loot-me

linux-loot Post-Exploit-Berichtserstellung. Sammelt Dateien / Befehle und stellt sie in Markdown bereit, bereit für die Berichterstellung, und hilft beim Auffinden sensibler Informationen...

vulnreport

Progetto Abbandonato Questo progetto non è attualmente mantenuto ed è stato abbandonato. Vulnreport Piattaforma di gestione e automazione dei penetration test Vulnreport è una piattaforma per la gestione dei penetration test e la generazione di report di findings ben formattati e utilizzabili,...

envizon

envizon – von evait security EOL https://github.com/evait-security/envizon/issues/130 Wir evait security sind für die interne Projektdokumentation zu https://gitlab.com/invuls/pentest-projects/pcf umgezogen. Netzwerkvisualisierung & Pentest-Berichterstattung Version 5.0 Dieses Tool wird von evait...

Smersh

SMERSH Smersh è uno strumento collaborativo orientato al pentest utilizzato per tracciare l'avanzamento delle missioni della tua azienda e generare rapporti. Anteprima frontend Angular: Documentazione Tutte le informazioni sono disponibili al seguente indirizzo:...

nl-kat-coordination

OpenKAT क्या है? OpenKAT का उद्देश्य सूचना प्रणालियों की स्थिति की निगरानी, रिकॉर्डिंग और विश्लेषण करना है। मूल आधार यह है कि कई बड़ी सुरक्षा घटनाएँ छोटी त्रुटियों और ज्ञात कमजोरियों के कारण होती हैं, और यदि आप उन्हें समय पर खोजते और हल करते हैं, तो आपके सिस्टम और बुनियादी ढाँचे काफी अधिक सुरक्षि...

prometheus

Installing Prometheus Prometheus è un'applicazione Ruby e funzionerà su qualsiasi sistema che esegue una versione recente 1.8.7 o superiore di Ruby. Per installare Prometheus, segui i seguenti passaggi: 1. Crea una directory chiamata prometheus. 2. Estrai i file di prometheus nella directory. 3...

CVE-Exploit-Research-Development

🔐 Strumento di Exploit SSH Solo per Uso Educativo 📌 Descrizione Questo strumento dimostra lo sfruttamento di: CVE-2008-0166 CVE-2008-1657 Si connette a servizi SSH vulnerabili e fornisce: Shell interattiva persistente Registrazione dell'esecuzione dei comandi Generazione automatica di report PDF ...

SteppingStones

Stepping Stones उद्देश्य रेड टीम गतिविधि के लिए एक केंद्र, जो अभिलेख रखरखाव, परिस्थितिजन्य जागरूकता और रिपोर्टिंग में सहायता करता है। Stepping Stones टीम के लिए गतिविधि लॉग करने और रिपोर्ट स्निपेट उत्पन्न करने हेतु एक वेब-आधारित UI प्रदान करता है। UI को इतना तीव्र रखने का लक्ष्य है कि इसका उपयोग...

petereport

PeTeReport PeTeReport Pe nTe st Report é uma ferramenta de relatório de vulnerabilidades de aplicações de código aberto projetada para auxiliar esforços de pentest/redteam, simplificando a tarefa de escrever e gerar relatórios. Focada na segurança de produtos, a ferramenta ajuda pesquisadores de...

pwndoc

PwnDoc PwnDoc è un'applicazione di reporting per penetration test che rende semplice e facile scrivere i tuoi risultati e generare un report Docx personalizzabile. L'obiettivo principale è avere più tempo per Pwn e meno tempo per Doc condividendo dati come le vulnerabilità tra gli utenti...

faction

OWASP - FACTION Framework di generazione report e collaborazione per PenTesting Faction è ora un progetto OWASP! Puoi trovare maggiori informazioniqui Sponsor Sponsor Premium...

POC-CVE-2026-19626

CVE-2026-19626 — रिपोर्ट जनरेशन में RCE प्रमाणित, गैर-एडमिन स्थिति: CONFIRMED — पूर्ण-Remote, गैर-एडमिन, केवल-REST 6.7.2-14.el9 लैब, 2026-08-21। हथियारबद्ध श्रृंखला poc.py यही करता है: 1. किसी भी सामान्य org उपयोगकर्ता के रूप में login करें 2. name: "=system''" के साथ POST /rest/group —...

JarHunter

JarHunter – Erweitertes JAR-Analyse- und Extraktionswerkzeug JarHunter ist ein Werkzeug, das entwickelt wurde, um große JAR-Dateien schnell und effizient zu durchsuchen, zu erkunden und bestimmte Klassen zu extrahieren. Anstatt manuell Tausende von Klassen zu durchsuchen, ermöglicht JarHunter,...

pwndoc

PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...

EUVD-2026-65062

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

CVE-2026-19626

A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during server-side report rendering, resulting in...

CVE-2026-19626

CVE-2026-19626 is a remote code execution vulnerability affecting Tenable Security Center via its report generation functionality. An authenticated, non-administrative user can supply specially crafted input that is processed unsafely during server-side report rendering, leading to arbitrary code...

EUVD-2026-58727

A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during server-side report rendering, resulting in...

CVE-2026-19626

A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during server-side report rendering, resulting in...

CVE-2026-19626 Remote Code Execution

A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during server-side report rendering, resulting in...