sslscan

sslscan2 sslscan version 2 has now been released. This includes a major rewrite of the backend scanning code, which means that it is no longer reliant on the version of OpenSSL for many checks. This means that it is possible to support legacy protocols SSLv2 and SSLv3, as well as supporting TLSv1...

msdat

Quentin HARDY --- [email protected] [email protected] MSDAT MSDAT M icros oft SQL D atabase A ttacking T ool is an open source penetration testing tool that tests the security of Microsoft SQL Databases remotely. Usage examples of MSDAT: You have a Microsoft database listening remotely...

CVE-2026-59827

승인된 Metabase CVE-2026-59827 침투 테스트 도구 승인된 침투 테스트 수행 중 Metabase 배포에서 CVE-2026-59827 의 존재를 검증하기 위한 승인된 보안 평가 유틸리티입니다. 이 도구는 파괴적이거나 지속적인 작업을 시도하기보다 통제된 개념 증명 시연을 수행하여 영향을 최소화하면서 취약점의 존재를 입증하도록 설계되었습니다. 모든 수행 작업은 전문 보안 평가에 적합한 감사 추적을 제공하기 위해 기록됩니다. 경고 이 프로젝트는 오직 귀하가 소유하거나 명시적인 서면 허가를 받은 시스템에서만 사용하도록...

badsuccessor

BadSuccessor.py Инструмент для пентеста, эксплуатирующий уязвимость повышения привилегий dMSA delegated Managed Service Account — делегированная управляемая учетная запись службы в средах Active Directory на Windows Server 2025. ⚠️ Правовое предупреждение Этот инструмент предназначен только для...

APTRS 安全漏洞

APTRS Automated Penetration Testing Reporting System is an open-source automated reporting tool based on Python and Django. It is designed specifically for penetration testers and security organizations. Versions of APTRS prior to 2.0.1 contained a security vulnerability. This vulnerability stemm...

📄 Novell GroupWise 2012 Traversal / Shell Upload

This code exploits the directory traversal vulnerability in Novell GroupWise 2012 before Support Pack 1 to steal files, and attempts to upload a web shell payload if possible, making it an effective penetration testing tool...

Exploit for SQL Injection in Cmsmadesimple Cms_Made_Simple

CMS-Made-Simple-2.2.10---SQL-Injection-Exploit-com-corre-o-de-...

Newly patched VMware vulnerability exploited by Iranian espionage group, Rocket Kitten

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here An Iranian cyber espionage gang known as Rocket Kitten has began delivering the Core Impact penetration testing tool on susceptible computers by exploiting a newly fixed severe vulnerability in VMware Workspace ONE...

SQLMap v1.4.9 - Automatic SQL Injection And Database Takeover Tool

SQLMap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lastin...

metasploit-framework

This is a Metasploit Framework repository, a widely used penetration testing tool. The framework is used for identifying and exploiting vulnerabilities in computer systems and applications. The primary target of this framework is the Metasploit Framework itself, which is a Ruby-based framework fo...