uro

uro Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: incremental urls e.g. /page/1/ and /page/2/ blog posts and similar human written conten...

ilk-toolkit

IoT Lab KiiT ToolKit ilk-toolkit A Toolkit designed for IoT Lab KiiT to convert any Linux Distro into a Red Team Machine. This project was necessitated by the unreliability of 'kali-linux-everything' repo on certain installations and the subsequent depracation of 'katoolin' repo in Debian-based...

gobuster

Gobuster 💻 Introduction A fast and flexible brute-forcing tool written in Go Gobuster is a high-performance directory/file, DNS and virtual host brute-forcing tool written in Go. It's designed to be fast, reliable, and easy to use for security professionals and penetration testers. ✨ Features 🚀...

Pentest-Cheat-Sheet

Pentest Cheat Sheet There are many cheat sheets out there, but this is mine. It's a work in progress right now, and lives as a rought draft that's updated a lot , at times. I started this while I was studying for my OSCP, but it's now evolving to include more practical things that I need as a red...

pentest-tools

pentest-tools A collection of custom security tools for quick needs. Important note ‼ A big clean occured in 2022-11 ‼ Some useless/not working scripts have been archived and some others have been moved to their own repository to get more visibility, feel free to check them: apk-analyzer...

Sudomy

Sudomy Subdomain Enumeration & Analysis Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing advanced automated reconnaissance framework. This tool can also be used for OSINT Open-source intelligence activities. Features ! For recent time, Sudomy has these...

catnip

Cat-Nip 自動化基本ペンテストツール このツールは、情報収集、監査、レポート作成といった基本的なペンテスト作業を完全に自動化します。 使用方法 Cat-Nip のダウンロード / クローン git clone https://github.com/baguswiratmaadi/catnip Cat-Nip ディレクトリに移動 cd catnip Cat-Nip に権限を付与 chmod 777 catnip.sh Cat-Nip を実行 ./catnip.sh 変更履歴 1.0 初回リリース Cat-Nipで自動実行されるペンテストツール Whois Lookup DNSmap...

catnip

Cat-Nip Automated Basic Pentest Tool this tool will make your basic pentesting task like Information Gathering, Auditing, And Reporting so this tool will do every task fully automatic. Usage Guide Download / Clone Cat-Nip git clone https://github.com/baguswiratmaadi/catnip Go Inside Cat-Nip Dir c...

AlienTec-Recon-Tool

AlienTec 👽 Recon-Tool ❤️ Your Support Makes a Difference Thanks for using the AlienTec Recon-Tool! This is a passion project and will always be available as a free, open-source version. Your support helps accelerate the development of the planned Pro version and keeps this free tool maintained. If...

GO-2026-5052 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, crossplane-provider-azure-authorization, splunk-otel-collector, cert-manager, nfpm, telegraf, crossplane-provider-azure-sql, grafana, crossplane-provider-family-azure, x509-certificate-exporter, gobuster, goreleaser,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: helm-set-status, chartmuseum, gptscript, trivy, harbor-registry, wgcf, src, terraform-provider-azapi, cloud-sql-proxy, k8sgpt, thanos-operator, kor, kapp, fulcio, rancher-system-agent, headlamp, aactl, prometheus, kubernetes-csi-driver-hostpath, hubble, cerbos,...

web-exploitation-lab

🌐 Web Exploitation Lab Payloads, techniques et cheatsheet w...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: kserve-rest-proxy, cluster-proportional-autoscaler, helm-set-status, otel-cli, aws-node-termination-handler, envoy-ratelimit, ghaudit, kubernetes-csi-external-attacher, openbao, juicefs-csi-driver, keda, terraform-provider-azapi,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: deck-fips, chartmuseum-fips, secrets-store-csi-driver-provider-aws, harbor-scanner-trivy, kyverno-policy-reporter-plugins-trivy-fips, rancher-pushprox, crossplane-provider-aws-cloudwatchlogs-fips, pulumi-language-yaml, bank-vaults, wal-g, aws-node-termination-handler...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: rancher-pushprox, bank-vaults, db-operator, falco-exporter-fips, pluto, scorecard, fleet-server-fips, rancher-agent, rqlite-fips, json-exporter, cluster-api-gcp-controller-fips, aws-eks-pod-identity-agent-fips, flannel-cni-plugin-fips, kustomize, helm-docs,...

[SECURITY] Fedora 42 Update: gobuster-3.8.2-2.fc42

Directory/File, DNS and VHost busting tool written in Go...

[SECURITY] Fedora 43 Update: gobuster-3.8.2-1.fc43

Directory/File, DNS and VHost busting tool written in Go...

Fedora: Security Advisory (FEDORA-2025-36b3527937)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 42 : gobuster (2025-36b3527937)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-36b3527937 advisory. Fixes CVE-2025-58188, unretire package and update to 3.8.2. Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 43 : gobuster (2025-723b7f2990)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-723b7f2990 advisory. Fixes CVE-2025-58188, unretire package and update to 3.8.2. Tenable has extracted the preceding description block directly from the Fedora security advisory...