EUVD-2026-125265

Cudy TR3000 before 2.5.42 contains an authentication bypass vulnerability in the Mosquitto plugin authpluginjwt.so that accepts unsigned JWTs using alg none. Attackers holding any Cudy-trusted client certificate can authenticate as admincudydevice on port 8883 and publish batchcmd requests to...

pythoncode-tutorials

Python Code Tutorials This is a repository of all the tutorials of The Python Code website. List of Tutorials Ethical Hacking Scapy Getting Started With Scapy: Python Network Manipulation Tool Building an ARP Spoofer. code Detecting ARP Spoof attacks. code How to Make a DHCP Listener using Scapy ...

gtunnel

Documentation can be found at: https://hotnops.gitbook.io/gtunnel/...

cve-2024-12085

CVE-2024-12085 Infoleak exploit Note, this exploit is not versatile! Target module and checksums are hardcoded. Automatic checksum calculation has yet to be implemented. Miscellaneous files port-forwarding.py is modified from https://gist.github.com/WangYihang/e7d36b744557e4673d2157499f6c6b5e. It...

t14m4t

t14m4t t14m4t is an automated brute-forcing attack tool, wrapper of THC-Hydra and Nmap Security Scanner. t14m4t is scanning an user defined target or a document containing targets for open ports of services supported by t14m4t , and then starting brute-forcing attack against the services running ...

Spartan

Spartan Recon Like a Pro Wiki • Usage • Gallery Features Subdomain Scan Using Aquatone & Sublist3r Httprob for only Live sites Masscan for open ports Identifing CMS using CMSeeK Grabing URL's from waybackMachine ScreenShot using Aquatone Brute forcing directories and files using Dirsearch Cors Sc...

dscanner

dScanner 🔍 Automated web reconnaissance tool for security audits Description dScanner consolidates multiple reconnaissance tools into a single command for the initial phase of web pentesting. Only use with authorized systems!!!! 🚀 Installation Required dependencies: curl dnsutils nmap whois httpx...

odat

Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid...

PortDog

PortDog PortDog is a network anomaly detector aimed to detect port scanning techniques. It is entirely written in python and has easy-to-use interface. It was tested on Ubuntu 15. Please note that, it is not working on Windows OS due to suffering from capturing RAW packets.I am working on to writ...

attack-surface-framework

Attack Surface Framework Overview ASF aims to protect organizations acting as an attack surface watchdog, provided an “Object” which might be a: Domain, IP address or CIDR Internal or External, ASF will discover assets/subdomains, enumerate their ports and services, track deltas and serve as a...

gdb-frontend

GDBFrontend is an easy, flexible and extensionable gui debugger. Installing Requirements GDB = 8.2 with python3 python3 = 3.6 tmux PIP Package Python Wheel Recommended You can install GDBFrontend with pip. sudo python3 -m pip install gdbfrontend if it is already installed and you are upgrading su...

CVE-2026-24061

CVE-2026-24061 Exploit - Work Version v0.1 Usage Run the script with a target host: python3 exploit.py 192.168.1.1 -p 2323 --debug Arguments positional arguments: target IP or hostname of the target options: -h, --help show this help message and exit -p, --port PORT Port default 23 --debug Enable...

gost

GO Simple Tunnel A simple security tunnel written in golang Features Listening on multiple ports Multi-level forwarding chain Rich protocol TCP/UDP port forwarding Reverse Proxy and Tunnel TCP/UDP transparent proxy DNS resolver and proxy TUN/TAP device and TUN2SOCKS Load balancing Routing control...

trigmap

About Trigmap is a bash wrapper for Nmap. You can use it to easily run nmap scans and, especially, to collect information into a well organized directory hierarchy. The use of Nmap makes the script portable easy to run not only on Kali Linux and very efficient thanks to the optimized Nmap...

Woeful

Woeful A high performance Wisp server that has packet analysis. Features Wisp V1 Support Pcap network capture Blacklisting & Whitelisting ports and domains Is it fast? It's faster then WispServerCpp. The other benchmarks are more nuanced. Dependencies Big thanks to all of these projects:...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

net-creds

Thoroughly sniff passwords and hashes from an interface or pcap file. Concatenates fragmented packets and does not rely on ports for service identification. Screenshots --- Sniffs URLs visited POST loads sent HTTP form logins/passwords HTTP basic auth logins/passwords HTTP searches FTP...

pbscan

SUMMARY polarbearscan is an attempt to do faster and more efficient banner grabbing and port scanning. It combines two different ideas which hopefully will make it somewhat worthy of your attention and time. The first of these ideas is to use stateless SYN scanning using cryptographically protect...

secator

The pentester's swiss knife. Features • Supported commands • Installation • Usage • Documentation • Join us on Discord ! secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to improve productivity for pentesters a...

Portspoof

Portspoof Portspoof emulates open ports and service signatures across all 65535 TCP ports, turning the reconnaissance phase from a quick scan into a long, resource-intensive process. Scanners see thousands of convincing but fake services, making it impractical to identify the real attack surface...