SECMON

SECMON - Infosec Watching Tool -red Description SECMON is a web-based tool for the automation of and with a web interface...

infosec-presentations

Info-sec Presentations by James Forshaw c 2019 A repository of previous info-sec presentations I've presented including supporting material...

WifiForge

provides a safe and legal environment for learning WiFi hacking. Based on the open source mininet-wifi, this project automatically sets up the networks and tools needed to run a variety of WiFi exploitation labs, removing the need for the overhead and hardware normally required to perform these...

AppSecEzine

AppSec Ezine Raising awareness towards the prevention of security risks is challenging. Most people are unaware of or just don’t have access to the right information. Keeping up the pace in the tech world is a golden rule. If you are not ready to deal with security issues, you are heading in the...

TekDefense

TekDefense Open Development projects for TekDefense All projects use the MIT License model, which basically means, use any of this as you see fit, but don't hold me responsible for any loss or damage that occurs from using or modifying any of these projects. Please visit www.TekDefense.com for...

msticpy

MSTIC Jupyter and Python Security Tools Microsoft Threat Intelligence Python Security Tools. msticpy is a library for InfoSec investigation and hunting in Jupyter Notebooks. It includes functionality to: query log data from multiple sources enrich the data with Threat Intelligence, geolocations a...

InfoSec-Black-Friday

InfoSec Black Friday & Cyber Monday Deals "InfoSec Cares" 2025 Edition All the deals for InfoSec related software/tools this coming Black Friday and Cyber Monday. ALL LINKS UPDATED FOR 2025! Many more incoming... Quick Personal Update After being involved in a car accident and everything going...

learn365

Learn365 This repository contains all the information shared during my Learn 365 Challenge. Learn 365 is a challenge to keep the learning spirit going on and challenge myself to learn something daily for the whole year, it can be anything from infosec to general life. Follow me on Twitter for...

dradis-ce

欢迎使用 Dradis Framework —— 一款自动化渗透测试报告生成工具 Dradis 是一个开源协作框架和渗透测试报告生成器，帮助信息安全团队简化报告工作流程。通过支持从 Burp Suite、Nessus、Nmap 等工具导入数据，Dradis 自动化了网络安全测试流程中繁琐的部分，让您能够专注于分析和建议。 更快地生成一致、专业的渗透测试报告——减少手动工作。 要试用 Dradis Community，您可以部署自己的实例（您需要拥有云服务商的账户才能开始）。 我们的目标 有效共享信息。 易于使用，易于被采纳。否则相比其他系统优势不大。 灵活：具有强大而简单的扩展接口。...

Hitachi Pentaho Business Analytics Server - Remote Code Execution

Hitachi Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x, is susceptible to remote code execution via server-side template injection. Certain web services can set property values which contain Spring templates that are interpreted downstream, thereby...

Citrix - Local File Inclusion

Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 are vulnerable to local file inclusion because they allow unauthenticated access to certain URL endpoints. id:...

Mnemosyne

Mnemosyne My personal infosec memo Fun fact The name of this project comes from the Greek goddess of memory: Mnemosyne. Moreover and regarding our story, it is interesting to note that, it's the origin of the word memory. Usage Mnemosyne is publicly available on the sub-domain of the same name of...

CVE-2026-19658

creationtimestamp| type| source ---|---|--- 2026-09-22 05:00:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mw3gyuhfup2f 2026-09-22 06:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/117313164290215449 2026-09-22 06:00:31+00:00| seen|...

infosec-interview-questions

Information Security Interview Questions A collection for interview questions for Information Security roles Table Of Contents Application Security Architect Blue Team Encryption Forensics General Incidence Response Networking Red Team Vulnerability Management Where Credit is Due Application...

CVE-2026-84750

creationtimestamp| type| source ---|---|--- 2026-09-19 12:00:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117297592669715483 2026-09-19 12:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mvun3mktk324...

CVE-2026-86814

creationtimestamp| type| source ---|---|--- 2026-09-19 07:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117296530943304712 2026-09-19 07:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mvu5ysa5xr2p 2026-09-19 15:03:41+00:00| seen|...

WordPress File Manager Plugin - Remote Code Execution

The WordPress File Manager plugin prior to version 6.9 is susceptible to remote code execution. The vulnerability allows unauthenticated remote attackers to upload .php files. id: CVE-2020-25213 Uploaded file will be accessible at:-...

CVE-2026-75885

creationtimestamp| type| source ---|---|--- 2026-09-18 23:01:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvtbknukgk2v 2026-09-19 00:00:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvtetlh4ez2b 2026-09-19 00:00:38+00:00| seen|...

telegram_bbbot

telegrambbbot Telegram 漏洞赏金机器人 https://telegram.me/bugbountychannel 历史 该机器人专为部署到 Heroku 而改编 本机器人的总体目标是——“为信息安全社区提供帮助！” 机器人使用 https://github.com/maddevsio/bbcrawler 获取信息 使用 heroku 的 https://github.com/heroku/go-getting-started 作为项目模板 机器人使用了 heroku.com 和 firebase.com 的免费账户 目的 机器人的目的： “尽快传递信息！”...

CVE-2026-92950

creationtimestamp| type| source ---|---|--- 2026-09-17 15:30:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvpxuq5hp72f 2026-09-17 16:09:51+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvq23rltdx2n 2026-09-17 18:34:21+00:00| seen|...