558 matches found
mikrotik-beast
Mikrotik Beast tool Mass MikroTik WinBox Exploitation tool, CVE-2018-14847 This tool allows you to scan a range of network hosts CIDR against the CVE-2018-14847 winbox exploit. Usage $ python3 mikrotikbeast.py Accepted input examples Example 1: '192.168.5.0/24' Example 2: '172.16.0.0/16' NOTES:...
Explotacion-RCE-Pentesting-BlueKeep-CVE-2019-0708-
在受控环境中利用 BlueKeep 漏洞(CVE-2019-0708) 本项目为学术性质,专注于在 Windows Server 2008 R2 的 RDP 服务中利用 BlueKeep(CVE-2019-0708) 漏洞期间的分析、执行与故障排查,为 Instituto Profesional Los Leones 的网络安全课程所开发。 目标 展示在虚拟化环境中从使用 Nmap 进行初步侦察,到通过 Metasploit/Meterpreter 提权并与目标系统交互的完整渗透测试流程。 环境与工具 攻击机: Kali Linux x64 受害机: Windows Server 200...
PSO - Printer Security Offensive
🖨️ PSO - Printer Security Offensive Version 0.4.0 | Changelog "Nmap for Printers" - Offensive security tool for printer pentesting. Fast. Focused. No bloat. ⚠️ Legal Notice PSO includes assessment and exploitation features. Always obtain explicit authorization before use. Safe mode: Scanning + IPP...
apex v2.4.0-canary.d5c18874
Pensar Apex AI-powered penetration testing using autonomous agents — directly in your terminal. Run blackbox and whitebox pentests that explore, reason, and surface real vulnerabilities. Want to run from the cloud or integrate it with your CI/CD? See Pensar Console. Use Cases Developers Run...
Xalgorix Autonomous AI Pentesting Agent 4.5.124
Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported - so you get proof, not a pile of maybes to triage. Self-hosted, private, and bring-your-own-LLM. Built in Go + TypeScript...
claude-pentest
claude-pentest A local pentesting toolkit built for Claude Co...
Vulnera
Strix The open-source AI pentesting tool. Autonomous AI h...
Xalgorix Autonomous AI Pentesting Agent 4.5.67
Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported - so you get proof, not a pile of maybes to triage. Self-hosted, private, and bring-your-own-LLM. Built in Go + TypeScript...
cyber-ai-agent
╔══════════════════════════════════════╗ ║ CYBER-OMNI...
sentinelx
sentinelx SentinelX AI — Next-gen AI-powered cybersecurit...
Grimoire
書 — The Pentesterʼs Spellbook Answer the questions. Unleash th...
webstrike-framework
WebStrike — Automated Web Pentesting Framework Created by...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 — React2Shell Interactive exploitation tool...
Kali-setup
🛠️ kali-setup A single bash script that pulls in the 20 most-...
bug-bounty-reports
Bug Bounty Reports — Josef Basner Sanitized, redacted, resp...
Exploit for Missing Authentication for Critical Function in Cpanel
🚀 CVE-2026-41940 - cPanel/WHM Authentication Bypass Exploit...
From Controlled to the Wild: Evaluation of Pentesting Agents for the Real-World
AI pentesting agents are increasingly credible as offensive security systems, but current benchmarks still provide limited guidance on which will perform best in real-world targets. Existing evaluation protocols assess and optimize for predefined goals such as capture-the-flag, remote code...
Pen-Strategist: A Reasoning Framework for Penetration Testing Strategy Formation and Analysis
Cyber threats are rapidly increasing, expanding their impact from large-scale enterprises to government services and individual users, making robust security systems increasingly essential. However, a significant shortage of skilled cybersecurity professionals exacerbates this challenge. While...