PhantomCrawler

.png PhantomCrawler is a security testing and research tool that simulates website interactions from different proxy IP addresses to analyze how websites behave under varied network and geolocation conditions. Features: Utilizes a list of proxy IP addresses from a specified file. Supports both HT...

TREVORspray

TREVORspray 2.0 TREVORspray is a modular password sprayer with threading, SSH proxying, loot modules, and more! By @thetechr0mancer Installation: pip install git+https://github.com/blacklanternsecurity/trevorproxy pip install git+https://github.com/blacklanternsecurity/trevorspray See the...

tor-ip-changer

tor-ip-changer request new identity every X seconds interval using TOR client !!!iam not responsible for anything what you will do with this program, or for any other sts !!! it is for education purposes only...

teampcp-supply-chain-attack

TeamPCP Supply Chain Attack: Technical Analysis & Detection Guide CVE-2026-33634 CVSS 9.4 — The most impactful CI/CD supply chain attack of 2026 so far. Between March 19–25, 2026, threat actor TeamPCP also tracked as DeadCatx3, PCPcat, ShellForce, CanisterWorm executed a cascading supply chain...

mcp-security-checklist

🔐 MCP Security Checklist A practical, community-maintained security checklist for teams building and deploying Model Context Protocol MCP servers and AI agent infrastructure. Why This Exists MCP is being adopted rapidly. Security guidance is lagging behind. This checklist gives security engineers...

RRC_steganography

RRC Steganography Rotation Range-Coding RRC Steganography — an efficient and provably secure linguistic steganographic method that embeds secret messages into natural-language text generated by large language models. Paper : Efficient Provably Secure Linguistic Steganography via Range Coding ACL...

ProxyBroker

ProxyBroker .. image:: https://img.shields.io/pypi/v/proxybroker.svg?style=flat-square :target: https://pypi.python.org/pypi/proxybroker/ .. image:: https://img.shields.io/travis/constverum/ProxyBroker.svg?style=flat-square :target: https://travis-ci.org/constverum/ProxyBroker .. image::...

coalmine

Cloud Canary Token Management — Deploy, monitor, and rotate deceptive credentials across AWS and GCP to detect unauthorized access. !WARNING Alpha Version — Coalmine is in early development. Basic functionality is the current priority, and the application should not be considered fully security...

requests-ip-rotator

Proudly sponsored by Swiftproxy High-performance residential proxies with an 80M+ IP pool across 195+ countries — improve request success rates and reduce IP blocks during large-scale data collection and browser automation. Perfect for use with requests-ip-rotator, Playwright, Selenium, and other...

Last.fm Rotation 1.0 - Path Traversal

Directory traversal vulnerability in lastfm-proxy.php in the Last.fm Rotation lastfm-rotation plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the snode parameter. id: CVE-2014-5181 info: name: Last.fm Rotation 1.0 - Path Traversal author: DhiyaneshDK...

IPGhost

IPGhost IPGhost is a strong tool for ethical hackers. It helps you stay private and anonymous online by using the Tor network. This tool automatically changes your IP address, making it hard for anyone to track your online activities. Features Automatic installation of required dependencies Tor,...

CredKing

CredKing Overview Benefits Basic Usage Plugin Usage Gmail Okta Installation Development Plugin specific arguments Overview Easily launch a password spray using AWS Lambda across multiple regions, rotating IP addresses with each request. Brought to you by: Benefits Fully supports all AWS Lambda...

Shiva

Shiva First of all, put Shiva on watch. I will be upgrading it to a full stress testing suite over time. Shiva is designed to perform Denial Of Service DOS attack on wordpress sites by loading all jquery scripts at once through load-scripts.php. So basically its an exploit for CVE-2018-6389...

CYBERDUDEBIVASH-5G-Core-Key-Rotation-Ghost-Admin-Auditor

CYBERDUDEBIVASH 5G Core Key Rotation & Ghost Admin Auditor v1.1 © 2026 CYBERDUDEBIVASH – All Rights Reserved Global Authority in Zero-Trust 5G & Private Network Security Bhubaneswar, Odisha, India Production-grade tool for detecting & remediating CVE-2026-0622 Ghost Admin privilege escalation &...

Taken

Taken Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover. What all you can do with Subdomain Takeover - Cookies stealing, If cookies are set with domain attribute set to the hijacked subdomain. CORS request, If Access-Control-Allow-Origin is set to...

flareprox

FlareProx 🔥 Simple IP Rotation & URL Redirection via Cloudflare Workers FlareProx automatically deploys HTTP proxy endpoints on Cloudflare Workers for easy redirection of all traffic to any URL you specify. It supports all HTTP methods GET, POST, PUT, DELETE, etc. and provides IP masking through...

evilwaf

EvilWAF is an advanced transparent MITM Firewall bypass proxy and deep WAF vulnerability scanner designed for authorized security testing. It operates at the transport layer — it does not touch payloads, cookies, or headers from your tools. Works with any tool likeffuz, sqlmap, nuclei and etc tha...

IPRotate_Burp_Extension

IPRotateBurpExtension Extension for Burp Suite which uses AWS API Gateway to change your IP on every request. More info: Bypassing IP Based Blocking Using AWS - Rhino Security Labs Note/Warning This method of using AWS API Gateways to obfuscate source IP is now considered prohibited according to...

CTT-Sovereign-Vortex

CTT-Sovereign-Vortex CTT-Terrminus-Vortex CVE-2026-2406 🕰️ CTT-Sovereign-Vortex: Terrminus Refraction CVE-2026-2406 "The system is only as secure as the time it occupies." Lead Architect: Americo Simoes @amexsimoes Methodology: Convergent Time Theory CTT v2.0 Target: Terrminus Authentication...

apimspray

apimspray apimspray is a specialized Entra ID Passwordspraying Toolkit designed for authorized security research and Red Teaming. It utilizes Azure API Management APIM gateways as a distributed, rotating proxy layer for IP Rotating. Read Blog Post for more Details about this project Prerequisites...