wsvuls

WSVuls Website vulnerability scanner detect issues outdated server software and insecure HTTP headers. What's WSVuls? WSVuls is a simple and powerful command line tool for Linux, Windows and macOS. It's designed for developers/testers and for those workers in IT who want to test vulnerabilities a...

nullmap

nullmap A very simple driver manual mapper based on my older voidmap and CVE-2023-21768 POC by chompie and b33f. Because the underlying IoRing post-exploitation memory r/w primitive is not handling many consequent reads and writes very well, I've decided to overwrite CR4 to disable SMEP/SMAP to...

Exploit-Mapper

Exploit Mapper A comprehensive vulnerability management platform that analyzes security scan reports, enriches vulnerability data with exploit intelligence, and provides actionable risk scoring for prioritized remediation. Features Multi-Format Import : Support for CSV and Excel vulnerability...

MemoryMapper

Memory Mapper Memory Mapper is a lightweight library which allows the ability to map both native and managed assemblies into memory by either using process injection of a process specified by the user or self-injection; the technique of injecting an assembly into the currently running process...

ADCSDevilCOM

ADCSDevilCOM A C tool for requesting certificates from ADCS using DCOM over SMB. This tool allows you to remotely request X.509 certificates from CA server using the MS-WCCE protocol over DCOM and It bypasses the traditional endpoint mapper requirement by using SMB directly. !WARNING Use only in...

LocalStranger

LocalStranger LocalStranger is a Proof of Concept project designed to demonstrate how dangerous a vulnerable kernel-mode driver actually is. WinNotify.sys as I call it, msft.sys, is a very dangerous vulnerable driver exposing arbitrary kernel primitives due to a complete lack of caller validation...

Pentest-Mapper

Pentest Mapper Pentest Mapper is a Burp Suite extension that integrates the Burp Suite request logging with a custom application testing checklist. The extension provides a straightforward flow for application penetration testing. The extension includes functionalities to allow users to map the...

credmap

credmap: The Credential Mapper Credmap is an open source tool that was created to bring awareness to the dangers of credential reuse. It is capable of testing supplied user credentials on several known websites to test if the password has been reused on any of these. An official introductionary...

social_mapper

Social Mapper This tool is no longer actively maintained, parts of it may still work and I will accept pull requests to keep it up to date WARNING: FACEBOOK NOW DETECTS THIS AFTER A FEW 100 SEARCHES, USE ONLY DISPOSABLE FACEBOOK ACCOUNTS A Social Media Mapping Tool that correlates profiles via...

crime-mapper

Habilitando investigaciones cibernéticas desde un navegador Una herramienta prototipo para mapear delitos cibernéticos Creado por @UKDanielCard ¡La versión experimental es la versión viva y de vanguardia Live Demo es principalmente donde almaceno una versión relativamente estable... ¡pero todo es...

Active-Scanning-and-Information-Gathering-in-ICS-SCADA-Networks-Using-Network-Mapper-NMAP

Active Scanning and Information Gathering in ICS/SCADA Networks using Network Mapper NMAP Turkish This research paper has already been published before and you can also find the original .pdf version at here...

CVE-2019-14678

CVE-2019-14678: XML External Entity in SAS XML Mapper SAS XML Mapper 9.45 has an XML External Entity XXE vulnerability that can be leveraged by malicious attackers in multiple ways. Examples are Local File Reading, Out Of Band File Exfiltration, Server Side Request Forgery, and/or Potential Denia...

pentest-mapper

Pentest Mapper Pentest Mapper is a Burp Suite extension that integrates the Burp Suite request logging with a custom application testing checklist. The extension provides a straightforward flow for application penetration testing. The extension includes functionalities to allow users to map the...

ReflectivePluginLoader

ReflectivePluginLoader Un mapeador PE reflexivo mínimo con una interfaz de plugin intercambiable en caliente para Windows x64. Mapea una DLL directamente desde un búfer de bytes en memoria, resuelve sus exportaciones y llama a una ABI IPlugin limpia sin tocar LoadLibrary. Código complementario pa...

Security Bulletin: jackson-mapper vulnerability addressed in IBM Big Replicate LiveData Migrator 3.4

Summary jackson-mapper vulnerability addressed in IBM Big Replicate LiveData Migrator Vulnerability Details CVEID:CVE-2019-10172 DESCRIPTION: A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehau...

DEBIAN-CVE-2026-97902

In the Linux kernel, the following vulnerability has been resolved: fs: don't return -EINVAL for successful nested thaw Commit 7366f8b6fc6a "fs: handle freezing from multiple devices" replaced the freezeholders bitmask with per-holder counters to allow nested freezes. In the bitmask version, a th...

EUVD-2026-86756

In the Linux kernel, the following vulnerability has been resolved: fs: don't return -EINVAL for successful nested thaw Commit 7366f8b6fc6a "fs: handle freezing from multiple devices" replaced the freezeholders bitmask with per-holder counters to allow nested freezes. In the bitmask version, a th...

esperto-wiimote

Esperto Wiimote !IMPORTANT This software requires an updated/fixed Wiimote kernel driver found here. After installation, run sudo sed -i '/ATTRinhibited="1"/s/^//' /etc/udev/rules.d/99-wiimote.rules to un-inhibit IR and accelerometer events. Based on the esperto input system, esperto-wiimote is a...

UBUNTU-CVE-2026-97902

In the Linux kernel, the following vulnerability has been resolved: fs: don't return -EINVAL for successful nested thaw Commit 7366f8b6fc6a "fs: handle freezing from multiple devices" replaced the freezeholders bitmask with per-holder counters to allow nested freezes. In the bitmask version, a th...

sadcloud

Sadcloud sadcloud is a tool for spinning up insecure AWS infrastructure with Terraform. It supports approx. 84 misconfigurations across 22 AWS Services. The inital set of misconfigurations were drawn from ScoutSuite, NCCGroup's Multi-cloud auditing tool. sadcloud was created to easily allow...