WP Cerber < 8.9.3 - Broken Access Control

WP Cerber 8.9.3 contains a bypass of /wp-json access control caused by improper handling of trailing '?' character, letting unauthorized users access protected REST API endpoints, exploit requires sending a request with a trailing '?'. id: CVE-2021-37598 info: name: WP Cerber 8.9.3 - Broken Acces...

WordPress Collapsing Categories <= 3.0.8 - SQL Injection

Collapsing Categories plugin for WordPress = 3.0.8 contains a sqlinjection caused by insufficient escaping of 'taxonomy' parameter in /wp-json/collapsing-categories/v1/get REST API, letting unauthenticated attackers execute arbitrary SQL queries, exploit requires sending crafted 'taxonomy'...

LearnPress < 4.2.7.1 - SQL Injection

The LearnPress - WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'conlyfields' parameter of the /wp-json/learnpress/v1/courses REST API endpoint in all versions up to, and including, 4.2.7 due to insufficient escaping on the user supplied parameter and lack of...

LeadConnector < 3.0.22 - Unauthenticated Arbitrary Data Write

LeadConnector WordPress plugin 3.0.22 contains a broken access control caused by missing authorization in a REST route, letting unauthenticated attackers overwrite existing data remotely, exploit requires no authentication. id: CVE-2026-1890 info: name: LeadConnector 3.0.22 - Unauthenticated...

WordPress Events Calendar 6.8.2.1 - Information Disclosure

The Events Calendar WordPress plugin 6.8.2.1 contains missing access checks in the REST API, letting unauthenticated users access information about password protected events, exploit requires no authentication. id: CVE-2024-5333 info: name: WordPress Events Calendar 6.8.2.1 - Information Disclosu...

theHarvester

About theHarvester is a simple to use, yet powerful tool designed to be used during the reconnaissance stage of a red team assessment or penetration test. It performs open source intelligence OSINT gathering to help determine a domain's external threat landscape. The tool gathers names, emails,...

trape

trape stable v2.0 People tracker on the Internet: Learn to track the world, to avoid being traced. Trape is an OSINT analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time. It was created with the aim of teaching the world how larg...

hoverfly

API simulations for development and testing Hoverfly is a lightweight, open source API simulation tool. Using Hoverfly, you can create realistic simulations of the APIs your application depends on. Replace slow, flaky API dependencies with realistic, re-usable simulations Simulate network latency...

burp-automation

BurpOMation Performing automated scan using Burp Suite Pro & Vmware Burp Rest API with Robot Framework using Python3. Blog Visit blog for detailed explanation of each step. Explanation & Installation Blog What it does One click run using bash installs all the dependencies with verbose...

Tiredful-API

What is Tiredful API? Tiredful API is intentionally designed broken app. The aim of this web app is to teach developers, QA or security professionals about flaws present in webservices REST API due to insecure coding practice. Who can use Tiredful API? Web developers Web Pentesters Security...

FACT_core

The Firmware Analysis and Comparison Tool FACT Contents Why FACT? Setup Usage Documentation Contribute Additional plugins Analysis Import/Export Presentations Social Acknowledgments License Why FACT? Firmware analysis can be used to achieve several interesting goals. Chief among those are...

whatportis

whatportis .. image:: https://github.com/opencve/opencve/workflows/Tests/badge.svg :target: https://github.com/ncrocfer/whatportis/actions/workflows/tests.yml .. image:: https://badge.fury.io/py/whatportis.svg :target: https://pypi.python.org/pypi/whatportis/ .. image::...

caronte

caronte$ Caronte is a tool to analyze the network flow during capture the flag events of type attack/defence. It reassembles TCP packets captured in pcap files to rebuild TCP connections, and analyzes each connection to find user-defined patterns. The patterns can be defined as regex or using...

PyJFuzz

PyJFuzz is a small, extensible and ready-to-use framework used to fuzz JSON inputs , such as mobile endpoint REST API, JSON implementation, Browsers, cli executable and much more. Version| 1.1.0 ---|--- Homepage| http://www.mseclab.com/ Github| https://github.com/mseclab/PyJFuzz Author| Daniele...

archerysec

...

WSSAT

WSSAT - Web Service Security Assessment Tool WSSAT is an open source web service security scanning tool which provides a dynamic environment to add, update or delete vulnerabilities by just editing its configuration files. This tool accepts WSDL address list as input file and for each service, it...

pwndrop

pwndrop is a self-deployable file hosting service for sending out red teaming payloads or securely sharing your private files over HTTP and WebDAV. If you've ever needed to quickly set up an nginx/apache web server to host your files and you were never happy with the limitations of python -m...

wp2shell-poc

wp2shell PoC WordPress REST API のバッチルート混乱チェーンに対する認証前タイミングベース SQL インジェクション PoC として、史上初の PoC です CVE-2026-63030 + CVE-2026-60137 単に管理者パスワードのクラックを試みるだけではなく、コマンド実行を達成しました。 影響を受けるバージョン: WordPress 6.9.0–6.9.4 および 7.0.0–7.0.1。6.9.5 と 7.0.2 で修正されました。 root@kitploit: python3 poc.py https://target.example...

sqlipy

sqlipy SQLiPy는 SQLMap API를 사용하여 SQLMap을 통합하는 Burp Suite용 Python 플러그인입니다. SQLMap에는 SQLMap 스캔을 실행하는 RESTful 기반 서버가 포함되어 있습니다. 이 플러그인은 API를 자동으로 시작하거나 이미 실행 중인 API에 연결하여 스캔을 수행할 수 있습니다. 요구 사항 Jython 2.7 최대 2.7.2 Jython 2.7.3을 사용하지 마십시오. 확장 기능이 실패하는 버그가 있습니다. Java 1.7 또는 1.8 Jython 2.7 베타 버전에서 필요 참고:...

Cortex

Cortex は、脅威インテリジェンス、デジタルフォレンジック、インシデントレスポンスの過程で SOC、CSIRT、セキュリティ研究者が頻繁に直面する共通の問題を解決しようとしています。それは、収集したオブザーバブル を、複数のツールに問い合わせる代わりに単一のツールへの問い合わせによって大規模に分析する にはどうすればよいか、という問題です。 Cortex は、オープンソースかつ無料のソフトウェアであり、まさにこの目的のために TheHive Project によって作成されました。IP アドレス、メールアドレス、URL、ドメイン名、ファイル、ハッシュなどのオブザーバブルは、Web...