandatory integrity verification : CRC32 header checks + BLAKE3 content hashes on every block...

ssrf-sheriff

SSRF Sheriff This is an SSRF testing sheriff written in Go. It was originally created for the Uber H1-4420 2019 London Live Hacking Event, but it is now being open-sourced for other organizations to implement and contribute back to. Features Respond to any HTTP method GET, POST, PUT, DELETE, etc...

browsertunnel

browsertunnel Browsertunnel is a tool for exfiltrating data from the browser using the DNS protocol. It achieves this by abusing dns-prefetch, a feature intended to reduce the perceived latency of websites by doing DNS lookups in the background for specified domains. DNS traffic does not appear i...

MANSPIDER

MANSPIDER Crawl SMB shares for juicy information. File content searching + regex is supported! What's New in v2.0 Manspider 2.0 is here! This brings significant improvements: New and improved text extraction powered by Kreuzberg - now supporting PDF, DOCX, XLSX, PPTX, images with OCR, and many...