pentest-tools

pentest-tools A collection of custom security tools for quick needs. Important note ‼ A big clean occured in 2022-11 ‼ Some useless/not working scripts have been archived and some others have been moved to their own repository to get more visibility, feel free to check them: apk-analyzer...

ilk-toolkit

IoT Lab KiiT ToolKit ilk-toolkit Un kit diseñado para IoT Lab KiiT que permite convertir cualquier distribución de Linux en una máquina de Red Team. Este proyecto fue motivado por la falta de fiabilidad del repositorio 'kali-linux-everything' en ciertas instalaciones y la posterior descontinuació...

Sudomy

Sudomy Enumeración y Análisis de Subdominios Sudomy es una herramienta de enumeración de subdominios para recolectar subdominios y analizar dominios mediante reconocimiento automatizado avanzado framework. Esta herramienta también se puede utilizar para actividades de OSINT inteligencia de fuente...

gobuster

Gobuster 💻 Introducción Una herramienta de fuerza bruta rápida y flexible escrita en Go Gobuster es una herramienta de fuerza bruta de alto rendimiento para directorios/archivos, DNS y hosts virtuales, escrita en Go. Está diseñada para ser rápida, fiable y fácil de usar para profesionales de la...

catnip

Cat-Nip Herramienta Automatizada de Pentesting Básico Esta herramienta realizará tus tareas básicas de pentesting como recopilación de información, auditoría e informes, de forma completamente automática. Guía de Uso Descargar / Clonar Cat-Nip git clone https://github.com/baguswiratmaadi/catnip I...

catnip

Cat-Nip Automated Basic Pentest Tool this tool will make your basic pentesting task like Information Gathering, Auditing, And Reporting so this tool will do every task fully automatic. Usage Guide Download / Clone Cat-Nip git clone https://github.com/baguswiratmaadi/catnip Go Inside Cat-Nip Dir c...

Pentest-Cheat-Sheet

Pentest Cheat Sheet There are many cheat sheets out there, but this is mine. It's a work in progress right now, and lives as a rought draft that's updated a lot , at times. I started this while I was studying for my OSCP, but it's now evolving to include more practical things that I need as a red...

uro

uro Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: incremental urls e.g. /page/1/ and /page/2/ blog posts and similar human written conten...

AlienTec-Recon-Tool

AlienTec 👽 Recon-Tool ❤️ Tu Apoyo Marca la Diferencia Gracias por usar AlienTec Recon-Tool. Este es un proyecto apasionado y siempre estará disponible como versión gratuita y de código abierto. Tu apoyo ayuda a acelerar el desarrollo de la versión Pro planificada y mantiene actualizada esta...

GO-2026-5052 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, crossplane-provider-family-azure, grafana, cert-manager, goreleaser, nfpm, crossplane-provider-azure-authorization, splunk-otel-collector, crossplane-provider-azure-managedidentity, crossplane-provider-azure-sql, nuclei, telegraf, gobuster,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kubecolor, lazydocker, trivy, k3s, portieris, clickhouse-operator, azure-service-operator, kubernetes-csi-driver-nfs, falcoctl, ratify, src, argo-events, rclone, tkn, docker-machine-driver-harvester, harbor-cli, kpt, kor, kubernetes-dashboard-api, cilium-cli,...

web-exploitation-lab

🌐 Web Exploitation Lab Payloads, techniques et cheatsheet w...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: argo-rollouts, k8ssandra-client, trivy, timoni, falcoctl, crossplane-provider-azure-storage, x509-certificate-exporter, argo-events, percona-server-mongodb-operator, mods, kpt, kor, certificate-transparency, nri-haproxy, grafana-rollout-operator, contour, kubewatch,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: terraform-provider-azapi-fips, karpenter-fips, prometheus, prometheus-redis-exporter-fips, db-operator, commercial-chainloop-backend, kubernetes-csi-livenessprobe, crossplane-provider-aws-rolesanywhere-fips, nri-discovery-kubernetes, rancher-webhook, request-1279,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: terraform-provider-azapi-fips, db-operator, kubernetes-csi-livenessprobe, hcl2json, prometheus-stackdriver-exporter, sftpgo-plugin-geoipfilter, yunikorn-web, knative-storage-migrate, neuvector-scanner-fips, crossplane-provider-aws-wafv2, virt-handler-fips,...

[SECURITY] Fedora 42 Update: gobuster-3.8.2-2.fc42

Directory/File, DNS and VHost busting tool written in Go...

[SECURITY] Fedora 43 Update: gobuster-3.8.2-1.fc43

Directory/File, DNS and VHost busting tool written in Go...

Fedora: Security Advisory (FEDORA-2025-36b3527937)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 42 : gobuster (2025-36b3527937)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-36b3527937 advisory. Fixes CVE-2025-58188, unretire package and update to 3.8.2. Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 43 : gobuster (2025-723b7f2990)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-723b7f2990 advisory. Fixes CVE-2025-58188, unretire package and update to 3.8.2. Tenable has extracted the preceding description block directly from the Fedora security advisory...