OSTE-Meta-Scan

OSTE-Meta-Scanner This project is now maintained and supported by OSTE and is no longer available as an open-source project. For inquiries, commercial use, or support, please contact OSTE via LinkedIn, or official website, or sales team at +213.7.98.38.94.54 via whatsup. This project aims to...

macOS_security_audit

🔒 macOS Security Audit A Bash-based security auditing toolkit for macOS that checks system hardening settings against CIS Benchmark recommendations and generates JSON/HTML reports. Created by Bartłomiej Pogwizd · https://www.youtube.com/@pTech-pl Overview This toolkit consists of two scripts:...

dorkbot

dorkbot Escanea resultados de búsqueda de Google u otros en busca de vulnerabilidades. dorkbot es una herramienta modular de línea de comandos para realizar escaneos de vulnerabilidades contra conjuntos de páginas web devueltas por consultas de búsqueda de Google u otras fuentes compatibles. Se...

Exploit for Interpretation Conflict in Wordpress

CVE-2026-63030 | WP2Shell xpl0ited by gr1txhttps://gith...

ai-pentest-agent

AI Pentest Agent 🛡️🤖 The first open-source autonomous AI pe...

ExploitIQ

⚡ ExploitIQ Autonomous AI-Powered Penetration Testing Assis...

H4C-WEB

H4C-WEB !/bin/bash =======================================...

Exploit for CVE-2025-14847

CYBERDUDEBIVASH MONGODB DETECTOR TOOL v2026.1 Detect expose...

EUVD-2018-8086

Malware in sbrugna...

Exploit for Authentication Bypass by Primary Weakness in Crushftp

CrushFTP CVE-2025-31161 Exploit Tool 🔓 Advanced detection an...

Web Cache Vulnerability Scanner - A Go-based CLI Tool For Testing For Web Cache Poisoning

Web Cache Vulnerability Scanner WCVS is a fast and versatile CLI scanner for web cache poisoning developed by Hackmanit. The scanner supports many different web cache poisoning techniques, includes a crawler to identify further URLs to test, and can adapt to a specific web cache for more efficien...

NinjaDroid - Ninja Reverse Engineering On Android APK Packages

NinjaDroid is a simple tool to reverse engineering Android APK packages. Published at: https://snapcraft.io/ninjadroid $ snap install ninjadroid --channel=beta Overview NinjaDroid uses AXMLParser together with a series of Python scripts based on aapt, keytool, string and such to extract a series ...

Typodetect - Detect The Active Mutations Of Domains

This tool gives blue teams, SOC's, researchers and companies the ability to detect the active mutations of their domains, thus preventing the use of these domains in fraudulent activities, such as phishing and smishing. For this, Typodetect allows the use of the latest available version of the TL...

CVE-2018-16234

MorningStar WhatWeb 0.4.9 has XSS via JSON report files...

Code injection

MorningStar WhatWeb 0.4.9 has XSS via JSON report files...

PT-2018-13447

Name of the Vulnerable Software and Affected Versions MorningStar WhatWeb version 0.4.9 Description The issue is related to a security problem where MorningStar WhatWeb is affected by XSS via JSON report files. Recommendations For version 0.4.9, at the moment, there is no information about a newe...

CVE-2018-16234: Improper Neutralization of Input During Web Page Generation

MorningStar WhatWeb 0.4.9 has XSS via JSON report files...

UPDATE: OWASP Dependency-Check 3.1.2

PenTestIT RSS Feed My first post about this open source OWASP project was about an older version. This post discusses the changes made to the open source software composition analysis utility in the latest release yesterday. This is the OWASP Dependency-Check 3.1.2! Most importantly NVD urls were...

Phishing Kit Hunter

Phishing Kit Hunter PhishingKitHunter or PKHunter is a tool made for identifying phishing kits URLs used in phishing campaigns targeting your customers and using some of your own website files as CSS, JS, …. This tool – write in Python 3 – is based on the analysis of referer’s URL which GET...

Cuckoo Sandbox v1.1 - Automated Malware Analysis

Cuckoo Sandbox is a malware analysis system. It simply means that you can throw any suspicious file at it and in a matter of seconds Cuckoo will provide you back some detailed results outlining what such file did when executed inside an isolated environment. Cuckoo generates a handful of differen...